Last updated: July 31, 2025. To access previous versions, please contact us directly.
1. Entities
Rocket Lab operates through a group of affiliated companies, legally registered under the following entities:
a. Trovant S.A. de C.V. – Mexico
b. Futuretech Development and Research S.L.U. – Spain
c. Xilany S.A. – Uruguay
d. RL Midia Online Ltda. – Brazil
Rocket Lab, acting through any of its affiliated entities, is committed to taking all commercially reasonable steps to protect the privacy of personal data, in accordance with applicable laws and regulations. This includes, in particular, compliance with the European Union’s General Data Protection Regulation (GDPR 2018 and its updates).
2. Scope of this Notice
This Privacy Notice applies only when Rocket Lab is responsible for deciding how personal data is collected and used. This includes, for example, data from people who visit our website or contact details we handle between subscribers and end users.
When Rocket Lab collects data on behalf of our clients or subscribers, we act as a data processor, not the data controller. In those cases, we don’t decide how the data is used, and this Notice does not apply. If you have questions about how our clients or subscribers manage your data, we recommend contacting them directly. We are not responsible for their privacy or data security practices.
This Notice only covers situations where Rocket Lab controls how and why your data is processed. This includes when you:
Updates to this notice: We may update this Notice from time to time. Please check back periodically to stay informed. If you don’t agree with any changes, we recommend that you stop interacting with us. When required by law, we’ll let you know about updates through our website or another appropriate channel.
3. Categories of personal data we collect
4. How we use your personal data
We may use your personal data for the following purposes:
Purpose of processing
Legal basis
To provide our products, services, and digital platforms. This includes processing and completing transactions, giving you access to our platforms and services, operating and maintaining those platforms, improving performance, communicating with you (such as responding to support requests or sharing security updates), and identifying, fixing, or tracking service or quality issues.
Legitimate interests, contract, legal obligations
For our internal business purposes. This includes maintaining internal records and reports, handling billing and accounting functions, managing audits and internal projects related to our services, ensuring IT security and managing our networks and systems, evaluating and improving our business, services, and platforms, developing new products or services, and processing your feedback through surveys or questionnaires.
Legitimate interests, legal obligations
For legal and security reasons. This includes complying with legal requirements, pursuing or defending against legal claims, protecting the safety and integrity of our assets and the rights of individuals who interact with us, investigating violations of our conduct or content policies, and detecting, preventing, or responding to security incidents or any malicious, deceptive, fraudulent, or illegal activity.In some cases, for example when visiting our offices or attending events, this may also involve collecting and processing special categories of personal data (such as health data) when required for public health reasons or as mandated by law.
Legitimate interests, legal obligations, public interest
For marketing our own services or those of third parties. This may include requesting or sharing testimonials or reviews about our services, sending promotional communications or product recommendations (via email, phone, or other online or offline channels) about our services or those of our business partners, inviting you to events or contests, measuring ad impressions, or customizing contextual advertising.You can opt out of marketing communications at any time by clicking the “unsubscribe” link at the bottom of our messages.
Consent (when required by law), legitimate interests
To fulfill a referral request. If you use our referral service to tell someone about our services, we may use the name, email address, job title, and company name you provide to contact that person.
Please only share someone’s personal data if you have their permission to do so.
Consent (when required by law), legitimate interests
For corporate transactions. This includes situations such as sales, mergers, acquisitions, reorganizations, bankruptcy, or other corporate events.
Legitimate interests, legal obligations
When you have voluntarily given your consent. In some cases, we may process your personal data based on the consent you’ve provided.
Consent
You may have the right to access, correct, update, or in some cases, request the deletion of your personal data, subject to certain exceptions. To exercise these rights, you can contact us at legal@rocketlab.ai.
Rocket Lab works with a limited number of third-party service providers who help us process data for specific purposes. These providers support functions such as website maintenance, database management, technical operations, data transmission, and data storage.
Some of these service providers may be located outside the European Economic Area (EEA) or your local jurisdiction, which means your data may be transferred internationally. While providing their services, these providers may access or process personal data.
We have agreements in place with all third-party providers that limit their access, use, and disclosure of personal data, in line with our legal obligations and the privacy standards described below.
5. Sources of personal data
We may collect personal data from the following sources:
a. Information you provide voluntarily
b. Information collected automatically
c. Information from public sources, including any publicly available online databases
d. Information provided by third parties, such as service providers or clients
e. Information received from your employer
6. Rocket Lab reserves the right to use cookies and tracking technologies. If such technologies are used, you will be given the option to manage these settings. Likewise, Rocket Lab reserves the right to track (using tracking technologies).
7. Data subject rights. Individuals whose personal data is processed have the following rights: • The right to access their data • The right to request corrections to inaccurate or incomplete data • The right to request the deletion of their data ("right to be forgotten") • The right to restrict how their data is processed • The right to object to the processing of their data • The right to request the transfer of their data to another service provider (data portability) • The right not to be subject to automated decision-making, including profilingThese rights can be exercised by sending a request to legal@rocketlab.ai. Individuals also have the right to file a complaint with their local data protection authority, such as the AEPD in Spain or the authority in their country of residence within the EEA.
8. Security and data retention
Rocket Lab is committed to maintaining appropriate security procedures, following industry best practices, along with technical and organizational measures to protect your personal data from accidental or unlawful destruction, loss, disclosure, alteration, or misuse.
As part of these practices, Rocket Lab implements the following measures:
a. Data encryption both in transit and at rest.
b. Access controls
c. Internal privacy policies and employee training
In line with the principle of data minimization, we will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Once your company or you as an individual have ended your relationship with Rocket Lab, we may continue to store your personal data in our systems and records. This is to ensure compliance with any remaining contractual obligations or for other legitimate business purposes. These purposes may include demonstrating our business practices and contractual commitments, providing information about our products and services, or complying with applicable legal, tax, or accounting requirements. When there is no longer a legitimate business or legal reason to process your personal data, we will delete it, anonymize it, or aggregate it. If deletion is not immediately possible, for example because your data is stored in backup archives, we will securely store and isolate it until it can be deleted. If you would like more information about the specific data retention periods that apply to your case, please contact us using the details provided in Section 9 below.
9. Data storage. Rocket Lab uses servers located in various strategic regions to optimize service delivery. By accepting our Terms and Conditions, Website Legal Notice, and/or Privacy Policy, you authorize Rocket Lab to transfer your information to servers located outside your jurisdiction. We are committed to maintaining industry-standard practices to ensure the security and proper handling of your data throughout this process.
10. Contact information. If you have any questions or concerns regarding the handling of your personal data, you can reach us at legal@rocketlab.ai or send written correspondence to: Luis Bonavita 1294, WTC Office 1202, Montevideo, Uruguay, Postal Code 11300.