Legal

Privacy Policy

Last updated: 29 September 2026

1. Scope

This notice explains how personal information may be handled when someone visits the Redstone Vault website, makes an enquiry or communicates about a potential engagement. The responsible contracting entity and further privacy information will be identified in applicable engagement documents.

2. Information collected

Information may include a name, work contact details, business, service and support requirements, correspondence, technical request data and information needed to assess, establish or manage an engagement. Sensitive documents should not be sent through an initial website enquiry.

3. Purposes

Information may be used to respond to enquiries, assess potential work, manage engagements, maintain records, protect the website and business, comply with legal obligations and establish or defend legal rights.

4. Lawful bases

Processing may be necessary to take steps at a person's request before a contract, to perform a contract, for legitimate interests in operating and protecting the business, to comply with legal obligations or on the basis of consent where consent is appropriate.

5. Enquiry delivery

The enquiry form prepares a draft in the visitor's email application. It does not send or store the entered form information on the website. The visitor must review and send the email. Information is received by Redstone Vault only when the visitor sends it to the business enquiry address.

6. Sharing and international transfers

Information may be shared with service providers, professional advisers and relevant counterparties where necessary and appropriate, or where required by law. Where UK data-protection law requires safeguards for an international transfer, an appropriate transfer mechanism should be used.

7. Retention and security

Personal information is retained only for as long as reasonably needed for the purpose collected, legal obligations, dispute management and proportionate business records. Reasonable organisational and technical measures are applied, but no online system can be guaranteed absolutely secure.

8. Individual rights

Subject to applicable law, individuals may have rights to access, correct, erase or restrict personal data, object to certain processing, receive portable data and withdraw consent. They may also complain to the UK Information Commissioner's Office. Questions can be sent to enquiries@redstonevault.com.