Privacy policy

This website is published by:

In this policy, “REGAL 3”, “we” and “us” mean that company, and “you” means anyone who uses this site or sends us a message through it. REGAL 3 decides what is collected here and why, so REGAL 3 is responsible for it. Write to info@regal3.com about anything on this page, or to the address above.

[CLIENT TO CONFIRM: whether a named data-protection contact is wanted, or whether info@regal3.com is the single point for privacy questions. No data-protection officer is claimed here, because none has been appointed.]

Two things, and it is worth saying plainly how little that is. There is no account to open, no login, no newsletter, no advertising pixel, no third-party tracker, and no cookie set by us.

The contact form. Your name and email address, which are required; your company, which is optional; which part of the firm your enquiry is about; and your message. The message is free text, so what goes in it is entirely your decision — please read section 7 before you put anything commercially sensitive in it.

Vercel Web Analytics and Speed Insights. These measure how the site performs and which pages are read. They are cookieless and aggregate: page path, referring site, country, a broad device and browser class, and page-loading timings. They do not set a cookie, do not carry a cross-site identifier, and do not build a profile of you. Nothing you type into the contact form is ever sent to them.

[CLIENT TO CONFIRM: that both Vercel Web Analytics and Speed Insights are switched on at launch. They are wired up today. If either is turned off before launch, this section changes; if both are, it is replaced by a single sentence saying the site sets no cookies and uses no analytics at all.]

We collect what the contact form asks for so that a director of the firm can read your enquiry and reply to it, and so that we can carry on the conversation and the business relationship that may follow from it. We use the analytics measurements to keep the site fast and readable. That is all. We do not sell your details, and we do not use them to market to you.

This policy is drafted under the laws of the State of Wisconsin, United States, where the firm has its office.

[CLIENT TO CONFIRM: the legal framing, including whether Wisconsin is the intended governing law — drafted from the location of the firm’s office, not from instruction. US law does not require a European-style lawful basis, but the firm’s cross-border work means enquiries will arrive from the EU and the UK, for which consent and legitimate interest is the usual framing. This is worth deciding rather than inheriting from a template.]

When you submit the contact form, what you wrote is turned into an email and sent to one REGAL 3 mailbox. It is not written to a database, a spreadsheet or a customer-record system anywhere on this website. There is nothing on this site holding a copy of your enquiry, because the email is the only record we keep.

Resend (Resend, Inc., a transactional email provider in the United States) sends that email on our behalf and keeps a copy of it in its own system for a period set by Resend’s retention policy. Resend acts on our instructions and does not use your message for its own purposes.

[CLIENT TO CONFIRM: Resend’s actual retention period for sent mail, stated as a number here, together with links to Resend’s privacy policy, its data-processing agreement and its list of sub-processors. Do not guess the period.]

The mailbox. Once delivered, your message sits in the recipient’s email mailbox, which is hosted by the firm’s email provider. That provider handles the message in the same way it handles all of the firm’s mail.

[CLIENT TO CONFIRM: the name of the email provider hosting the regal3.com mailboxes. It handles your message, so a policy that does not name it is incomplete.]

Vercel hosts this website. Like any host, it processes the technical details of your request — including your IP address — in order to serve the pages to you and to protect the site from abuse.

[CLIENT TO CONFIRM: a link to Vercel’s data-processing agreement and its sub-processor list.]

Your IP address. To stop the contact form being used to send bulk mail, we limit how many messages one connection can send in a short period. To do that without keeping IP addresses, the form converts the address into a one-way hash — a fixed string the address cannot be recovered from — and holds that hash in the server’s memory for at most ten minutes before it is discarded. The address itself is never stored and never written to a log by us. The form also carries a hidden field that only automated software fills in; messages that fill it are discarded unread and are not sent to anyone.

An enquiry that does not lead to an engagement is kept only as long as it is useful to keep, and is then deleted from the mailbox. An enquiry that does lead to an engagement becomes part of the file for that engagement, and is kept for as long as the engagement letter and the firm’s professional record-keeping obligations require.

[CLIENT TO CONFIRM: a specific retention period for enquiries that do not become engagements — a number, such as twelve months, is far better than “as long as necessary”, and for a firm whose pitch is confidentiality it is close to a requirement.]

[CLIENT TO CONFIRM: the retention period for enquiries that do become engagements, which the engagement letter and the firm’s records obligations govern rather than this policy.]

Nobody outside REGAL 3, other than the service providers named in section 4, who handle your message only in order to deliver and store it. We do not sell your details, we do not rent them, and we do not add you to any list. If we are ever required by law or by a court to hand something over, we will do only what the law requires.

[CLIENT TO CONFIRM: whether an enquiry is ever shared with Cross Border Associates or a member firm of that alliance when a cross-border transaction is in view. If the answer is ever yes, this section must say so, and the promise made on the contact page — that a message is not passed to anyone outside REGAL 3 — has to change with it. This is the most consequential question on this page.]

Most people who write to this firm are thinking about selling a business, raising money or turning one around, and cannot yet tell their staff, their suppliers or in some cases a co-owner. This policy describes how your personal details are handled. It is not the same thing as the commercial confidentiality that protects the fact and the substance of a possible transaction.

That protection comes from a non-disclosure agreement, signed before anything sensitive changes hands. So please keep the first message general: tell us enough to know whether we can help, and leave figures, names and documents until we have agreed in writing how they will be protected. Sending the form does not create an advisory or client relationship — the terms of use explain that.

[CLIENT TO CONFIRM: how this policy relates to the firm’s commercial confidentiality obligations, and at what point a non-disclosure agreement is offered.]

You can ask us what we hold about you and get a copy of it; ask us to correct it if it is wrong; ask us to delete it; object to our using it, or ask us to restrict what we do with it; and withdraw your agreement to our holding it at all, at any time. Asking costs nothing and we will not treat you differently for asking. Because the only record is an email in a mailbox, deletion here means exactly that: the message is deleted.

[CLIENT TO CONFIRM: the exact list of rights and the time the firm commits to replying in. Which rights apply depends on which regimes the firm accepts it is subject to — California’s CCPA and CPRA for California residents, the EU and UK GDPR for enquirers there, and Wisconsin law otherwise. The list above is drafted generously so that no regime is under-served, which is a decision to confirm rather than assume.]

Email info@regal3.com, or write to us at:

Say what you want done and give us enough to find your message — the email address you wrote from is usually enough. We may need to check that the request really comes from you before we act on it.

[CLIENT TO CONFIRM: whether a separate privacy mailbox is wanted, or whether info@regal3.com handles these requests.]

This site is served over an encrypted connection, and your message travels encrypted from the site to Resend and on to the mailbox. Access to the mailbox is limited to the firm’s directors. No payment details, card numbers or bank details are collected anywhere on this site, and you should never send them through the contact form. No website can promise perfect security, and we do not.

[CLIENT TO CONFIRM: each of these security statements against how the firm’s mail and devices are actually administered — in particular who can reach the mailbox, and whether multi-factor authentication is enforced on it. Nothing stronger should be claimed than can be demonstrated.]

This site is meant for business owners, investors and their advisers. It is not directed at children, and we do not knowingly collect details from anyone under 18. If you believe a child has sent us something, tell us at info@regal3.com and we will delete it.

[CLIENT TO CONFIRM: whether the threshold should be 18 or 13, given the jurisdictions in section 8.]

The firm is in the United States and this site is served from there, so a message sent from outside the United States is transferred to and handled in the United States. Privacy law in the United States is not the same as the law where you are.

[CLIENT TO CONFIRM: the transfer mechanism the firm relies on for enquiries from the EU and the UK, if any — standard contractual clauses, the EU–US Data Privacy Framework, or consent — and whether the firm accepts it is subject to those regimes at all.]

We may change this policy. The version on this page is always the current one, and the date under the heading at the top is the date the text last changed. We do not notify changes individually, so check that date if you are relying on what this page says. If a change materially affects what happens to something you have already sent us, we will say so at the top of this page.