Collect less. Use it for the stated purpose.

Name, reply email, request type, an optional platform for technical requests, your description, the applicable scope-acknowledgement version and privacy-notice version. A privacy request omits platform and the technical-scope acknowledgement. The form also uses an unstored honeypot and start-time value to limit automated misuse. It does not accept files, age declarations, trading-account qualification or payment.

For technical enquiries, the information is used to assess the requested scope, reply, prepare a requested proposal and retain a trace of the boundary shown when the request was made. For privacy enquiries, it is used to identify, assess and respond to the request. Limited technical signals are used to protect the form from misuse. The form is not used for unrelated marketing, automated decisions or behavioural analytics.

Steps requested before a possible contract apply when someone asks RangeState to assess and quote for technical work. Legitimate interests apply to proportionate service administration, security, abuse prevention and a limited record of the agreed boundary. Legal obligation applies when RangeState must handle a data-protection request or retain information required by law. These bases do not turn the technical review into a trading recommendation.

Do not provide trading-account credentials, account numbers, API keys, payment-card data, government identifiers, source code, special-category personal data or files. If technical records are later needed, RangeState will first agree the minimum material and a separate transfer method.

The website uses OpenAI Sites for hosting, deployment and member identity, with a Cloudflare-compatible worker runtime and the bound D1 database for structured request records. Those hosting, database, identity and security providers process information as needed to operate the site. Email providers process messages sent to or from the published contact address. RangeState does not have a verified analytics property, CRM delivery, notification service or evidence-upload store connected to this form.

If you choose member sign-in, the site receives the identity information supplied through OpenAI Sites authentication headers so that it can display and protect member resources. This release does not create a separate RangeState member-profile table. A short-lived return-path cookie may preserve only a safe member-area destination during sign-in.

A request record is kept while the enquiry is open, while a requested proposal or agreed service is being prepared or performed, and while a reasonable follow-up, complaint or dispute remains possible. When none of those purposes remains, it is deleted unless a legal, accounting or security obligation requires limited information to be kept longer. Review and deletion are manual; no automated deletion schedule is claimed. Provider operational and security records follow the applicable provider retention controls.

The current project configuration does not establish a UK-only hosting, identity or D1 storage jurisdiction. The infrastructure and email providers may therefore process information outside the UK in countries where they or their service providers operate. Where UK personal data is transferred internationally, the applicable provider terms and legally recognised transfer safeguards govern that processing. Contact RangeState for the information available about a particular request.

Depending on the circumstances, you may ask for access, correction, deletion, restriction, objection or a portable copy. RangeState may request only the additional information reasonably needed to verify the request. Email info@rangestate.com or submit “Privacy or data request” through the form. You may also complain to the UK Information Commissioner’s Office.