Privacy Policy
Effective: 2026-04-18. Minimal data collection, GDPR-aligned, no behavioural tracking.
1. Data Controller
Kieran Upadrasta (rlkestates.eu) is the data controller for this site. Contact: info@rlkestates.eu.
2. What This Site Collects
Essential cookies only. No analytics, no advertising, no behavioural tracking, no fingerprinting. We do not sell, share, or transfer personal data to third parties.
Server logs (IP address, user agent, request URL, timestamp) are retained for thirty (30) days for security and abuse prevention, then deleted.
3. Contact Form Data
If you submit a contact request, the message body, your name, and your email are processed solely to respond to your enquiry. Stored encrypted at rest. Retained for the duration of the engagement plus six (6) years for professional record-keeping (regulatory requirement).
4. PDF & Doctrine Downloads
Downloads of governance doctrines, frameworks, and research papers are not tracked at the user level. Aggregate counts may be inferred from server logs but no individual identifiers are retained.
5. Your Rights (GDPR / UK GDPR)
Right of access, rectification, erasure, restriction of processing, data portability, and objection. To exercise any right, email info@rlkestates.eu. Response within one (1) business day. Right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.
6. Lawful Bases
Legitimate interests (site security, content delivery), consent (essential cookies, contact submission), and legal obligation (tax, professional record retention).
7. Cross-Border Transfers
Hosted on Netlify edge infrastructure. Standard Contractual Clauses (SCCs) and adequacy decisions apply where data crosses jurisdictional boundaries.
8. Updates
This policy is reviewed quarterly. Material changes will be flagged at the top of this page with revised effective date.