1.0 Introduction
Red Stag Studio is operated by Robert Gloster, who is responsible for the personal information described here.
This policy explains how we collect, use, and protect personal information when you visit our site, enquire about a project, engage with our services, or when we review publicly available business information.
2.0 Data Collection
When you fill out a contact form or email us directly, we may collect your name, business contact details, message, and any project information you choose to provide.
When researching potential business customers, we may record a business name, publicly listed business contact details, the source page and date, brief observations about its website, and our contact history. We do not buy prospect lists.
Information You Provide
When you fill out a contact form or email us directly, we may collect:
- Name and email address
- Business name, website and phone number, if provided
- Your message and any project details you include
3.0 Usage Principles
We use enquiry and client information to assess requests, communicate about projects, and deliver our services. We use limited public business information to assess whether our website service may be relevant and to avoid duplicate or unwanted contact. We do not sell personal information to third-party brokers.
Contact form submissions pass through a Vercel Function, which may process them in North America, before they reach our configured Slack enquiry channel. We use Gmail to manage replies. Prospect research and contact history are kept in a private local CRM and may be reviewed with Codex assistance.
In that local CRM, we remove uncontacted prospect records after 30 days and clear working notes about unanswered outreach 90 days after the last approach. We keep a limited do-not-contact record where needed to respect an objection or avoid repeat contact. We retain messages in Gmail and Slack only as long as needed to handle enquiries, deliver services, meet legal obligations, and maintain necessary business records, then delete or anonymise them where appropriate.
Business outreach information
Purpose and legal basis: we use limited publicly listed business information to assess whether our website service is relevant and, where the case-specific checks support it, to make one business-related approach. Our legal basis is Article 6(1)(f) legitimate interests: identifying businesses that may benefit from the service, offering that service, and preventing duplicate or unwanted contact. A public listing is not treated as consent.
Data and sources: we may use the business name, a publicly listed business email or other business contact detail, the exact public source and check date, brief observations about the business's website, and our contact history. Sources may include business directories, Google Business Profiles, business social pages, or the business's own website. The first email identifies the specific source used.
Recipients and transfers: Gmail handles sent messages and replies; a private local CRM stores limited research and contact history; and Codex/OpenAI may assist with research, review, drafting and response handling. These services may process data outside the EEA. Where a transfer requires safeguards, the providers' published terms refer to mechanisms including European Commission adequacy decisions or Standard Contractual Clauses. Contact Robert Gloster for information about the mechanism relevant to your data and how to obtain a copy of applicable safeguards.
Retention: uncontacted local-CRM prospects are removed after 30 days, and working notes about unanswered outreach are cleared 90 days after the last approach. Gmail messages and replies are retained only as long as needed to manage the approach, establish necessary business records, meet legal obligations, or deliver an agreed service. We keep only the minimum do-not-contact record needed to honour an objection and prevent repeat marketing.
Your rights: you may ask for access, rectification, erasure, restriction or, where applicable, portability of your personal data. You may object to direct marketing at any time; if you do, we stop marketing to you. You may also complain to the Irish Data Protection Commission. Email rob@redstagstudio.ie to exercise any of these rights.
Automated decisions: we do not use solely automated decision-making or profiling that produces legal or similarly significant effects for business outreach.
Operational Excellence
Using contact information to deliver project updates and manage studio communications.
Service Refinement
Reviewing consented, aggregate site-usage reports to improve our interfaces.
4.0 Analytics & Cookies
If you allow analytics, we load Google Analytics and Vercel Web Analytics to understand how visitors use the website. Neither analytics service loads before you opt in.
Google Analytics may then collect page views, interaction events, approximate location, device and browser information, and referral details. It may use analytics cookies. Vercel Web Analytics processes page views without setting analytics cookies. We use their reports to improve the site, not to identify individual visitors.
You can withdraw analytics permission using Cookie settings in the footer. The page reloads to stop previously loaded analytics scripts; browser-stored analytics cookies may remain until they expire or you clear them.
Google Analytics
If analytics cookies are accepted, Google Analytics may set cookies such as _ga and _ga_<container-id> to distinguish visits and maintain analytics session information. You can change or withdraw consent using Cookie settings in the footer.
You can read more about how Google uses information from sites and apps that use its services at policies.google.com/technologies/partner-sites.
Vercel explains how its Web Analytics processes page views at vercel.com/docs/analytics/privacy-policy.
5.0 Security Standards
We use encrypted transport, principle-of-least-access internal workflows, and careful documentation handling to preserve the integrity of client and lead information.
6.0 Your Rights
Under applicable data protection laws, including GDPR, you may request access to the information we hold about you, ask for corrections or erasure where applicable, and object to direct marketing at any time. If you object, we stop marketing contact and retain only the minimum information needed to respect that request.
You may also complain to the Irish Data Protection Commission if you believe your data protection rights have been infringed.
Right to Access and Portability
You may request a copy of the personal data we hold about you in a structured, machine-readable format.
Right to Erasure
You may request deletion of your data where it is no longer required for legal or contractual fulfilment.
7.0 Contact Details
For questions about this policy or to exercise your rights, contact Robert Gloster at the address below.
Direct Communication
rob@redstagstudio.ieRobert Gloster, Red Stag Studio
Newtown Meadows, Castletroy
Limerick
V94 9V62