How Information is Collected:

Directly from Users: We collect information that you provide directly, including when you:

• Register for an Account: Creating a user profile or signing up for services.
• Make a Purchase: Buying products or services.
• Contact Us: Communicating with us via email, phone, or forms.
• Participate in Surveys or Promotions: Engaging in our surveys, contests, or promotional activities.

Through Automated Means: We also collect information through automated technologies, such as:

• Cookies: Small files stored on your device to track preferences and usage.
• Web Beacons: Invisible images used to understand user behavior.
• Analytics Tools: Such as Google Analytics, to analyze trends and performance.

From Third Parties: We may also obtain information from third-party sources, including:

• Business Partners: Collaborating with other companies or industry organizations.
• Publicly Available Sources: Information publicly available online or offline.
• Social Media Platforms: If you connect or share through social media channels.

Purpose of Collection:

We collect and process information for purposes including:

 

• Providing and Enhancing Services: Fulfilling orders, offering support, and improving user experience.
• Marketing and Communication: Sending newsletters, promotional materials, and updates.
• Compliance and Security: Meeting legal requirements, protecting our rights, and ensuring the security of our services.
• Research and Analysis: Conducting research, analysis, and development to innovate and enhance our offerings.

Commitment to Security:

Redpoint is fully committed to ensuring the security of the information we collect and handle. We understand the importance of safeguarding your Personal Information and have implemented comprehensive measures to protect it.

Security Measures:

We employ a range of security measures, including:

• Encryption: Utilizing encryption technologies to protect the information during transmission and storage.
• Access Control: Implementing strict access controls to ensure that only authorized personnel have access to your information.
• Network Security: Utilizing firewalls, intrusion detection systems, and regular security assessments to protect against unauthorized access.
• Secure Development Practices: Following industry best practices in software development to ensure that our products and services are secure.
• Third-Party Vetting: Conducting assessments of third-party service providers to ensure they meet our security standards.
• Incident Response: Having an incident response plan in place to handle any potential security breaches effectively.
• Compliance with Standards: Aligning with industry standards and certifications, including our current SOC 2 Type 2 report and ISO 27001 certification.

User Rights:

General Rights:

• Access: You have the right to request access to the Personal Information we hold about you.
• Correction: You may request correction of inaccurate or incomplete information.
• Deletion: You can request the deletion of your information under certain circumstances.
• Object or Restrict Processing: You may object to or request restrictions on the processing of your information.
• Data Portability: You may request to receive a copy of your information in a commonly used electronic format.

Specific Rights under Various Laws:

California Consumer Privacy Act (CCPA):

• Right to Know: You can request details about the specific pieces of information we have collected about you, the categories of sources, the business purpose, and the categories of third parties with whom we share the information.
• Right to Delete: You can request the deletion of your Personal Information.
• Right to Opt-Out of Sales: If applicable, you can opt-out of the sale of your Personal Information.

General Data Protection Regulation (GDPR):

• Right to Object to Processing: You have the right to object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
• Automated Decision Making and Profiling: You have rights related to automated decision-making, including profiling.

Colorado Privacy Act (CPA), Virginia Consumer Data Protection Act (CDPA), Utah Consumer Privacy Act (UCPA), Nevada Internet Privacy Bill (SB260), New York Privacy Act (NYPA):

• Right to Access, Correct, Delete: Similar to the CCPA and GDPR, you may request to access, correct, or delete your Personal Information.
• Right to Data Portability: You may request your data in a portable and readily usable format.

Response Time:

We will respond to verified requests as required by applicable law and within the time frames stipulated in the specific acts mentioned above.

 

Children’s Privacy:

Redpoint’s website and services are not intended for children under 13, in compliance with COPPA.

International Data Transfers:

General Overview:

Redpoint operates globally and may transfer, store, and process your Personal Information outside of your country of residence. These international data transfers are conducted to enable us to provide our services, comply with legal obligations, and optimize our operations.

Countries Involved:

The data may be transferred to countries that may not have the same data protection laws as your country of residence. These countries may include the United States, members of the European Economic Area (EEA), and other locations where Redpoint or its third-party service providers operate.

Compliance with Legal Requirements:

When transferring Personal Information across international borders, Redpoint complies with applicable legal requirements, including the General Data Protection Regulation (GDPR) for transfers involving EEA residents.

Transfer Mechanisms:

Redpoint employs various legal mechanisms to ensure the lawful transfer of Personal Information, including:

• Adequacy Decisions: Transferring data to countries recognized by the European Commission as providing an adequate level of data protection.
• Standard Contractual Clauses (SCCs): Using contracts approved by the European Commission or other relevant authorities that obligate both parties to protect Personal Information.
• Consent: Where applicable, obtain explicit consent from you for the transfer.
• Binding Corporate Rules (BCRs): Implementing company-wide rules that ensure a consistent level of protection for Personal Information.

Third-Party Transfers:

When sharing your Personal Information with third-party service providers outside your jurisdiction, Redpoint ensures that such third parties are contractually bound to adhere to appropriate data protection standards and legal requirements.

Security Measures:

Redpoint takes measures to protect your Personal Information during international transfers, ensuring that it is treated securely and in accordance with this Privacy Policy. This includes utilizing encryption, secure servers, and other technical and organizational measures.

Contact Us:

For any questions or concerns about privacy, please contact us:

Mail: Redpoint Global Inc., Attn: Information Security, 888 Worcester Street, Suite 200 Wellesley, MA 02482

Email: [email protected].

Changes to This Policy:

Redpoint reserves the right to update this policy, aligning with legal requirements. Any changes will be posted on our website.