RedBlack is a software development company founded in York, England, in 1998. We design cloud-based applications for customers in the food industry and in other sectors and are best-known for our Cybake bakery management system.
RedBlack Software operates the following websites:
The following principles are complied with when processing personal data:
The lawful basis of processing of data will always be determined prior to any data being processed. The laws for processing personal data under the GDPR are as follows:
RedBlack processes personal data under one, or more, of the following Lawful Bases:
The type of personal data being processed may include:
Personal data is obtained from one or more of the following:
Personal data is collected to provide legitimate business services which include:
Where indicated, however, some of the information is optional and you can choose not to complete.
Personal data may be used to:
If a web form is completed on any of the above websites, information is stored on the Company’s CRM system. Previous browsing history on the RedBlack websites is available to authorised RedBlack employees only to determine your interests in order that RedBlack can engage with you more effectively and improve our site. If Cookies are switched-off then your previous browsing history is no longer be available to RedBlack.
If you do not wish for us to have your personal information, please do not fill out any of the web forms on these sites.
As part of any services offered via the RedBlack websites, the information you provide may be transferred to countries outside the European Economic Area (EEA) i.e. our servers, or third-party servers that are used to provide RedBlack services, are located in a country outside the EEA. By submitting your personal data, you consent to the transfer, storage and/or processing of your data wherever it be stored. If your data is transferred outside the EEA, steps will be taken to ensure appropriate security measures are in place to ensure your privacy rights continue to be protected as outlined in this Policy.
We review our retention periods for personal data on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations. We will hold personal data on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us.
Only authorised RedBlack employees are granted access to customer information. This is ensured by the use of strict operational processes and procedures.
Employees are trained on security systems and relevant processes and procedures which are reviewed regularly for ongoing effectiveness and suitability for purpose. All employees are kept up-to-date on the RedBlack security and privacy practices. Employees are notified and/or reminded about the importance we place on privacy, and what they can do to ensure that customer information is protected.
Personal information provided via the Company’s portals is secured using Secure Socket Layer (SSL) server and is encrypted before being transmitted. Secure pages have a lock icon or key on the bottom of web browsers such as Microsoft Internet Explorer, information supplied by you on these webpages is securely stored and can only be accessed for the purposes for which it was provided.
All IT systems are kept in a secure environment with appropriate access control. We carry out internal audits within RedBlack.
Non-sensitive details (your email address and other requested information) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
We will not sell or rent your information to third parties.
Third-Party Service Providers working on our behalf:
We may pass your information to our third-party service providers, agents, subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf. However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure.
Third-Party Product Providers we work in association with:
We may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party including for a merger, acquisition, divestiture, or similar transaction or as part of any business restructuring or reorganisation.
We may also further transfer data if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or to law enforcement. However, we will take steps with the aim of ensuring that your privacy rights continue to be protected.
Different rules apply depending on the type of Lawful Processing being undertaken. Many of the following individuals’ rights apply, however, whatever the basis of processing:
The accuracy of personal data is imperative. We aim to keep it updated at all times. The personal data we hold on you is available upon request by contacting the Managing Director. You can request that your data is updated and/or deleted at any time, unless RedBlack can justify that it is retained for legitimate business or legal purpose. When updating your personal data, you may be asked to verify your identity before your request can be actioned.
You can change your marketing preferences at any time by calling RedBlack or emailing email@example.com or by clicking on the “Unsubscribe” link at the bottom of any of RedBlack marketing emails.
We are concerned to protect the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with personal information.
Any questions or Subject Access Requests (SARs) should be sent to Jane Tyler, MD.
This Policy is regularly reviewed. It was last updated 23/05/18.