Privacy Policy Summary for Redwood Global

This summary explains Redwood Global’s privacy policy in simple terms. Please refer to the full policy for complete details.

Data Collection

Categories of Data: Employee details, former employee details, subcontractor details, sales and warranty information, contact information of individuals and companies.
Sensitive Data: The policy doesn’t explicitly mention the collection of sensitive data like biometrics, health information, or racial information. However, it’s important to clarify this with Redwood Global directly if you have concerns.
Collection Methods: Data is collected both automatically (this isn’t explicitly stated but may be implied through “contacting individuals and companies”) and voluntarily (through user input, such as providing contact information).

Data Usage

Primary Purposes: Maintaining records and accounts, promoting business interests.
Secondary Purposes: Informing individuals about news, events, and services. The policy mentions a “legitimate interest” for contacting individuals and companies, which needs further clarification.
AI/Profiling: The policy doesn’t mention the use of data for AI training or profiling.

Third-Party Sharing

Third Parties: The policy states that data will only be shared with third parties with your consent. No specific third parties are named.
Data Sale/Rent: The policy explicitly states that data is not shared without consent, implying it’s not sold or rented.
International Transfers: The policy doesn’t mention international data transfers.

User Rights

Rights: You have the right to access, correct, and erase your data. You can also withdraw your consent to processing and request data portability. You have the right to object to processing based on legitimate interest and to lodge a complaint with the Information Commissioner’s Office.
How to Exercise Rights: Contact the Data Protection Officer (DPO), Douglas Ghinn, in writing.
Limitations/Fees: The policy doesn’t mention limitations or fees for requests.

Data Retention

Retention Period: Data is kept for four years unless you request its removal.
Exceptions: The policy doesn’t specify exceptions for legal compliance or fraud prevention.

Security Measures

The policy mentions that Redwood Global complies with GDPR obligations by storing and destroying data securely and protecting it from loss, misuse, unauthorized access, and disclosure. Specific security measures (like encryption) are not detailed.

Concerning Clauses

Vague Language: The phrase “to promote the interests of the business” is vague and could encompass a wide range of data uses. Clarification is needed. ⚠️
Legitimate Interest: The reliance on “legitimate interest” for contacting individuals and companies requires further explanation of how this interest is balanced against your privacy rights. ⚠️

Summary Cards:

1. Which Data Is Collected (Email, IP – for Ads)

Email: Yes
IP Address (for ads): Not explicitly stated, needs clarification.
Rating: 2/5

2. Your Privacy Rights (Access: Yes, Delete: Yes)

Access: Yes
Delete: Yes
Rating: 4/5

3. How Long Data Is Kept (12 months, GDPR Compliant)

Retention: 4 years (unless requested removal)
GDPR Compliant: Yes
Rating: 4/5

4. Security of Your Data (Encryption: Unspecified, Shares: None stated)

Encryption: Not specified
Shares data with: None stated (except with consent)
Rating: 2/5

5. Hits & Misses

✅ Clear Purpose (partially – some purposes need clarification)
✅ GDPR Compliant
❌ Vague language regarding data use
❌ Lack of detail on security measures
❌ No explicit mention of data sharing for advertising

Key Takeaways:

Redwood Global collects personal data for business operations and marketing.
You have several rights regarding your data, including access, correction, and deletion.

• The policy lacks detail on data security and some aspects of data usage are unclear. Clarification is needed on vague points and the “legitimate interest” basis for contacting individuals and companies.

Overall Rating: 3/5