Privacy Policy

Red Dragon Intelligence (“Red Dragon Intelligence,” “we,” “us,” or “our”) operates this website and provides artificial intelligence strategy, systems, automation, agent development, and related professional services (collectively, the “Services”).

This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information when you visit our website, submit an inquiry, or otherwise interact with us in connection with the site. By using the website or providing personal information to us, you acknowledge the practices described in this Policy.

This Policy applies to our public website and related online inquiry channels. It does not replace confidentiality, data processing, or security terms that may apply under a separate written agreement for paid client engagements.

1. Controller and contact

Red Dragon Intelligence is the organization responsible for the personal information described in this Policy.

Privacy and data-protection requests:

• Online: Contact form (include “Privacy” in your message)
• Subject line / reference: Privacy Request — Red Dragon Intelligence

We will respond to verifiable requests within the timeframes required by applicable law (generally within 30–45 days, subject to permitted extensions).

2. Personal information we collect

“Personal information” means information that identifies, relates to, or could reasonably be linked to an individual or household.

2.1 Information you provide

When you use our contact form or communicate with us, you may provide:

• Name
• Email address
• Telephone number
• Organization or company name
• Message content and any other information you choose to include (project goals, technical environment, timing, budget ranges, etc.)

You determine what you submit. Please do not include passwords, payment card numbers, government identification numbers, biometric identifiers, health information, or other highly sensitive data in a general website inquiry unless we have expressly directed you to use a secure channel under a client agreement.

2.2 Information collected automatically

When you access the website, our hosting infrastructure and standard web technologies may automatically collect:

• IP address and approximate location derived from IP
• Browser type and version, device type, and operating system
• Date and time of access, pages viewed, and referring URL
• Diagnostic and security logs (for example, request headers and error events)

This information is used for security, reliability, and basic operations. We do not currently operate third-party advertising trackers on this website.

2.3 Information from other sources

If you interact with us through professional networks, email, or referrals, we may receive contact details and context necessary to respond. We may also combine inquiry information with publicly available business information (for example, company website or LinkedIn profile) when evaluating a potential engagement.

3. How we use personal information

We use personal information for the following business purposes:

• Responding to inquiries — to evaluate and reply to requests about our Services
• Business development — to schedule calls, prepare proposals, and maintain a record of prospective and client relationships
• Site operation and security — to host, maintain, debug, prevent fraud or abuse, and protect our systems and users
• Legal and compliance — to comply with applicable laws, enforce our Terms of Use, and establish, exercise, or defend legal claims
• Improvements — to understand how the website is used and to improve content, performance, and user experience

We do not sell personal information. We do not use website inquiry data to train public foundation models. We do not use personal information for cross-context behavioral advertising.

4. Legal bases for processing (EEA/UK and similar regimes)

Where the GDPR, UK GDPR, or similar laws apply, we process personal information on one or more of the following bases:

• Contract / pre-contractual steps — processing necessary to respond to your request before entering a contract
• Legitimate interests — operating our business, securing our website, and communicating about Services you requested, balanced against your rights and expectations
• Legal obligation — where processing is required by law
• Consent — where we request consent for a specific purpose (you may withdraw consent at any time without affecting prior lawful processing)

5. How website inquiries are transmitted

Our public contact form is designed to initiate a message using your device’s email client (or equivalent mail composition flow) addressed to Red Dragon Intelligence. Depending on your device and settings, information you enter may be processed by your email provider and network when the message is sent. Once received, we handle inquiry content as business correspondence.

If we later enable a server-side form processor, CRM, or ticketing system, those providers will process data on our behalf under appropriate contracts, and we will update this Policy if the change is material.

6. Disclosure of personal information

We may disclose personal information to:

• Service providers and processors — hosting, domain/DNS, email infrastructure, security, and professional tools that support our operations, subject to confidentiality and data- processing obligations where required
• Professional advisors — attorneys, accountants, insurers, and similar advisors bound by professional or contractual confidentiality
• Legal and safety disclosures — when we believe disclosure is required by law, regulation, legal process, or governmental request, or is necessary to protect the rights, property, or safety of Red Dragon Intelligence, our clients, or others
• Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case personal information may be transferred as part of that transaction subject to applicable law
• With your direction — when you ask us to share information with a third party

We do not disclose personal information to third parties for their independent marketing purposes.

7. Cookies, local storage, and similar technologies

The website may use essential browser storage or similar technologies necessary for basic functionality (for example, session state or preference continuity). We do not currently deploy third-party advertising cookies or third-party analytics SDKs on this site.

If we introduce non-essential analytics, advertising, or similar technologies, we will update this Policy and implement any consent or notice mechanisms required by applicable law.

You can control cookies through your browser settings. Blocking certain cookies may affect site functionality.

8. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including:

• Inquiry and correspondence records — generally for the duration of an active discussion and a reasonable period afterward for follow-up, relationship management, and legal risk management (typically up to 24 months for unconverted inquiries, unless a longer period is required or a client relationship continues)
• Security and server logs — typically for shorter operational periods (for example, 30–180 days), unless needed for investigations or legal holds
• Records subject to legal, tax, or accounting obligations — for the period required by law

When retention is no longer necessary, we delete, de-identify, or securely archive information in accordance with our practices.

9. Security

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. Measures may include access controls, secure transport (HTTPS), least-privilege practices, and vendor due diligence.

No method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security. You are responsible for using secure devices and networks when contacting us.

10. International transfers

We are based in the United States. If you access the website or communicate with us from outside the United States, your information may be processed in the United States and other countries where we or our service providers operate. Those countries may have data-protection laws different from those in your jurisdiction.

Where required, we use appropriate safeguards for cross-border transfers (such as standard contractual clauses or equivalent mechanisms) when transferring personal information from the EEA, UK, or Switzerland to recipients in countries without an adequacy decision.

11. Your privacy rights

11.1 General requests

Subject to applicable law, you may request access to, correction of, or deletion of personal information we hold about you, or ask us to limit certain processing. Contact us as described in Section 1. We may need to verify your identity before fulfilling a request.

11.2 United States state privacy rights

Residents of certain U.S. states (including, where applicable, California, Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws) may have rights to:

• Know / access personal information collected about you
• Delete personal information, subject to legal exceptions
• Correct inaccurate personal information
• Obtain a portable copy of certain information
• Opt out of “sale” or “sharing” of personal information (we do not sell or share for cross-context behavioral advertising)
• Limit use of sensitive personal information (we do not use website data for purposes that typically require this control)
• Not be discriminated against for exercising privacy rights

California notice (CCPA/CPRA categories). In the preceding 12 months, we may have collected the following categories of personal information from website users and inquirers: identifiers (name, email, phone, IP address); commercial / professional information (organization, inquiry content); internet or electronic activity (browsing/log data); and inferences only to the extent they arise from your own message content. Sources include you, your device/browser, and optional public business sources. Business purposes are listed in Section 3. We do not sell personal information or share it for cross-context behavioral advertising.

Authorized agents may submit requests where permitted by law; we may require proof of authorization and identity verification.

11.3 EEA/UK data subject rights

If GDPR or UK GDPR applies, you may have rights to access, rectification, erasure, restriction, portability, and objection, and to withdraw consent where processing is consent-based. You may also lodge a complaint with your local supervisory authority. We encourage you to contact us first so we can address your concern.

12. Children’s privacy

The website and Services are directed to businesses and professionals. We do not knowingly collect personal information from children under 16 (or under 13 where COPPA applies). If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

13. Do Not Track

Some browsers offer a “Do Not Track” (DNT) signal. There is no consistent industry standard for responding to DNT. Our website does not currently respond to DNT signals. We will reassess if standards mature or if we deploy tracking technologies that require a response.

14. Third-party websites

The website may contain links to third-party sites or services. This Policy does not apply to those third parties. We are not responsible for their privacy practices. Review their policies before providing personal information.

15. Automated decision-making

We do not use automated decision-making, including profiling, that produces legal or similarly significant effects solely based on website interactions.

16. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we post revisions. Material changes will be indicated by updating this page (and, where appropriate, by additional notice on the website). Your continued use of the website after the effective date of a revised Policy constitutes acknowledgment of the updated practices, except where applicable law requires a different standard (such as consent).

17. Contact

For questions about this Privacy Policy or to exercise your rights, use the Contact form and mark your message as a privacy request.

Related terms governing use of the website are set out in our Terms of Use.