Effective date: October 8, 2025

Who we are

Red Dot (“Red Dot,” “we,” “our,” or “us”) operates the website reddot.red and related services (the “Services”).
Contact: Compliance@reddotcorp.com

This Privacy Policy explains how we collect, use, share, and protect personal information and the choices you have. If you are in the European Economic Area, the United Kingdom, or Switzerland, Red Dot is the “controller” of your personal data for the purposes described here.

Quick summary

• We collect only what we need to operate and improve our Services, respond to inquiries, and run basic analytics.

• We do not sell your personal information. We do not “share” it for cross-context behavioral advertising.

• We honor Global Privacy Control signals where required and appropriate.

• EU/UK users receive GDPR disclosures, including legal bases, transfer safeguards, and rights.

• U.S. users receive state-specific disclosures and rights, including California CCPA/CPRA.

• You can access, correct, delete, or opt out by contacting us at [privacy@reddot.red].

Information we collect

We collect the following categories of information:

1. You provide to us

   • Contact details such as name, email, phone, company, and message content.

   • Account or preference information if you sign up for any portal, newsletter, or beta.

   • Payment or billing details if you purchase services from us. Payments may be processed by third-party processors; we do not store full card numbers.

2. Automatically collected

   • Device and usage data, including IP address, browser type, operating system, pages viewed, referring pages, timestamps, and general location derived from IP.

   • Cookies and similar technologies used for essential site operation, basic analytics, and remembering preferences. See “Cookies and tracking” below.

3. From third parties

   • Service providers and partners supporting our site, analytics, communications, payments, or security.

   • Public sources, social media, or marketing platforms where permitted by law.

We do not intentionally collect sensitive personal information. Please do not share health, financial account numbers, government IDs, or other sensitive data unless we specifically request it for a defined purpose.

How we use information (purposes and GDPR legal bases)

We use information to:

• Operate, secure, and improve the Services; provide support; respond to inquiries; process transactions; communicate about updates or offers you request; comply with law; prevent fraud; and protect our rights.

GDPR legal bases for EU/UK users include:

• Contract to provide requested Services or respond to inquiries.

• Legitimate interests such as site security, basic analytics, product improvement, and business communications that respect your rights.

• Consent for non-essential cookies, certain marketing, and wherever required.

• Legal obligation when we must comply with laws or respond to lawful requests.

• Vital interests only in rare, safety-related scenarios.

Cookies and tracking

We use:

• Strictly necessary cookies for core functionality and security.

• Analytics cookies to understand site traffic and performance.
  Where required in the EU/UK, we obtain consent before setting non-essential cookies. In the United States, you can adjust browser settings and use opt-out mechanisms. We honor Global Privacy Control (GPC) signals for applicable U.S. state laws and treat them as opt-out requests for sale/sharing or targeted advertising where such concepts apply.

If we introduce additional advertising or personalization tools in the future, we will update this policy and our consent banner and provide appropriate opt-outs.

No sale or sharing for cross-context behavioral advertising

We do not sell personal information. We do not “share” personal information for cross-context behavioral advertising as those terms are defined under the California Privacy Rights Act and similar state laws. If this changes, we will provide required notice and an easy “Do Not Sell or Share My Personal Information” mechanism.

How we disclose information

We disclose personal information only as needed:

• Service providers under contract who process information for us, such as hosting, analytics, email, CRM, payments, and security.

• Business transfers in connection with a merger, sale, or reorganization.

• Legal and safety to comply with law, respond to lawful requests, or protect rights, users, or the public.
  We do not permit service providers to use your information for their own marketing.

Data retention

We retain personal information only as long as necessary for the purposes in this policy, to comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by category and context. When no longer needed, we delete or de-identify information.

Security

We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is fully secure. If we detect a security incident that presents a risk to you, we will notify you and regulators where required.

International transfers

If you are located outside the country where our servers or providers are located, your information may be transferred internationally, including to the United States. For EU/UK/Swiss data, we rely on appropriate transfer safeguards, such as the European Commission’s Standard Contractual Clauses and, for the UK, the relevant UK Addendum. You can contact us for more details.

Your rights

EU/UK/Swiss users (GDPR)

You have the right to request: access, correction, deletion, restriction, portability, and to object to processing, including to direct marketing. Where we rely on consent, you may withdraw it at any time. We will respond within the timeframes required by GDPR. You also have the right to lodge a complaint with your local supervisory authority.

United States users

Depending on your state, you may have rights to:

• Know, access, and obtain a portable copy of personal information.

• Correct inaccuracies.

• Delete personal information.

• Opt out of sale, targeted advertising, or certain profiling.

• Limit the use and disclosure of sensitive personal information.

• Appeal our decision if we decline to act on your request.

We will not discriminate against you for exercising your rights.

How to submit a request or appeal

Email compliance@reddotcorp.com with your request and state of residence, or use our [web form URL if you add one]. We may need to verify your identity and state residency. If we deny your request, you may submit an appeal by replying to our decision within 60 days. If your appeal is denied, you may contact your state attorney general.

Authorized agents (California)

You may designate an authorized agent to make a verifiable request on your behalf. We may require proof of authorization and verification of your identity.

Children’s privacy

Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13, and in the EU/UK from children under 16 without appropriate consent. If you believe a child provided personal information, contact us to request deletion.

Marketing communications

You may opt out of marketing emails by using the unsubscribe link in those emails or by contacting us. We may still send non-marketing messages, such as transactional or service communications.

Your responsibilities as a business customer

For business clients, we may process personal information on your instructions and for your purposes. In those cases, you are the controller and we act as your processor under a separate Data Processing Addendum (DPA). Please contact us for our standard DPA if applicable.

Do Not Track

Some browsers send “Do Not Track” signals. There is no standard governing response to these signals. We currently do not respond to DNT but, as noted above, we honor Global Privacy Control signals where required.

Third-party links

Our Services may link to third-party websites or services. Their privacy practices are governed by their own policies.

Changes to this policy

We may update this Privacy Policy from time to time. The “Effective date” will reflect the latest version. Material changes will be highlighted on this page or communicated by other reasonable means.

Contact us

Questions or requests about this Privacy Policy:
Email: compliance@reddotcorp.com
Mail: [Attn: Privacy, Red Dot, 2504 E Main Ave, Puyallup, WA 98372]

---

State-specific disclosures (notice at collection)

The following supplements apply to residents of U.S. states with consumer privacy laws. Categories listed below are collected for the purposes described above and retained as described in “Data retention.”

Categories we collect: Identifiers (name, email, IP address), Internet or network activity (pages viewed, device data), professional information (if you contact us as a business), and commercial information (if you purchase services). We do not sell or share personal information for cross-context behavioral advertising. We do not use personal information for automated decisions that produce legal or similarly significant effects.

Your rights: Access, correction, deletion, portability, opt out of sale or sharing, limit use of sensitive information (if ever collected), and non-discrimination. To exercise rights, see “How to submit a request or appeal.”

Opt-out signals: We recognize Global Privacy Control as an opt-out where required.

Metrics: If future law requires publishing metrics about rights requests, we will publish them here.

Cookies and consent in the EU/UK

We use a consent mechanism for non-essential cookies. You can change or withdraw consent at any time using our cookie banner or settings. Essential cookies are always active to deliver the site.

Accessibility

If you need this Privacy Policy in an alternative format, contact us at compliance@reddotcorp.com.

Questions

If you have questions about this Policy or how we handle information, contact compliance@reddotcorp.com.