Red Label Intelligence
Red Label Intelligence
← Home

Privacy policy

How Red Label handles personal data.

Last updated: 11 May 2026

01

Who we are

Red Label Ltd (referred to here as "Red Label", "we", or "us") is the data controller for personal data processed in connection with redlabelintel.com, redlabel.ltd, and the firm's business-to-business outreach activity. Red Label is a United States-domiciled entity trading as Red Label Intelligence. For any privacy query or to exercise the rights described below, please contact us through the form at redlabel.ltd.

02

What data we process

The personal data we handle falls into three buckets.

Visitors to redlabelintel.com. Our hosting provider logs IP addresses and standard request metadata, including user agent, referrer, and timestamp, whenever the site is accessed. The site loads fonts and styling from third-party content delivery networks, specifically Google Fonts, Tailwind CDN, and Font Awesome, which means those providers will also see your IP address when they serve those resources. The site does not run analytics, advertising trackers, or first-party cookies.

Prospective clients we research and contact. For business-to-business outreach, we process limited professional information about senior decision-makers at institutions whose work overlaps with the firm's services. The typical record includes name, work email address, employer, role and title, professional background drawn from public records, and a short internal note recording why we believe the firm's services may be relevant.

Clients and engagement contacts. Once an engagement is scoped or commissioned, we process the personal data clients share in the course of that work. The engagement letter governs that processing.

03

Why we process it and our legal basis

Operating the site. Server logs and CDN requests support the basic functioning of the website. The legal basis is our legitimate interest in running the site securely.

Business-to-business prospect outreach. We rely on Article 6(1)(f) of the UK GDPR and the EU GDPR, the legitimate-interest legal basis, for sending unsolicited business communications to senior professionals at institutions we believe may have a genuine reason to commission counterparty intelligence services. The legitimate interest is the firm's interest in identifying potential clients for work those clients have a credible reason to want.

We have completed a written legitimate-interest assessment that documents the purpose, the necessity of direct contact, and the balancing test against the rights and interests of the recipients. The assessment is retained internally and can be produced on request from a supervisory authority.

Engagement performance. For clients, the legal basis for processing is the engagement contract.

Legal obligations. We will process or retain personal data where required to meet our legal obligations, including responding to lawful requests from regulators or law enforcement.

04

Where prospect contact data comes from

The contact details we use for B2B outreach come from a defined set of sources. The primary ones are LinkedIn Sales Navigator, B2B enrichment platforms (typically Apollo or its equivalent), publicly available records and press research, and warm introductions or referrals from existing contacts. We do not purchase contact lists from data brokers and we do not scrape contact data from sites that prohibit it in their terms of service.

05

How long we keep it

Active prospect data is retained while ongoing outreach is reasonable, which in practice means up to twelve months from the last meaningful contact. If you opt out at any point, we remove the active record within thirty days. We then keep a minimal entry on a suppression list, typically just your name and email, indefinitely, for the sole purpose of making sure we do not contact you again. Client data is retained for the period set out in the engagement letter, which typically tracks our professional record-keeping obligations.

06

Who we share it with

We do not sell personal data, share it with advertising networks, or transfer it to data brokers. Personal data is handled by a small number of service providers acting on our instructions, including the firm's email and document infrastructure providers and our hosting provider. Each such processor is bound by appropriate data-processing terms. Outside of those processors and lawful requests from regulators or law enforcement, we do not share personal data with third parties.

07

Your rights and how to opt out

If you are in the United Kingdom, the European Economic Area, or Switzerland, you have the right to request access to the personal data we hold about you, correction of inaccurate data, erasure of your data, restriction of our processing, portability of data you have provided to us, and to object to processing based on legitimate interest. To exercise any of these rights, contact us at the form on redlabel.ltd and we will respond within thirty days.

You also have the right to lodge a complaint with your local data protection authority, including the UK Information Commissioner's Office in the United Kingdom, the relevant national supervisory authority in the European Union, or the Federal Data Protection and Information Commissioner in Switzerland.

Opting out of outreach. If you have received a message from us and would prefer not to hear from us again, replying with the word "remove" or "unsubscribe" is sufficient. We will action the request within thirty days and add you to the suppression list described in section 05.

08

California residents

California residents have rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to know what personal information we have collected, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information. Red Label does not sell or share personal information as those terms are defined under the CCPA and CPRA. To exercise any California right, contact us at the form on redlabel.ltd.

09

International transfers, updates, contact

Red Label is United States-based and personal data may be transferred to and processed in the United States. Where data is collected in the UK or EEA, we rely on standard contractual clauses or other approved transfer mechanisms where required.

We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be noted on this page when they are made.

For privacy queries, to exercise any of the rights described in this policy, or to opt out of B2B outreach, please use the contact form at redlabel.ltd.