Privacy Notice

Effective: 11 August 2026

This notice covers the public website and commercial inquiry form. Engagement-specific data handling is governed by the executed agreement, Statement of Work, and data handling addendum.

Information we collect

The inquiry form collects your name, work email, company, role, engagement interest, deployment preference, company size, timeline, business objective, consent record, and basic request security metadata. Do not submit credentials, vulnerability details, target data, personal data about others, or other secrets.

How we use it

Respond to your request and assess whether a scoped engagement is appropriate.
Arrange commercial, security, legal, and technical discovery.
Protect the form from abuse and maintain business records.
Meet legal obligations and establish or defend legal claims.

Legal basis and sharing

Depending on jurisdiction, processing is based on your request, legitimate business interests, consent where required, and legal obligations. Information may be handled by authorized RedCore personnel and contracted infrastructure or communication providers acting under appropriate obligations. We do not sell inquiry data.

Retention

Commercial inquiry data is normally retained for up to 12 months after the last meaningful interaction, unless a longer period is required for an active customer relationship, legal obligation, security investigation, or claim. Engagement evidence follows the signed retention and deletion schedule.

Security and international processing

Reasonable technical and organizational safeguards are used, but no internet transmission is risk-free. Processing locations and transfer safeguards are agreed during contracting when customer requirements apply.

Your choices

You may request access, correction, deletion, restriction, or withdrawal of consent where applicable. Submit a privacy request through the contact form and select a general customer-runner evaluation request, stating that it is a privacy request without including sensitive data. Identity verification may be required.

Changes

Material changes will be posted here with a revised effective date. The signed customer agreement controls where it conflicts with this public notice.