Privacy Policy

Redsoft Software and Consultancy Ltd ("Redsoft", "we", "us") is a company registered in England & Wales under company number 13611086, based in Herts & London.

For the purposes of UK GDPR, Redsoft is the data controller for personal data we collect through this website and through direct business contact. You can reach us at hello@redsoft.uk.

We collect only what we need to run our business:

• Contact details you share with us — name, email address, company, phone number and anything you write in a message.
• Meeting booking data — when you book a call through our Calendly link, your name, email and the time slot you choose.
• Project and correspondence data — emails, documents and notes shared while we are scoping or delivering an engagement.
• Technical data — IP address, device type, browser, referrer and pages viewed. Collected automatically via server logs and, where enabled, privacy-friendly analytics.
• Supplier / invoicing data where you engage us as a customer — billing address, VAT number if applicable, and bank details for payment.

We do not knowingly collect special category data (e.g. health, religion, ethnicity) through this website.

We use your data for a small set of specific purposes:

• To respond to enquiries and schedule discovery calls.
• To deliver the services we have agreed with you.
• To send project updates, contracts, invoices and other business communications.
• To operate and improve this website (aggregate usage, bug and security investigation).
• To meet our legal and regulatory obligations (for example, keeping accounting records).

We rely on the following lawful bases:

• Contract — to negotiate, enter into and perform a contract with you or the organisation you represent.
• Legitimate interests — to respond to your enquiries, run our business and keep this website secure, in a way that does not override your rights.
• Legal obligation — for tax, accounting and regulatory record-keeping.
• Consent — where we ever ask you to opt in to something specific (for example, a marketing email list). You can withdraw consent at any time.

We do not sell your data. We share it only with trusted service providers that help us run our business, under contracts that require them to protect it:

• Hosting and infrastructure — Vercel, AWS and other cloud platforms used to serve this website and applications we build.
• Scheduling — Calendly, when you book a call using our public link.
• Email and productivity — business mail and document storage providers.
• Accounting and payments — our accountants, HMRC where required, and payment processors when you settle an invoice.
• Legal and regulatory bodies — where we are required to share data by law.

Some of our service providers are based outside the UK. When we transfer personal data abroad, we rely on UK adequacy decisions or approved safeguards (such as the UK International Data Transfer Agreement or Standard Contractual Clauses) to keep your data protected to UK standards.

We keep personal data only as long as we need it for the purpose it was collected, and to meet legal obligations:

• Enquiry correspondence: up to 24 months after the last contact, then deleted or anonymised.
• Client project records and deliverables: for the duration of the engagement and up to 6 years after, in line with UK tax and contract law.
• Financial records: 6 years as required by HMRC.
• Website server logs and analytics: typically 30–90 days in identifiable form.

Under UK GDPR you have the right to access a copy of your data, have it corrected or deleted, restrict or object to how we process it, request portability, and withdraw any consent you have given. These rights have some legal limits — we will explain them if they apply.

To exercise any of these rights, email us at hello@redsoft.uk. We will respond within one month.

If you are not satisfied with how we have handled your data, you can complain to the UK Information Commissioner's Office (ICO). We would appreciate the chance to address your concerns first.

This website uses cookies and similar technologies. We split them into two categories:

• Strictly necessary — required to run the site, remember your consent choice and keep it secure. These do not require consent under the Privacy and Electronic Communications Regulations (PECR).
• Analytics (Google Analytics 4)— set only after you press "Accept" on our consent banner. They help us understand which pages are useful and where the site can be improved. IP addresses are anonymised and we do not use Google Analytics for advertising.

We implement Google's Consent Mode v2: by default, all non-essential storage and data sharing are set to denieduntil you consent. You can change your choice at any time by clearing this site's storage in your browser — the consent banner will reappear.

We take reasonable technical and organisational measures to protect personal data — including access controls, encryption in transit and at rest where relevant, least-privilege engineering practices and regular patching.

No system is completely secure. If a personal data breach occurs that is likely to affect your rights, we will notify you and, where required, the ICO without undue delay.

This website and our services are directed at businesses and are not intended for children under 16. We do not knowingly collect personal data from children.

We may update this policy from time to time to reflect changes in our services, technology, or the law. We will change the "Last updated" date at the top and, for material changes, give a more prominent notice.