Legal
Privacy Notice
How this website collects, uses, and protects personal data.
Status: draft, pending confirmation. This page is part of Website V2 and has not yet been reviewed or approved by Rexton’s owner or legal counsel. Passages marked requires owner/legal confirmation must be resolved before this page is published as Rexton’s actual policy. See website/LEGAL-AND-PRIVACY-REVIEW.md for the full register.
Last updated (draft): Draft — not yet published
1. Who this notice covers
This notice covers personal data collected through rextonint.com, operated by Rexton InternationalRequires owner/legal confirmation: exact legal entity name, registration number, and registered address. For data handled in the course of an actual client engagement (as opposed to this website), separate engagement terms and any applicable professional confidentiality and privacy obligations applyRequires owner/legal confirmation: confirm and cross-reference engagement terms.
2. What we collect
Through this website, we collect:
- Contact form submissions — name, organisation (optional), email address, a short description of the nature of your matter, and your message. This is the only form on the site that collects personal data.
- Basic technical/server logs — standard web server request logs (e.g. IP address, timestamp, requested path, user agent) generated by hosting infrastructureRequires owner/legal confirmation: confirm actual hosting provider and its default logging/retention behaviour.
We do not use analytics, advertising, or tracking scripts on this site by default, and no such scripts are loaded as shipped in this codebase. See the Cookie Notice for detail on cookies.
3. Why we use it
- To respond to enquiries submitted through the contact form.
- To operate, secure, and troubleshoot the website (server logs).
- To meet legal or regulatory obligations where applicableRequires owner/legal confirmation: specific obligations to name, if any.
4. Lawful basis
For contact form submissions, our lawful basis is legitimate interest — responding to enquiries you have chosen to send us — and, where you tick the consent confirmation on the form, your acknowledgement that you have read this noticeDraft policy language: confirm this framing against applicable law in each jurisdiction we serve.
5. Retention
We retain contact form submissions for as long as reasonably necessary to respond to your enquiry and for a limited period afterward for record-keepingRequires owner/legal confirmation: define exact retention period(s) and the process for deleting data after that period. Server logs are retained according to our hosting provider’s default policyRequires owner/legal confirmation: confirm and state that period.
6. Sharing and processors
As shipped, this website does not send contact form data to any third-party service — submissions are only delivered once a delivery channel is configured (see website/PROJECT-STATE.md). Once a real delivery channel (e.g. an email or CRM provider) is configured for production, it will act as a data processor and must be listed hereRequires owner/legal confirmation: name the confirmed processor(s) once selected, and confirm their data processing terms.
7. International transfers
Whether personal data is transferred outside your jurisdiction depends on where our hosting and any future processors store and process dataRequires owner/legal confirmation: confirm hosting region(s) and any transfer safeguards required (e.g. UK/EU adequacy, standard contractual clauses).
8. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the use of your personal data, to object to certain processing, and to data portabilityDraft policy language: confirm this list against the specific rights available under applicable law (e.g. UK GDPR, EU GDPR, or other regimes). To exercise a right, contact us via the contact page.
9. Security
See our Security & Trust page for how this website and the Rexton platform approach security and confidentiality.
10. Children
This website is not directed at children, and we do not knowingly collect data from children.
11. Changes to this notice
We may update this notice as the website and our data practices change. Material changes will be reflected here with an updated date.
12. Contact
For privacy questions or to exercise a data subject right, use the contact page. Requires owner/legal confirmation: confirm whether a dedicated privacy/DPO contact route should be published