Privacy Policy

Last updated: March 22, 2024 | Effective Date: January 1, 2024

1. Introduction

Redrays ("Company," "we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website, engage with our services, or otherwise interact with us.

This Privacy Policy applies to all information collected through our website (redrays.com and any associated subdomains), our services, and any related services, sales, marketing, or events. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you express interest in obtaining information about us or our services, when you participate in activities on the website, or otherwise when you contact us. The personal information we collect may include:

• Name and contact information (email address, phone number, mailing address)
• Professional information (job title, company name, industry sector)
• Account credentials (username and password for client portal access)
• Payment information (billing address, payment method details)
• Communication records (emails, messages, and correspondence with our team)
• Service-related information (project requirements, technical specifications)

2.2 Information Automatically Collected

When you visit our website, we automatically collect certain information about your device and your use of our website. This information may include:

• Device information (IP address, browser type and version, operating system)
• Usage data (pages visited, time spent on pages, click patterns, referring URLs)
• Location data (country, region, city based on IP address)
• Technical information (internet service provider, device identifiers)

2.3 Information From Third Parties

We may receive information about you from third parties, including business partners, marketing partners, social media platforms, and publicly available sources. This information may be combined with other information we collect about you.

3. How We Use Your Information

We use the information we collect for various business purposes, including:

3.1 Service Delivery

• To provide, operate, and maintain our services
• To process and complete transactions
• To send administrative information, confirmations, and updates
• To respond to inquiries and provide customer support
• To fulfill contractual obligations

3.2 Business Operations

• To analyze usage patterns and improve our services
• To develop new products, services, features, and functionality
• To conduct research and analysis for business planning
• To maintain internal records and administrative purposes

3.3 Communications

• To send marketing and promotional communications (with your consent)
• To provide information about services that may interest you
• To send technical notices, updates, and security alerts
• To respond to legal requests and prevent harm

3.4 Security and Protection

• To protect our services, users, and the public
• To detect, prevent, and address fraud, security breaches, and technical issues
• To enforce our terms, conditions, and policies
• To comply with legal obligations and regulatory requirements

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing necessary to perform a contract with you or take steps at your request before entering a contract
• Legitimate Interests: Processing necessary for our legitimate business interests, provided these are not overridden by your rights and interests
• Consent: Processing based on your specific, informed consent for particular purposes
• Legal Obligation: Processing necessary to comply with applicable laws and regulations

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

5.1 Service Providers

We may share your information with third-party vendors, service providers, contractors, or agents who perform services on our behalf and require access to such information to perform their work. These parties are obligated to maintain confidentiality and security of your data.

5.2 Business Transfers

In connection with any merger, acquisition, financing, sale of company assets, or transition of service to another provider, your information may be transferred as part of such transaction as permitted by law.

5.3 Legal Requirements

We may disclose your information where required to comply with applicable law, governmental requests, judicial proceedings, court orders, or legal processes. We may also disclose information to establish or exercise our legal rights or defend against legal claims.

5.4 Protection of Rights

We may disclose your information when we believe disclosure is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or illegal activities.

6. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. These measures include:

• Encryption of data in transit and at rest using industry-standard protocols
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection and security practices
• Incident response procedures for potential data breaches
• Regular backups and disaster recovery procedures

However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period may vary depending on the context of our relationship with you and the type of information.

When determining retention periods, we consider:

• The nature and sensitivity of the information
• The purposes for which we process the information
• Applicable legal requirements
• The potential risk of harm from unauthorized use or disclosure
• Whether we can achieve the purposes through other means

When personal information is no longer required, we will securely delete or anonymize it in accordance with our data retention policies and applicable law.

8. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information:

8.1 Access and Portability

You may request access to the personal information we hold about you and receive a copy of your data in a structured, commonly used, and machine-readable format.

8.2 Correction

You may request that we correct inaccurate or incomplete personal information we hold about you.

8.3 Deletion

You may request that we delete your personal information, subject to certain exceptions provided by law.

8.4 Restriction and Objection

You may request that we restrict processing of your personal information or object to our processing based on legitimate interests.

8.5 Consent Withdrawal

Where we rely on consent to process your information, you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

8.6 Marketing Opt-Out

You may opt out of receiving marketing communications from us at any time by following the unsubscribe instructions in our emails or by contacting us directly.

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within the timeframe required by applicable law.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information and to improve and analyze our services. Cookies are small data files stored on your device that help us understand how you interact with our website.

9.1 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality and security
• Analytics Cookies: Help us understand how visitors interact with our website
• Functional Cookies: Enable enhanced functionality and personalization
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

9.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or delete certain cookies. However, blocking some types of cookies may impact your experience on our website and limit the services we can offer.

9.3 Do Not Track

Some browsers include a "Do Not Track" feature that signals to websites that you do not want your online activity tracked. We honor Do Not Track signals and do not track, plant cookies, or use advertising when a Do Not Track browser mechanism is in place.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

When we transfer your information to other countries, we will protect that information as described in this Privacy Policy and in accordance with applicable law. We use appropriate safeguards for international transfers, which may include:

• Standard contractual clauses approved by relevant authorities
• Binding corporate rules for transfers within our corporate group
• Transfers to countries with adequate data protection laws
• Other lawful transfer mechanisms as permitted by applicable law

11. Children's Privacy

Our services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information from our servers.

If you believe that we may have collected information from a child, please contact us immediately using the contact information provided below.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, and other factors. When we make changes, we will update the "Last Updated" date at the top of this policy.

If we make material changes to this Privacy Policy, we will notify you by:

• Posting a prominent notice on our website
• Sending an email to registered users (where applicable)
• Obtaining your consent where required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about our information practices.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Redrays
Privacy Inquiries
Email: privacy@redrays.com

For data protection inquiries in the European Union, you may also contact our Data Protection Officer at dpo@redrays.com.

If you are not satisfied with our response or believe we are processing your personal information in violation of applicable law, you may have the right to lodge a complaint with your local data protection authority.