Privacy Policy

Updated: 2026-10-28

1. Controller

REDLINE MANAGEMENT LTD (company number 15938927, registered in England & Wales; VAT GB475397543), registered address: 35 Goldfinch Drive, Sandy, SG19 2SA, United Kingdom. Privacy contact: [email protected] (response within 30 days).

2. Data we process

Contact form: name, email, selected topic, message, submission time and language — legal basis: consent (GDPR Art. 6(1)(a)); purpose: answering your enquiry; retention: up to 2 years, in a server-side lead log hosted in the EU (Hetzner).

Analytics: Google Tag Manager / GA4 loads only after consent (Consent Mode v2, default: denied) — purpose: measuring site usage; consent can be withdrawn any time by reopening the cookie bar.

Server logs: IP address and request data kept briefly for operational security (legitimate interest).

3. Recipients & processors

Hosting: Hetzner Online GmbH (EU). Email notification (when active): bluefox.email. Analytics (after consent): Google. We never sell personal data.

4. Your rights

Access, rectification, erasure, restriction, portability, objection — requests: [email protected]. Complaints: your supervisory authority (UK ICO or your EU member-state authority).

5. MSPS Login (login.msps.one)

login.msps.one is the shared sign-in service of the MSPS products. When you sign in with Google (and, once available, with Facebook), the provider shares with us only: your name, email address and whether the provider has verified it, language setting, profile picture URL, and the provider's account identifier. We also record when each sign-in method was linked and last used. Requested scopes: openid, email, profile. We never receive your provider password.

Purpose: authenticating you and linking your sign-in to your MSPS account by verified email address. Legal basis: performance of a contract, or steps taken at your request before entering into one (GDPR Art. 6(1)(b)). We do not use this data for advertising, do not sell it and do not build profiles from it.

Session and security data: strictly necessary, HttpOnly cookies only — no analytics or third-party cookies. `__Host-crlm_up` and `__Host-crlm_acct` hold the state of an ongoing sign-in (10 minutes); `_session` keeps you signed in (14 days); `_interaction` and `_interaction_resume` cover a single sign-in step (short-lived). Sign-in tokens expire: access and ID tokens after 1 hour, refresh tokens after 14 days. The sign-in application does not store or log your IP address or browser data; network-level logs of our hosting and network providers are covered in section 2.

Storage and processors: the account database runs on our own server in Falkenstein, Germany (EU). Hosting: Hetzner Online GmbH (EU); sign-in provider: Google (Meta/Facebook once enabled); network and security: Cloudflare. MSPS products you sign in to receive only an MSPS-specific identifier, your email address and its verification status, name, language and profile picture — never the sign-in provider's own identifier. We do not pass this data to anyone outside MSPS.

Retention: for as long as your account exists. On your request we delete the account (see below); data we are legally required to keep (e.g. invoices) is kept for the period the law requires.

Deletion: how to request it is described on the Data deletion page: https://dev.msps.one/data-deletion/

6. Product sites

Each product publishes its own privacy policy on its own domain — processing there is governed by those policies.