Privacy Notice
Effective date: 2026-10-03
This Privacy Notice explains how we collect, use, share and protect personal data when you visit redskynexus.com, contact us through the website, or otherwise interact with Redsky Nexus in connection with an enquiry. It does not replace privacy terms that apply to client services under a separate written agreement.
1. Who we are
Redsky (Guernsey) Limited, trading as Redsky Nexus, is responsible for the personal data described in this Notice unless another notice or contract applies. For website privacy enquiries, contact hello@redskynexus.com. Redsky (Guernsey) Limited is registered with the Office of the Data Protection Authority in Guernsey.
2. What this Notice covers
This is a public marketing and business-enquiry website. It is intended for ordinary business contact information and enquiries, not client confidential datasets, financial records, regulated client files, special-category personal data or sensitive operational information. Please do not include confidential, sensitive or special-category personal information in your enquiry. Processing for contracted client services is governed by separate agreements and privacy information.
3. Personal data we may collect
| Category | Examples |
|---|---|
| Enquiry data | Name, organisation, business email address, telephone number where provided, enquiry details and optional information about your interests or how you heard about us. |
| Technical and security data | Request metadata and security or diagnostic information used to operate and protect the website. |
| Analytics data | Consented page views and successful enquiry events. Form contents and private lead identifiers are excluded from analytics events. Google also receives network connection information when analytics requests are made. |
| Commercial follow-up data | Lead reference, enquiry status and owner-entered qualification, opportunity and commercial outcomes. |
| Preference data | Your analytics choice. |
4. How we collect personal data
Directly from you when you submit a form, email us or otherwise make an enquiry.
Automatically from the website and its security infrastructure where necessary to operate and protect the service.
Through optional analytics or campaign measurement after the required consent has been obtained.
From our own business records where an enquiry becomes an active commercial relationship.
5. Why we use personal data
| Purpose | Legal basis |
|---|---|
| Respond to genuine service enquiries and establish a client relationship | Steps taken at your request before entering into a contract, or performance of a contract, where the processing is necessary for that purpose. |
| Operate, secure and troubleshoot the website | Legitimate interests, where appropriate, in operating and protecting the website and its users. |
| Business administration and operational record-keeping | Legitimate interests, where appropriate, in managing enquiries and maintaining accurate operational and commercial records. |
| Optional analytics | Your consent. You can reject or withdraw analytics without preventing ordinary enquiry handling. |
6. Analytics and attribution
Optional analytics operates only after you accept it. The website and enquiry form work if you reject analytics. You can change your choice using Cookie preferences. Withdrawal stops future optional analytics collection and clears the relevant first-party analytics cookies. We do not reconstruct browsing through IP matching, fingerprinting, hashed email or reverse-IP enrichment.
Google Analytics 4 measures page views and successful enquiries. An enquiry event is recorded only after the private lead record is saved, and only when analytics consent is active. We do not send names, email addresses, telephone numbers, organisations, enquiry text, private lead identifiers or owner notes in analytics events. We do not collect first-source or latest-source browsing histories. Your optional self-reported source remains separate from analytics.
7. Enquiries and lead records
When you submit an enquiry, we save it in a private Google Sheets lead register before showing a success confirmation. The record supports follow-up and includes the information you submit and later owner-entered enquiry or opportunity status. If saving fails, the website does not confirm success.
After the record is saved, Resend sends a minimal operational notification to hello@redskynexus.com. The full enquiry remains in the private register and is not included in that notification. Notification status and delivery or failure events are recorded separately against the existing record. Signed delivery webhooks and bounded retries support notification handling without creating another lead. Email delivery failure does not undo the saved enquiry. We do not send an automatic customer reply, subscribe you to marketing, or track email opens or clicks.
8. Who we may share personal data with
| Provider | Role |
|---|---|
| Vercel | Website, enquiry intake and notification webhook hosting. |
| Google Workspace and Gmail | Business email and operational notifications. |
| Google Sheets | Restricted enquiry register and associated notification records. Separate private commercial registers support owner-managed administration. |
| Google Cloud Workload Identity Federation | Short-lived authentication for the application to access the authorised lead register, without a downloaded service-account key. |
| Resend | Transactional notification delivery and delivery, bounce or failure webhooks. |
| Google Analytics 4 | Optional website measurement after analytics consent. |
We do not sell personal data. We may also disclose personal data to professional advisers, insurers, regulators, courts or public authorities where appropriate.
9. International processing and transfers
Some of our technology providers may process personal data outside Guernsey. Where this occurs, we use providers and arrangements intended to provide appropriate safeguards for personal data in accordance with applicable data-protection requirements.
10. How long we keep personal data
Our retention policy distinguishes website enquiry records from client and other business records. The periods below apply unless a separate applicable requirement or documented legal hold requires retention.
| Record | Retention policy or configuration |
|---|---|
| Closed or general enquiries | 12 months after closure or last meaningful contact. |
| Lost or abandoned opportunities | 24 months after closure. |
| Resolved notification audit records | 90 days after resolution. |
| Ordinary application and security logs | A 30-day target, subject to actual provider capabilities. |
| Resend email and log data | Resend documents 30-day retention on its Free, Pro and Scale plans, seven-day backups, and deletion of remaining customer data within 90 days of account termination. This is separate from our private notification-audit records. |
| GA4 event and user data | Two months, with reset on new activity disabled. This does not describe retention of all aggregate reports. |
| Analytics cookies | Session cookies, cleared on withdrawal. |
| Consent preference | Until changed or cleared, with no automatic expiry. |
| Client, accounting, contractual, legal-hold and statutory records | Their applicable separate retention requirements apply. The website enquiry periods do not govern these records. |
| Provider logs, email and backups | Provider-managed copies may follow separate retention and backup arrangements. The periods above are not a guarantee that every provider copy is deleted at the same time. |
11. Security
Access to the private lead register is restricted. Application access uses short-lived identity tokens. Notification webhooks are signature-verified, and application logs exclude enquiry bodies and authentication tokens. These controls do not guarantee that an internet service is completely secure.
12. Your rights
Depending on the applicable law and circumstances, you may have rights to request access to personal data, correction, erasure, restriction, portability, or to object to certain processing. Where processing is based on consent, you may withdraw that consent without affecting processing that was lawful before withdrawal.
To exercise a privacy right, contact hello@redskynexus.com. We may need to verify your identity before acting on a request. You may also have a right to complain to the relevant data protection authority.
13. Marketing
Submitting an enquiry does not add you to a marketing list. If Redsky later introduces an email newsletter or other direct marketing programme, any subscription choice will be separate from the enquiry process and will include a straightforward way to opt out.
14. Children
The website is intended for business and professional audiences and is not directed at children. If we become aware that personal data has been provided by a child in circumstances where it should not have been collected, we will review and take appropriate steps.
15. Changes to this Notice
We may update this Notice when the website, service providers or processing activities change. The published version will show its effective date, and material changes will be reflected promptly.
16. Contact
Privacy questions may be sent to hello@redskynexus.com.