Privacy Policy

1. Overview

Red Stack 1 ("Company", "we", "us", or "our") provides a managed website and platform service for small and medium businesses ("Services").

This Privacy Policy explains how we collect, use, and protect information in connection with our platform, client websites hosted on our platform, and visitors who interact with those websites.

By using the Services or accessing websites powered by our platform, you agree to this Privacy Policy.

2. Scope

This Privacy Policy applies to clients using our platform, visitors ("End Users") who browse or interact with client websites, and information collected through the platform and related services.

Clients remain responsible for their own business practices and communications with their customers.

3. Information We Collect

4. How We Use Information

We use information to:

• Provide and operate the Services
• Host and display client websites
• Deliver inquiries and booking-related interactions to the relevant business
• Review inquiry content, metadata, handling information, and outcomes to identify recurring questions, missing information, friction, and unsuitable inquiries
• Improve website content, FAQs, page architecture, calls to action, forms, and customer paths
• Monitor performance and usage
• Improve platform functionality and user experience
• Communicate with clients

5. Platform Monitoring and Analytics

As part of providing a managed service, we monitor and analyze technical performance, website interactions, and inquiry activity.

This may include:

• User interactions, clicks, and navigation flows
• Booking and inquiry content, metadata, delivery, and handling activity
• Inquiry outcomes supplied or recorded by clients
• Engagement metrics and behavioral patterns

Complete inquiry messages may be reviewed when reasonably useful to deliver, support, understand, and improve the website and inquiry process of the client that received them.

Limited operational measurement is an integral part of the managed service. Non-essential analytics and tracking remain subject to any notice, consent, and choice required by applicable law.

6. Use of Aggregated Data

We may aggregate or de-identify operational, behavioral, inquiry, and outcome information across clients to:

• Identify trends
• Improve platform features
• Optimize performance and user experience

We do not use identifiable inquiry content to benefit another client or for an unrelated purpose unless the affected client and individual authorize that use or applicable law otherwise permits it.

Aggregated or de-identified information is intended not to identify individual clients or End Users.

7. Sharing of Information

We do not sell personal information.

We may share information:

• With service providers, such as hosting, infrastructure, and analytics tools
• As required by law or legal process
• To protect the rights, safety, or integrity of the Company or users

Service providers receive information only as reasonably necessary to perform services for us and are subject to applicable contractual, security, and privacy requirements.

Client-specific data is not shared with other clients.

8. Data Retention

We retain information:

• As long as necessary to provide Services
• As required for legal, operational, or security purposes

After termination, we use reasonable efforts to keep the project recoverable for six months. During that period it is an inactive archive, not a hosted or maintained service.

After the recoverability period, data may be deleted or anonymized when it is no longer reasonably needed for legal, operational, security, or record-keeping purposes. We may retain an archive longer, but do not guarantee recovery after six months.

9. Data Security

We implement reasonable technical and organizational safeguards to protect data.

However, no system can guarantee absolute security.

10. Client Responsibilities

Clients are responsible for:

• Ensuring their own compliance with applicable privacy laws
• Providing any required disclosures to their customers
• Obtaining any necessary consents related to their business operations

11. Third-Party Services

Our platform may rely on third-party services, such as hosting providers and analytics tools.

We are not responsible for the privacy practices of third parties.

12. International Data Transfers

Information may be processed in jurisdictions outside a user's location.

By using the Services, you consent to such processing where permitted by law.

13. Your Privacy Rights (GDPR and Similar Laws)

If you are located in certain jurisdictions, including the European Economic Area (EEA), United Kingdom, or regions with similar laws, you may have the following rights:

• Access your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Request restriction of processing
• Object to certain processing activities
• Request data portability

We will respond to requests in accordance with applicable law and may require identity verification.

14. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have the following rights:

• Right to Know what personal data we collect and how it is used
• Right to Delete your personal data
• Right to Correct inaccurate personal data
• Right to Limit use of sensitive personal information, if applicable
• Right to Non-Discrimination for exercising your rights

We do not sell personal information as defined under California law.

15. Additional Rights for Argentina

If you are located in Argentina, you may have rights under applicable data protection laws, including the right to access, update, and request deletion of your personal data.

The Argentine Agency of Access to Public Information (AAIP) is the supervisory authority responsible for enforcing data protection laws.

16. Additional Rights for South Africa (POPIA)

If you are located in South Africa, your personal information is protected under the Protection of Personal Information Act (POPIA).

You have the right to:

• Access personal information held about you
• Request correction or deletion of your personal information
• Object to the processing of your personal information in certain circumstances

17. Legal Basis for Processing (GDPR)

Where applicable, we process personal data based on:

• Performance of a contract
• Legitimate interests, including improving and operating the platform
• Consent, where required
• Compliance with legal obligations

18. Data Controller and Processor Roles

In most cases, the client (business) determines the purposes of customer-submitted data, such as inquiries and bookings, and the Company processes that data to deliver, support, operate, and improve the client website under the client agreement.

The legal role of each party may depend on the information, purpose, jurisdiction, and specific service arrangement. The client agreement and any applicable data-processing terms provide further detail.

The Company acts as a data controller for:

• Platform analytics and usage data
• Account and operational data
• Data used to improve the platform

19. How to Exercise Your Rights

To exercise any privacy rights before a dedicated privacy address is published, use the website contact form and identify the request as a privacy matter.

Please include:

• Your name and contact information
• The nature of your request

We may request additional information to verify your identity before fulfilling requests.

20. Information Officer (POPIA)

Red Stack 1 has appointed an Information Officer responsible for data protection compliance.

Information Officer: Red Stack 1 Privacy Team

Contact details: pending legal and business review before launch

21. Changes to This Policy

We may update this Privacy Policy from time to time.

Updated versions will become effective upon posting or notice.

Continued use of the Services constitutes acceptance of the updated policy.

22. Contact

For questions regarding this Privacy Policy:

Red Stack 1

Use the website contact form until dedicated legal contact details are published.