Privacy Policy

This website, redrock.io, is operated by Red Rock Technology Ltd, a company registered in England and Wales under company number 17108705, with registered office at 27 Old Gloucester Street, London WC1N 3AX, United Kingdom (ICO registration reference ZC119326), and Red Rock Technology FZ-LLC, a company licensed in Dubai Internet City, United Arab Emirates, under licence number 107086, with registered office at Building 02, Office 310, Dubai Internet City, Dubai, UAE.

The two companies act as joint controllers of the personal data collected through this website. They have entered into a joint controller arrangement that defines their respective responsibilities. The essence of that arrangement is set out in Section 8 of this policy.

For any question or request relating to your personal data, the single point of contact for both companies is contact@redrock.io.

We collect personal data only when you provide it to us directly, in particular when you use the contact form on this website or write to us by email. This data may include your name, email address, company name, business field, and the content of your message.

We do not collect personal data through cookies, analytics tools, tracking pixels, or any other monitoring technology. See our Cookie Policy for details.

We process the data you provide in order to respond to your enquiry, to communicate with you about our services, and, where a business relationship develops, to prepare and manage that relationship.

The legal basis for this processing is our legitimate interest in responding to enquiries addressed to us and in developing business relationships (Article 6(1)(f) UK GDPR and EU GDPR), and, where the processing is necessary in view of entering into a contract with you, Article 6(1)(b).

We do not use your data for automated decision making or profiling. We do not sell your data. We do not use your data for marketing purposes unrelated to your enquiry.

Messages sent through the contact form and by email are received and stored in our corporate email system, operated by Google Workspace. Google may process this data on servers located outside the United Kingdom and the European Economic Area, including in the United States. These transfers are covered by the safeguards Google provides for its business services, including standard contractual clauses.

Within our organisation, access to your data is limited to the personnel of the two companies who handle enquiries and business relationships.

We do not share your data with any other third party, except where we are legally required to do so.

Because the joint controllers are established in the United Kingdom and in the United Arab Emirates, data collected through this website may be accessed from both jurisdictions. Transfers between the two companies are governed by their joint controller arrangement, which incorporates appropriate safeguards. Processing carried out by the UAE entity is also subject to UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data.

We keep enquiry data for as long as necessary to handle your enquiry and any follow-up. If no business relationship develops, we delete enquiry data within twenty four months of the last contact. If a business relationship develops, data is retained for the duration of that relationship and thereafter as required by applicable legal, tax, and accounting obligations.

Under the UK GDPR and, where applicable, the EU GDPR, you have the right to access your personal data, to have it rectified or erased, to restrict or object to its processing, and to receive it in a portable format. You also have the right to lodge a complaint with a supervisory authority. For the UK entity the competent authority is the Information Commissioner's Office (ico.org.uk).

You may exercise your rights at any time, irrespective of which of the two joint controllers holds your data, by writing to contact@redrock.io. We will respond within one month.

Red Rock Technology Ltd and Red Rock Technology FZ-LLC have agreed that: both companies may access and use enquiry data for the purposes described in this policy; Red Rock Technology Ltd takes primary responsibility for compliance with the UK GDPR and for the provision of this notice; Red Rock Technology FZ-LLC takes primary responsibility for compliance with UAE data protection law; and contact@redrock.io serves as the single point of contact for data subjects. You may exercise your rights against either company.

We may update this policy from time to time. The date of the last revision is shown at the top of this page. Material changes will be reflected on this page before they take effect.