Privacy Policy
What this policy covers
It explains how Kestrel Folio handles personal data when we write to publishers about paid editorial placements, and when someone uses a form on kestrelfolio.com.
The company responsible
Kestrel Folio is a brand of Redhead Digital Agency FZCO, IFZA Business Park, DDP, Premises 40073-001, Dubai Silicon Oasis, Dubai, UAE (IFZA licence 40073). Redhead Digital Agency FZCO is the data controller. Questions about this policy go to [email protected].
The data involved
Business contact data only: a person’s name, a work email address, the website they publish or edit, their role if it is listed publicly, and the emails we exchange. When a placement goes ahead we also keep the invoice and payment details needed to pay for it.
How we obtain it
We take contact details from places a site makes public for this purpose, such as a contact page, an advertising or “write for us” page, an editorial masthead or a professional profile. Anything else reaches us because you sent it, by replying to an email or by using a form on this site. We do not buy, rent or swap contact lists.
Our legal basis
Proposing a placement to the person who runs a website is business-to-business contact, and we rely on legitimate interest under Article 6(1)(f) of the GDPR. If you agree to a placement, the work and payment that follow are carried out to perform that agreement (Article 6(1)(b)), and we keep accounting records because the law requires it.
Service providers
A small number of providers handle data for us and only on our instructions: our email host, the service that delivers the forms on this site, the shared suppression service behind the opt-out form, and our accounting tools. Some of them are based outside the UAE and the EEA; where that applies we rely on the contractual safeguards they provide. We never sell personal data.
How long we keep it
If no placement comes out of a conversation, we delete the contact details within 12 months of our last message. If we do work together, records are kept while the relationship continues and for five years afterwards, which covers accounting and tax obligations.
The suppression list
When you opt out, your email address goes onto a suppression list that is shared across the company. We keep that entry with no end date, because it is the record that stops anyone on our team from contacting you again. It holds the address itself and nothing more.
Your rights
You can ask for a copy of the data we hold about you, have it corrected or erased, restrict or object to its use, and tell us to stop contacting you. The opt-out form removes an address immediately. For any other request, email [email protected] and we will deal with it within 3 business days. In the EEA or the UK you may also complain to your data protection authority.
Cookies and technical data
This site sets no cookies of its own and runs no advertising or tracking scripts. It is served through Cloudflare, which may process technical data such as IP addresses and request logs to deliver the pages securely and to produce anonymous traffic statistics.
Related policy and updates
Our rules for outbound email, and how to report a message, are in the Anti-Spam Policy. If this policy changes, the new version will be published on this page with a new effective date.