Privacy information
RedLine Resilience Ltd uses the minimum information reasonably needed to respond to enquiries, manage professional registrations and provide secure member access. This notice explains what we collect, why we use it and the choices available to you.
The data controller is RedLine Resilience Ltd, registered in England and Wales under company number 17348918. Our registered office is 66 Paul Street, London, EC2A 4NA. You can contact us about privacy or exercise your rights through the enquiry form on this website, or write to our registered office.
Client enquiries may include your name, email address, telephone number, organisation, the service you are interested in and the information you choose to share about your requirement. Professional registrations may also include your location, capability, experience and consent. Member accounts use a site specific account identifier and email address, together with the minimum subscription, entitlement and usage records needed to control access.
We keep limited records showing whether an acknowledgement or internal notification was accepted by our email provider. Website rate limiting and blocked contact controls use one way hashes rather than storing the raw contact or network identifier in the application log. These controls are used to protect the service and prevent abuse.
We use enquiry information to respond, assess requirements and discuss potential services. Depending on the circumstances, this is necessary to take steps at your request before entering into a contract, or is in our legitimate interests in responding to genuine business enquiries and protecting our systems. Professional expressions of interest are handled with your consent, which you may withdraw at any time. Member information is used to provide the account and capabilities you request. We may also retain information where necessary to comply with a legal obligation or establish, exercise or defend legal claims.
Our staff may review public organisation websites and job adverts to identify whether our services could be relevant to an organisation. We record the source, date, relevant organisational evidence and, where appropriate, a business contact address and role. We do not infer private problems from a public vacancy or collect unrelated personal information. Before contacting a corporate organisation, a member of staff reviews the evidence, recipient, message and our legitimate interests assessment. Sole traders and other individual subscribers are not included in this corporate email outreach process without a separate valid permission. We use Resend to send approved messages and keep limited delivery and objection records.
You can object to direct marketing at any time by replying to a message or contacting us through this website. We will stop using your information for direct marketing and retain the minimum suppression information needed to respect that choice. We do not sell business development records.
Automated tools may support enquiry routing, internal estimation, service security and access control. Internal estimates are not shown to clients and do not become a formal quotation without authorised human review. We do not use the initial website forms to make a decision that produces legal or similarly significant effects solely by automated means.
Access is restricted to authorised RedLine Resilience personnel and service providers supporting the secure operation of our website, hosting, account authentication and email delivery. Supabase provides the member identity and membership database service; Resend provides transactional email delivery. We only share relevant information with specialist delivery partners when necessary for your requirement and, where appropriate, after discussing this with you. We do not sell your information.
Member passwords are transmitted securely to our identity provider and are not stored in the RedLine website database or application logs. Verification and recovery emails are delivered through our transactional email provider. A security token is stored in your browser so you can remain signed in and is removed when you sign out. RedLine stores membership status, role, tier, entitlements and controlled usage records separately from public website content. These values are checked by backend access policies and cannot be set by a member through the website interface.
We retain enquiries, professional registrations, member records and supporting security or delivery records only for as long as necessary for the stated purpose, an active business relationship, security, legal claims or another legal requirement. Records are reviewed and removed or anonymised when they are no longer required. To respect contact restrictions and protect our services, we keep minimal keyed suppression identifiers and access-controlled records of blocked submission attempts. Routine blocked-attempt records are retained for up to 90 days and administrative audit records for up to one year; an escalated incident may be retained while a documented review is necessary. These records do not contain the submitted message or attachments. If an enquiry becomes a client engagement, contractual and legal retention requirements may apply.
Some technology providers may process information outside the United Kingdom. Where this happens, we seek to ensure an appropriate safeguard is in place, such as an adequacy decision or approved contractual safeguards, before relying on that transfer.
Do not submit identity documents, licence numbers, medical records, financial details, criminal offence information or sensitive operational information through the initial website forms. Any additional information should only be provided through a separately agreed, appropriate and secure process.
Subject to applicable conditions, you may request access to your personal information, ask for inaccurate information to be corrected, request deletion, ask us to restrict processing, object to processing based on legitimate interests, or request a portable copy where the right applies. Where we rely on consent, you can withdraw it without affecting processing that took place before withdrawal. We will consider and respond to requests in accordance with UK data protection law.
Your right to object: you may object to processing based on our legitimate interests. For direct marketing, your objection is absolute: we will stop using your information for that purpose. For other processing, we will consider your circumstances and stop unless we have compelling legitimate grounds or need the information for legal claims.
Please contact us first through the website enquiry form or at our registered office so we can try to resolve your concern. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.
Last updated 25 September 2026. We may update this notice as our services, systems or legal obligations develop. The latest version will always be available on this page.