Privacy Policy

1. Overview

This Privacy Policy applies to personal information processed in connection with Reedroux websites, accounts, customer communications, software platforms and associated digital services.

It applies where Reedroux determines the purposes and means of processing personal information. Certain services may be subject to additional privacy notices or contractual data processing terms.

Where Reedroux processes personal information on behalf of a business customer, that customer may act as the data controller and Reedroux may act as a data processor. In those cases, the customer's privacy notice and applicable data processing agreement may govern the processing.

2. Data Controller

For processing activities covered by this Privacy Policy, the identified data controller is:

European Union Representative

The following entity is identified as the European contact for relevant data protection matters, subject to confirmation of its formal representative status:

3. Information We Collect

Depending on the services you use and how you interact with Reedroux, we may process the following categories of information.

Account and Contact Information

• Name and contact details.
• Email address and organization information.
• Account identifiers and profile settings.
• Authentication and account security information.

Technical and Usage Information

• IP addresses and connection metadata.
• Browser type, device type and operating system.
• Request timestamps and application logs.
• Service usage and diagnostic information.
• Security-related events and error reports.

Communications

When you contact our team, we may process your email address, the contents of your message, attachments and relevant support correspondence.

Transaction Information

Where paid services are offered, we may process billing contact information, transaction references, invoice details and payment status information.

Payment card details, where applicable, may be processed directly by an external payment provider rather than stored by Reedroux.

4. How We Use Information

We may use personal information for the following purposes:

• Providing, operating and maintaining our websites and services.
• Creating and administering user accounts.
• Authenticating users and preventing unauthorized access.
• Responding to inquiries and providing technical support.
• Diagnosing incidents and improving service reliability.
• Detecting fraud, abuse and security threats.
• Processing transactions and maintaining relevant business records.
• Meeting applicable legal and regulatory obligations.

We do not treat personal information as available for unrestricted use. Processing must be connected to a defined and lawful purpose.

5. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) applies, processing must rely on an appropriate legal basis under Article 6.

Depending on the circumstances, these bases may include:

• Contractual necessity: processing required to provide services requested by a user or customer.
• Legal obligations: processing required to comply with applicable law.
• Legitimate interests: processing necessary for proportionate operational, security or administrative purposes, subject to applicable safeguards.
• Consent: processing based on a valid choice where consent is required, including certain optional cookies or communications.

The applicable legal basis depends on the specific processing activity and relevant circumstances.

6. Sharing Personal Information

Personal information may be shared with trusted service providers where necessary for legitimate business operations.

Depending on the service, recipients may include hosting and infrastructure providers, email service providers, payment processors, security service providers and professional advisers.

Service providers processing personal information on our behalf should be subject to appropriate contractual confidentiality, security and data protection requirements.

We may also disclose information where required by applicable law, valid legal process or to protect the security and rights of Reedroux, its users or others.

We do not authorize service providers to use personal information for unrelated purposes simply because they receive it while supporting our services.

7. International Data Transfers

Reedroux operates in an international technology environment. Depending on infrastructure locations and service providers, personal information may be processed outside the country in which it was originally collected.

Where GDPR restrictions on international transfers apply, an appropriate transfer mechanism must be used. Depending on the circumstances, this may include an adequacy decision, Standard Contractual Clauses or another lawful mechanism.

Additional safeguards may be necessary depending on the destination, recipient and nature of the information.

8. Data Retention

Personal information should be retained only for as long as reasonably necessary to fulfill the purposes for which it was collected, subject to applicable legal and contractual requirements.

Retention periods may differ for account records, support correspondence, security logs, transaction records and backups.

When information is no longer required, it should be deleted, anonymized or otherwise handled in accordance with applicable retention requirements.

9. Information Security

Reedroux recognizes that the security of personal information is an important part of responsible service operation.

Depending on the relevant systems, security measures may include access restrictions, authentication controls, encrypted communications, logging, software updates, backups and incident response procedures.

No online service or technical system can guarantee absolute security. Security controls must be reviewed and adapted to relevant risks.

10. Cookies and Analytics

Reedroux websites may use cookies or similar technologies for essential functionality, security, preferences and, where implemented, analytics.

Essential technologies may be required for authentication, session management or security.

Optional analytics or tracking technologies must be assessed under applicable privacy and electronic communications laws. Where consent is required, they should not be activated before valid consent has been obtained.

Users can also manage certain cookies through their browser settings.

11. Your Privacy Rights

Depending on your location and the applicable law, you may have rights concerning your personal information.

Under the GDPR, these may include:

• The right to access personal information.
• The right to correct inaccurate information.
• The right to request erasure.
• The right to restrict processing.
• The right to data portability.
• The right to object to certain processing.
• The right to withdraw consent where applicable.
• The right to lodge a complaint with a competent supervisory authority.

These rights may be subject to conditions, limitations and exemptions under applicable law.

To submit a privacy request, contact [email protected] . We may need to verify your identity before responding to certain requests.

12. Children's Privacy

Reedroux services are generally intended for business, technical and other users who are legally permitted to access the relevant services.

Where specific age restrictions apply, those restrictions should be communicated through the applicable service terms.

If you believe personal information relating to a child has been processed inappropriately, please contact us.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, processing activities, legal obligations or organizational practices.

When this policy changes, the updated version will be published with a revised effective or update date. Additional notice will be provided where required by applicable law.

14. Contact Information

For questions about this Privacy Policy or requests relating to personal information, contact: