01
Scope of Collection
We only see what is necessary to resolve.
Retinel operates on a principle of Minimal Signal. We do not harvest data; we ingest only the specific variables required to maintain your digital infrastructure.
identity
Identity Variables
Name, professional email, and organizational affiliation provided during Sync.
telemetry
Technical Telemetry
IP addresses and session metadata ingested solely for security auditing and load balancing.
assets
Project Assets
Secure handling of
API keys, DNS records, and architectural blueprints during the Resolve phase.02
Temporal Governance
Data exists only as long as it has utility.
Our retention protocols are governed by the Retinel Lifecycle. We do not "hoard" data — we cache it for performance and purge it for security.
active
Active Signals
Retained for the duration of our engagement to ensure high-fidelity support.
dormant
Dormant Records
Automatically archived after
365 days of inactivity and permanently purged after 730 days unless legal statutes dictate otherwise.session
Session Logs
Hard-purged every
30 days to minimize the "Data Shadow" of our clients.03
Infrastructure Hardening
Security isn’t a feature; it’s the foundation.
Protecting your data is an architectural requirement, not an afterthought. We employ a Zero-Trust posture across all internal systems.
encrypt
Encryption Standards
All data is hardened using
AES-256 at-rest and TLS 1.3 in-transit.access
Access Control
Multi-factor authentication (MFA) and hardware-based security keys are mandatory for all Architects of Clarity.
audit
Audit Logs
Every access point is monitored by automated network security protocols to detect and resolve anomalies in real-time.
Zero-Trust Posture: No internal system assumes trust by default. Every request is authenticated, every access is logged.
04
External Ecosystems
We do not trade in signals.
Retinel never sells, leases, or trades client data. We only synchronize with third-party providers necessary to host and scale your resolutions.
ledger
Sub-processor Transparency
A full ledger of our technical partners — including AWS, Google Workspace, and Vercel — is available upon request for security audits.
shield
Quiet Discretion
Our partners are held to the same standards of anonymity and structural integrity that we promise our clients. No exceptions.
gtm
Google Tag Manager
GTM operates as a dispatch layer only — it routes tag instructions but does not itself collect or store personal user data. All data collection is governed by the tags it fires, detailed below.
ga4
Google Analytics 4
GA4 collects anonymised behavioural telemetry including page paths, referral source, session duration, device & browser type, and truncated IP address (last octet masked). No personally identifiable information is transmitted. You may opt out via the Google Analytics Opt-out Browser Add-on or through our cookie consent module. For full details, refer to Google’s data privacy reference.
fb
Meta Pixel & Conversions API
This tool tracks specific actions on our site to measure ad performance and show you relevant marketing messages on Facebook and Instagram. It transmits event data (such as page views or form interactions) alongside hashed, pseudonymous identifiers to match web actions with Meta user profiles. You can manage your ad preferences via your Facebook account settings or opt out through our cookie consent module. For full details, refer to Meta’s Privacy Policy.
no
Your Right to Privacy
To request data removal from any platform, visit our Data Deletion Instructions.
05
Global Sovereignty
You own the frequency.
We recognize data privacy rights across all jurisdictions. No matter your location, you have complete command over your frequency — including the right to access, correct, restrict, or purge your data.
access
Request Access
Receive a high-fidelity export of all data associated with your profile.
resolve
Request Resolution
Correct any inaccuracies in your organizational records at any time.
purge
Initialize Purge
Exercise your "Right to be Forgotten" by decommissioning your data from our systems.
SG
🇸🇬 Singapore PDPA Compliance
Pursuant to the Personal Data Protection Act 2012, you have the right to request access to your data or demand corrections to inaccuracies. Requests will be fulfilled as soon as reasonably possible, except where deemed frivolous, vexatious, or tied to active prosecutions.
EU
🇪🇺 EU & UK GDPR Framework
Our lawful basis for processing your data is either contract execution or legitimate commercial interest. You hold the explicit right to object to processing, restrict data portability, or command a total erasure of your files — the Right to be Forgotten.
US
🇺🇸 US State Privacy Laws (CCPA / CPRA)
Retinel confirms we do not "sell" or "share" your personal identifiers as defined by the California Consumer Privacy Act. You retain the right to know what metrics we collect and to opt out of downstream tracking tools via our consent modules.
06
Communication Link
Initialize Inquiry.
To trigger a Signal Audit, correct an operational record, or initialize a Complete Data Purge, transmit your request directly to our designated Data Protection Officer (DPO).
dpo
Data Protection Officer
All compliance transmissions and data rights requests are routed directly to our DPO for processing.
sla
48-Hour Acknowledgement SLA
Our command center will acknowledge and initialize processing of all valid compliance transmissions within 48 hours.
Transmit your request to [email protected] — include your name, request type, and any relevant identifiers.