Privacy notice

Controller and contact

The controller is RALE, registered as registration details available from the privacy contact, with its address at Legal address available from the privacy contact, the applicable jurisdiction. Privacy enquiries and rights requests may be sent to deck@raleplc.com.

Data we process

Website delivery and security

Our hosting infrastructure may process IP address, request time, requested resource, response status, user agent, and security events in short-lived server logs. This supports secure, reliable delivery and abuse prevention.

Direct enquiries

The contact form processes the route selected, name, business email, organisation, optional role, message, submission time, and basic security metadata through a same-origin RALE submission service for delivery to our business mailbox. If that service is unavailable, you may instead send the prepared message through your own email application. We process the enquiry and associated correspondence to respond and manage the professional relationship. Contact content is not sent to analytics and is not written to application logs.

Optional analytics

Google Analytics 4 is not loaded unless you explicitly allow Analytics in Cookie settings. We disable advertising signals and do not intentionally send names, email addresses, message content, or other direct identifiers.

Purposes and legal bases

• Secure site delivery and abuse prevention: legitimate interests in operating and protecting the website.
• Responding to commercial or investor requests: steps requested before entering a contract or legitimate interests in handling professional enquiries, depending on context.
• Optional aggregate analytics: consent, which may be withdrawn at any time.
• Legal and compliance records: compliance with legal obligations and establishment, exercise, or defence of legal claims.

Recipients and transfers

Data may be processed by contracted infrastructure, email, security, and analytics providers only as needed for their services and under appropriate contractual controls. Google Analytics remains disabled until consent. Where a provider processes data outside the European Economic Area, we use an applicable adequacy decision or approved contractual safeguards and assess supplementary measures as required.

Retention

Security logs are retained only as long as reasonably necessary for operations and incident investigation. Routine closed enquiries are intended to be retained for up to 12 months; qualified commercial or investor discussions may be retained for up to 24 months after the last meaningful interaction, subject to legal review and longer retention where required for claims or law.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent without affecting earlier lawful processing; and complain to the competent data protection supervisory authority. We do not make solely automated decisions through this website that produce legal or similarly significant effects.

Privacy choices

Use Cookie settings to review or withdraw analytics consent. Browser Global Privacy Control or Do Not Track signals are treated as denial of optional tracking unless you later make an explicit choice.

Changes

We will update this notice when processing or providers materially change. The date above identifies the current version.