Privacy Policy

Scope of this Policy

This Privacy Policy applies to personal data processed in connection with the RedeX Advisor website, including our contact forms, agency/freelancer applications, company partnership enquiries and related communications that follow from those submissions.

It also covers information we may process while administering our B2B partner network, evaluating distribution opportunities, coordinating onboarding and validating referrals or conversions under an agreed partner program.

This Policy does not govern the independent privacy practices of third-party hosting companies, SaaS providers, technology vendors, agencies or other businesses that have their own websites, products, forms or privacy notices.

Personal data we may collect

Depending on how you interact with us, we may collect the following categories of information:

We do not currently ask for payment card or online banking credentials through the public forms designed for the RedeX Advisor website.

Where the information comes from

We may receive personal data:

• Directly from you when you complete an application or contact form, send a message, call us or continue a business discussion.
• From your organisation when a colleague or authorised representative contacts us on its behalf.
• From participating partners when information is necessary to administer an agreed referral, onboarding or distribution process.
• From relevant technology or program providers where they return referral status, validation, attribution or onboarding information.
• From public business sources such as a company website that you provide or make publicly available.
• Automatically from our website and infrastructure through server logs, security tools and, where enabled, cookies or analytics technologies.

If you provide personal data about another individual, you should have an appropriate basis and authority to do so and should ensure the person is informed where required.

How we use personal data

We may process personal data to:

• receive, review and respond to enquiries submitted through the website;
• review agency, freelancer and company partnership applications;
• contact applicants or business representatives about a potential fit;
• identify, qualify and onboard relevant partner businesses;
• coordinate agreed partner-distribution activities between companies and agencies;
• validate referral, attribution or conversion information where a partner program requires it;
• administer commissions, commercial terms or other partner-program records where applicable;
• maintain business relationship, support and communication records;
• protect the website, detect misuse, prevent fraud and troubleshoot technical issues;
• understand website performance and improve our pages, messaging and user experience where analytics are used;
• comply with applicable legal, accounting, regulatory or contractual requirements;
• establish, exercise or defend legal claims and resolve disputes; and
• send relevant business or program communications where permitted, with opt-out controls where required.

We do not use information collected through these forms to make solely automated decisions that produce legal or similarly significant effects on individuals.

Why we are permitted to process the data

The legal basis or permitted ground depends on the nature of the interaction and the law that applies. We generally process personal data because you have asked us to take a step, because processing is necessary to manage a business relationship or contract, because you have provided consent, because we need to protect our systems and business, or because we must comply with law.

Where consent is the applicable basis, you may withdraw that consent. Withdrawal will not affect processing already lawfully carried out before the withdrawal, and in some cases we may still retain limited information where law or legitimate recordkeeping requirements permit or require it.

When we may share information

We do not sell or rent website form contact details to unrelated third parties for money. We may disclose personal data only when reasonably necessary for the purposes described in this Policy, including to:

• Website, hosting and infrastructure providers that help us operate and secure redexadvisor.com.
• Form, spreadsheet, CRM, email or communication providers used to receive, organise or follow up on enquiries and applications.
• Analytics or advertising technology providers where such tools are enabled and their use is permitted by applicable law and consent requirements.
• Relevant technology or program partners where sharing is necessary to assess, onboard, administer or validate a specific partnership or referral program.
• Professional advisers such as lawyers, accountants, auditors or consultants where necessary.
• Authorities or other parties where disclosure is required by law, legal process, regulation, court order or to protect rights, security and safety.
• A successor or transaction counterparty in connection with a genuine merger, restructuring, financing, acquisition, sale or transfer of all or part of the business, subject to appropriate safeguards.

We expect service providers acting on our behalf to use personal data only for authorised purposes and to apply appropriate confidentiality and security measures.

Agency, partner and referral information

RedeX Advisor's model may involve coordinating B2B partner programs between technology providers and agencies or freelancers. In that context, additional information may be processed to determine whether a referral or partner activity qualifies under the applicable program.

Depending on the arrangement, this may include a referral identifier, the referring partner, relevant business/customer identity, product or program selected, date or status of referral, validation or conversion result and related commercial records.

We aim to use only the information reasonably needed for attribution, validation, onboarding, support, reporting and commercial administration. We do not require partners to send unnecessary customer personal data, and partners should not submit sensitive information unless specifically required and lawfully authorised.

Where a third-party provider independently collects information from a referred customer on its own website, that provider's own privacy policy will govern its independent collection and processing.

Cookies, analytics and similar technologies

Our website may use cookies, pixels, local storage, server logs or similar technologies. The exact technologies in use can change as the website is developed.

• Strictly necessary technologies may be used for core website operation, security, traffic management and fraud prevention.
• Analytics technologies, if enabled, may help us understand visits, page performance, traffic sources and website usage.
• Advertising or conversion technologies, if enabled, may help measure campaigns, referrals or form conversions.

Where applicable law requires consent before using non-essential cookies or similar technologies, we will seek that consent and provide appropriate controls. Browser settings may also allow you to block or delete cookies, although doing so can affect some website functions.

How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, the duration of the relevant business or partner relationship, and any additional period needed for legal, accounting, tax, fraud-prevention, dispute or recordkeeping requirements.

• General enquiries may be retained while the enquiry is active and for a reasonable follow-up and recordkeeping period afterwards.
• Partner applications may be retained while under consideration and, where relevant, to manage future partnership discussions or onboarding.
• Active partner or commercial records may be retained for the relationship and afterwards where reasonably required for contractual, payout, audit, accounting or legal purposes.
• Security and technical logs are generally retained for operational and security needs and may be kept for shorter periods unless an incident requires longer preservation.

When information is no longer required, we will seek to delete, anonymise or securely dispose of it, subject to backup cycles and legal or technical limitations.

Security

We use or seek to use reasonable administrative, technical and organisational safeguards appropriate to the nature of the personal data and the risks involved. These may include access controls, secure website connections, account protection, software updates, limited access to business records, backups, logging and the use of reputable service providers.

No internet transmission, website, email system or storage method can be guaranteed to be completely secure. You should avoid sending confidential credentials or unnecessary sensitive information through public forms or ordinary email.

If we become aware of a personal data breach, we will investigate it, take reasonable containment and remediation steps and provide notifications where required by applicable law.

International processing and transfers

Some website, cloud, communications, analytics or business service providers may operate infrastructure or personnel outside India. As a result, personal data may be processed in another country.

Where such processing occurs, we will seek to use providers and arrangements that offer appropriate security and contractual protections and will comply with any transfer restrictions that apply under Indian law or other applicable privacy laws.

Your choices and privacy rights

Depending on the law that applies to you and the commencement of relevant statutory provisions, you may have rights concerning your personal data. These can include the ability to:

• ask whether we process personal data about you and request information about that processing;
• request access to or a summary of personal data associated with you;
• ask us to correct, complete or update inaccurate personal data;
• ask us to erase personal data where the applicable requirements are met;
• withdraw consent where processing is based on consent;
• opt out of non-essential marketing communications where applicable;
• raise a grievance or complaint concerning our handling of personal data; and
• exercise any additional rights available under applicable law.

We may need to verify your identity before acting on a request. We may also decline or limit a request where permitted or required by law, including where retention is necessary for legal obligations, fraud prevention, security, contractual records or legal claims.

Children's privacy

RedeX Advisor is a B2B website and service. It is not intended for individuals under 18 years of age, and we do not knowingly seek personal data from children through our partnership or business enquiry forms.

If we learn that personal data of a child has been submitted to us without an appropriate lawful basis or required parental authorisation, we will take reasonable steps to delete or otherwise address that information.

Third-party websites and services

Our website may link to hosting providers, SaaS companies, technology platforms, social networks, partner websites or other third parties. A link does not mean that RedeX Advisor controls that third party's privacy, security or data practices.

Once you leave our website or provide information directly to a third party, you should review that party's privacy policy and terms.

Changes to this Privacy Policy

We may update this Policy as our website, tools, partner programs, service providers or legal obligations change. The revised version will be posted on this page with an updated “Last updated” date.

If a change materially affects how we use personal data, we may provide additional notice or seek consent where required by applicable law.

Privacy contact and grievances

Questions, requests or grievances about this Policy or our handling of personal data can be submitted through the RedeX Advisor Contact Us page. Please select “Other” and begin the message with “Privacy Request” or “Privacy Grievance”.

We will review the request, may ask for information necessary to verify your identity and will respond in accordance with applicable law and our operational obligations.

Where a statutory complaint mechanism becomes applicable to your request, you may also have the right to approach the relevant data protection authority or the Data Protection Board of India after using the grievance process available to you, as required by law.