Privacy Policy

Code Red Software Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website coderedsoftware.co.uk (the "Site"), use our services, or interact with us.

Please read this Privacy Policy carefully. By accessing or using our Site and services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with this policy, please do not access the Site or use our services.

1. Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our Site, and information from third-party sources.

1.1 Information You Provide to Us

We collect information you provide directly to us, including:

• Contact Information: Name, email address, phone number, company name, job title, and postal address when you fill out contact forms, request demos, or communicate with us.
• Account Information: If you create an account with us, we collect username, password, and other registration information.
• Communication Data: Information contained in or relating to any communication that you send to us or that we send to you, including email content and metadata.
• Business Information: Information about your business, industry, operational challenges, and software requirements when you request quotes or consultations.
• Feedback and Survey Responses: Information you provide when you participate in surveys, provide feedback, or respond to our requests for information.
• Job Application Information: If you apply for employment, we collect your CV, cover letter, references, and other information you provide in your application.

1.2 Information We Collect Automatically

When you access our Site, we automatically collect certain information about your device and usage, including:

• Device Information: IP address, browser type and version, operating system, device type, unique device identifiers.
• Usage Information: Pages viewed, time spent on pages, links clicked, referring website, date and time of access, and other usage statistics.
• Location Information: General geographic location based on your IP address (city and country level).
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies. See our Cookie Policy for more details.

1.3 Information from Third Parties

We may receive information about you from third parties, such as:

• Business Partners: Companies with whom we have partnership arrangements may share information about you.
• Social Media Platforms: If you interact with us on social media (e.g., LinkedIn), we may receive information from those platforms.
• Publicly Available Sources: Information from public databases, marketing partners, and social media platforms.
• Service Providers: Analytics providers, advertising networks, and technology partners who provide us with information about your interactions with our Site.

2. How We Use Your Information

We use the information we collect for various purposes, including:

2.1 To Provide and Improve Our Services

• Respond to your inquiries and fulfill your requests
• Provide demonstrations and trials of our software
• Deliver our services and manage your account
• Process transactions and send related information
• Provide technical support and customer service
• Improve and optimise our Site and services

2.2 For Marketing and Communications

• Send you marketing communications about our products and services
• Provide you with information about industry trends and insights
• Invite you to events, webinars, and other promotional activities
• Conduct market research and customer satisfaction surveys

2.3 For Business Operations

• Administer and protect our business and Site (including troubleshooting, data analysis, testing, and security)
• Analyze usage trends and preferences to improve user experience
• Detect, prevent, and address fraud and security issues
• Comply with legal obligations and enforce our terms

2.4 Legal Bases for Processing (UK GDPR)

We process your personal data under the following legal bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes (e.g., marketing communications).
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legal Obligation: Processing is necessary for us to comply with the law.
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not overridden by your rights and interests.

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf, such as:

• Website hosting and cloud infrastructure providers
• Email delivery and marketing automation platforms
• Analytics and data analysis services
• Customer relationship management (CRM) systems
• Payment processors (if applicable)

These service providers are contractually obligated to use your information only to provide services to us and in compliance with applicable data protection laws.

3.2 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Site of any change in ownership or use of your personal information.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies, or law enforcement).

3.4 Protection of Rights

We may disclose information where we believe it is necessary to:

• Enforce our terms and conditions
• Protect our rights, privacy, safety, or property
• Protect the rights, privacy, safety, or property of our users or the public

3.5 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

4. International Data Transfers

Your information may be transferred to, and maintained on, computers located outside of your country or jurisdiction where data protection laws may differ. If you are located outside the United Kingdom and choose to provide information to us, please note that we transfer the data to the United Kingdom and process it there.

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK authorities
• Adequacy decisions recognizing that certain countries provide adequate protection
• Binding Corporate Rules for transfers within multinational organizations

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication measures
• Employee training on data protection and security
• Incident response and breach notification procedures
• Regular backups and disaster recovery plans

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods vary depending on the type of information and purpose of processing:

When we no longer need your personal information, we will securely delete or anonymise it.

7. Your Rights

Under UK data protection law (UK GDPR and Data Protection Act 2018), you have the following rights:

7.1 Right of Access

You have the right to request a copy of the personal information we hold about you. You can request access by contacting us at privacy@coderedsoftware.co.uk.

7.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.

7.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal information in certain circumstances, such as when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

7.4 Right to Restriction of Processing

You have the right to request that we restrict processing of your personal information in certain circumstances.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

7.6 Right to Object

You have the right to object to processing of your personal information where we are relying on legitimate interests or processing for direct marketing purposes.

7.7 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you.

7.8 Right to Withdraw Consent

Where we rely on consent as the legal basis for processing, you have the right to withdraw consent at any time.

8. Children's Privacy

Our Site and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

9. Third-Party Websites and Services

Our Site may contain links to third-party websites, services, and applications. We are not responsible for the privacy practices or content of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

Third-party services we use include:

• Google Analytics: For website analytics. Google Privacy Policy
• LinkedIn: For social media integration. LinkedIn Privacy Policy
• Cloudflare: For security and performance. Cloudflare Privacy Policy

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email if the changes are significant
• Post a notice on our Site homepage for 30 days

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us

12. Complaints to the ICO

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not complied with applicable data protection laws.

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113
Website: https://ico.org.uk/

However, we would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first.