Privacy Policy for RedOrange.ai
It is important that you read this Notice carefully, and any privacy and data protection notice that we may subsequently provide to you, so that you are aware of and understand how and why we are processing your personal data.
SCOPE OF NOTICE
It applies to all personal data collected, maintained, transmitted, stored, retained, or otherwise used (i.e. processed) which is collected by us via our website, regardless of the media on which that personal data is stored. We may update this Notice at any time.
WHAT IS PERSONAL DATA?
HOW IS YOUR PERSONAL DATA COLLECTED?
PURPOSE AND BASIS FOR PROCESSING
We will hold, process and may disclose the personal data provided by you for the purposes and on the legal basis set out:
Identity Data includes first name, last name, username or similar identifier, marital status, title, date of birth and gender.
Contact Data includes billing address, delivery address, email address and telephone numbers.
Financial Data includes payment card details.
Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website.
Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
Usage Data includes information about how you interact with and use our website, products and services.
Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
The purpose of the above categories is to register you as a new customer, to process and deliver your order including managing payment / charges, to manage our relationship with you, to enable you to participate in surveys and other customer interactions, to administer and protect our business including this website, to deliver website relevant content and online ads to you and measure or understand the effectiveness of the advertising we serve to you, to use data analytics to improve our website and products / services, to send you marketing communications and make personalised recommendations based on your interests or profile and to carry out market research.
CHANGE OF PURPOSE
RECIPIENTS OF YOUR PERSONAL DATA
Where this is relevant to their roles, Company staff and in some cases third parties will have access to your personal information.
It may be necessary from time to time for us to disclose personal data to third parties or agents, including without limitation to the following third parties or agents, and others as may be required from time to time:
- Third parties to assist in the administration, processing and management of certain activities pertaining to the provision of past, current and prospective services;
- Individuals or companies employed or engaged by the Company to carry out specific services, functions or consultancy work including external reference agencies;
- Regulatory bodies to whom are obliged or required to disclose information including the Courts and Court-appointed persons;
- Insurance or assurance companies;
- Legal advisors and auditors;
- Potential purchasers or bidders;
- Relevant Government departments and agencies; and
- Other support service providers necessary to assist the Company with the above.
We will inform you in advance if we intend to further process or disclose your personal data for a purpose other than the purposes set out above. We take all reasonable steps, as required by law, to ensure the safety, privacy and integrity of such data and information and, where appropriate, enter into contracts with such third parties to protect the privacy and integrity of such data and any information supplied.
CROSS-BORDER DATA TRANSFERS
DATA RETENTION
In general, we will hold this information for a period of seven years after you cease to interact with us, unless we are obliged to hold it for a longer period under law or applicable regulations. However, data specifically collected as part of our recruitment process will only be held for a period of 12 months from our final interaction with a candidate during the recruitment process. If you are a successful candidate, some of your personal data obtained during the recruitment process will be held by us. This data will be subject to our separate staff privacy statement.
For further information concerning our data retention practices please see the Contact Us section below.
LINKS TO OTHER WEBSITES
SECURITY AND STORAGE OF PERSONAL DATA
We are committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorised access and use. As effective as modern security practices are, no physical or electronic security system is entirely secure. We cannot guarantee the complete security of our database, nor can we guarantee that information you supply will not be intercepted while being transmitted to us over the Internet.
We have implemented strict internal guidelines to ensure that your privacy is safeguarded at every level of our organisation. We will continue to revise policies and implement additional security features as new technologies become available.
AUTOMATED DECISION-MAKING
YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA
You have the right to request access to, rectification, or erasure of your personal data, or restriction of processing or to object to processing of your personal data, as well as the right to data portability. The following is a summary of what these rights involve:
- The right of access enables you to receive a copy of your personal data.
- The right to rectification enables you to ask us to correct any inaccurate or incomplete personal data.
- The right to erasure enables you to ask us to delete your personal data in certain circumstances, for example where it is no longer necessary for us to process it.
- The right to restrict processing enables you to ask us to halt the processing of your personal data in certain circumstances, for example if you want us to verify its accuracy or our legitimate interests in processing it.
- The right to object enables you to object to your personal data being processed on the basis of our legitimate interests (or those of a third party). We will cease processing your information, unless the processing is based on compelling legitimate grounds or is needed for the exercise or defence of legal claims. Where we use your personal data for direct marketing purposes, you can always object and opt out of future marketing messages using the unsubscribe link in such communications.
- The right to data portability enables you to ask us to transmit the personal data, that you provided to us, to a third party without hindrance, or to give you a copy of it so that you can transmit it to a third party.
In the event that we request, and receive, your consent to process your personal for a specific purpose, you have the right to withdraw your consent at any time. Your withdrawal of consent will not affect the lawfulness of our processing based on consent before its withdrawal. If you wish to exercise this right, please see Contact Us below.
If you wish to exercise any of these rights, please see Contact Us below. We will respond to your request within one month. That period may be extended by two further months where necessary, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receipt of your request. We may request proof of identification to verify your request. We have the right to refuse your request where there is a legal basis to do so, or if it is manifestly unfounded or excessive, or to the extent necessary for important objectives of public interest.
You also have the right to lodge a complaint with the Office of the Data Protection Commission (DPC) at any time. Contact details of the DPC are available at https://www.dataprotection.ie/en/contact/how-contact-us