Privacy Policy

Red Volcano Limited ("Company", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website and services. We are registered in England and Wales and operate in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered office is at Waterloo Buildings, Second Floor Rear, 53 London Road, Southampton, Hampshire, SO15 2AD, United Kingdom. By using our services, you acknowledge that you have read and understood this Privacy Policy.

We may collect and process the following categories of personal data: Account Information — name, email address, company name, job title, and phone number provided during registration or account management. Billing Information — payment card details and billing address, processed securely through Stripe. We do not store full card numbers on our servers. Usage Data — information about how you interact with our platform, including pages visited, features used, search queries, and session duration. Technical Data — IP address, browser type and version, operating system, device information, and referring URLs collected automatically when you access our services. Communications — records of correspondence when you contact our support team or respond to our communications. Cookies and Tracking Data — information collected through cookies and similar technologies as described in our Cookie Policy.

We process your personal data for the following purposes and legal bases: Contract Performance — to provide, maintain, and improve our services; to process payments; and to manage your account. Legitimate Interests — to analyse usage patterns and improve our platform; to detect and prevent fraud; and to ensure network and information security. Consent — to send marketing communications where you have opted in; and to place non-essential cookies on your device. Legal Obligation — to comply with applicable laws, regulations, and legal processes; and to maintain records as required by tax and financial regulations. We will never sell your personal data to third parties.

We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognise you and remember your preferences. We use essential cookies required for the platform to function, as well as analytics and marketing cookies that help us understand usage and improve our services. For full details on the cookies we use and how to manage them, please refer to our Cookie Policy.

We use the following third-party services that may process your data: Google Analytics — to analyse website traffic and user behaviour. Google may transfer data outside the UK/EEA. Google's privacy policy applies to their processing of this data. Stripe — to process subscription payments securely. Stripe acts as an independent data controller for payment data. Stripe is PCI DSS Level 1 certified. LinkedIn — for marketing and analytics purposes, including LinkedIn Insight Tag for conversion tracking and audience building. Facebook Pixel — for advertising measurement, conversion tracking, and audience targeting on the Meta advertising platform. Each third-party service operates under its own privacy policy. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where data is transferred outside the UK.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Account data is retained for the duration of your subscription and for a period of twenty-four (24) months after account closure, unless a longer retention period is required by law. Billing records are retained for seven (7) years in accordance with UK tax and accounting requirements. Analytics data is retained in anonymised or aggregated form and may be kept indefinitely for statistical purposes. When personal data is no longer required, it is securely deleted or anonymised.

Under the UK GDPR, you have the following rights regarding your personal data: Right of Access — you may request a copy of the personal data we hold about you. Right to Rectification — you may request correction of inaccurate or incomplete personal data. Right to Erasure — you may request deletion of your personal data where there is no compelling reason for continued processing. Right to Restrict Processing — you may request that we limit the processing of your data in certain circumstances. Right to Data Portability — you may request to receive your data in a structured, commonly used, and machine-readable format. Right to Object — you may object to processing based on legitimate interests or for direct marketing purposes. Rights Related to Automated Decision-Making — you have the right not to be subject to decisions based solely on automated processing that produce legal effects. To exercise any of these rights, please contact us at support@redvolcano.zendesk.com. We will respond to your request within one (1) month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your rights have been infringed.

If you have any questions about this Privacy Policy or our data practices, please contact us: Red Volcano Limited Waterloo Buildings, Second Floor Rear 53 London Road, Southampton Hampshire, SO15 2AD United Kingdom Email: support@redvolcano.zendesk.com