Privacy Policy

Last updated: January 2025

RedRose ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

We are GDPR-compliant both as an organization and as a data-management system. Our compliance is independently verified by Grant Thornton, and PwC has evaluated RedRose's governance as 'in line with best practice.'

1. Information We Collect

We may collect information about you in various ways, including:

Personal Data

When you interact with our services, we may collect personally identifiable information such as your name, email address, phone number, company name, and job title.

Automatically Collected Information

By accessing this site, certain information about you, such as Internet protocol (IP) addresses, navigation through the Site, the software used and the time spent, along with other similar information, will be stored on our servers. These will not specifically identify you. The information will be used internally only for website traffic analysis.

2. How We Use Your Information

We use the information we collect for various purposes, including:

  • Providing, maintaining, and improving our services
  • Responding to your comments, questions, and requests
  • Sending you technical notices, updates, and administrative messages
  • Communicating with you about products, services, and events
  • Monitoring and analyzing trends, usage, and activities
  • Detecting, investigating, and preventing fraudulent transactions
  • Complying with legal obligations

3. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to outside parties except in the following circumstances:

  • With service providers who assist in operating our website and services
  • To comply with legal requirements or respond to lawful requests
  • To protect our rights, privacy, safety, or property
  • In connection with a merger, acquisition, or sale of assets
  • With your consent or at your direction

4. Data Security

Security of data and communications is our number one priority. Here are some of the ways we keep your data private and secure:

  • Secure Cloud Environment: Our solution is cloud-based and hosted on Amazon Web Services (AWS), the leader in global IT infrastructure. We operate firewalls, intrusion detection systems, and other technological safeguards.
  • Strong Encryption: All communications between users, apps, and our platform are encrypted by industry-standard SSL. The device and cloud databases are encrypted using AES encryption.
  • Strict Data Storage: We have a data storage strategy of not holding any data which is not necessary for the usage purpose.
  • Secure Logins: We feature secure logins with personal username/password pairs, which can be further secured by OTP (one-time passwords) or other two-step authentication methods.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When determining retention periods, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use, and applicable legal requirements.

6. Your Rights

Under GDPR and applicable data protection laws, you have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restriction: Request restriction of processing
  • Right to Portability: Receive your data in a structured format
  • Right to Object: Object to processing of your personal data
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us using the information provided below.

7. Cookies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. For detailed information about our use of cookies, please see our Cookie Policy.

8. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure that any such transfers are conducted in compliance with applicable data protection laws and that appropriate safeguards are in place to protect your personal information.

9. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: