Skip to content
REDSTRIPESMEDIA

Legal

Privacy policy

This policy explains how Redstripes Media Ltd (“we”) uses personal information. It applies to this website, to enquiries, and to IT and media work we do for clients. It is written for UK data protection law, including the UK GDPR and the Data Protection Act 2018.

Who is responsible

Redstripes Media Ltd is the controller of personal information we collect for our own business. Company number 17523777. Registered office: 66, Paul Street, London EC2A 4NA, United Kingdom.

Privacy contact: Martin Cotter, [email protected], 07346 817553.

When we build an intake form or similar tool for a charity or advice service, that organisation is normally the controller of its clients’ information. We handle it only on their written instructions, as a processor. Their privacy notice applies to their clients. This policy applies to our relationship with that organisation.

What we collect

Please do not send us special-category information (such as health data) unless we have agreed in writing that a particular project needs it, and only the minimum required.

  • Identity and contact details you give us: name, email, phone number, organisation, and role.
  • What you send us: briefs, messages, files, and the answers in a website or app brief. A finished brief is emailed to us. A website or app brief is also kept so we can show you the first look, then deleted if you ask, or after 24 months if it does not become work.
  • Account details if you sign in to manage this site: name, email, a password hash or the identifier from the sign-in provider, and session data.
  • Project information a client gives us so we can do the work, which may include material about their customers if they choose to send it.
  • Technical data: IP address, browser type, and pages requested, in ordinary server logs, used to keep the site secure and working.
  • Payment and invoice details where work is paid for. We do not take card numbers on this website.

How we use it, and why

We do not sell personal information. We do not use it to make automated decisions that have a legal or similarly significant effect on you.

  • To answer enquiries and prepare a quote. Lawful basis: legitimate interests, or steps towards a contract if you ask us to do work.
  • To do the work we have agreed, including building sites, apps, content, and hosting. Lawful basis: contract.
  • To organise notes with AI so a person can review them. The AI does not make decisions about you. Lawful basis: legitimate interests, or the client’s instructions where we are a processor.
  • To keep accounts, tax records, and proof of what was agreed. Lawful basis: legal obligation and legitimate interests.
  • To protect the site, investigate misuse, and establish or defend a legal claim. Lawful basis: legitimate interests and, where it applies, legal claims.
  • To send occasional notes about our own services, only where the law allows, and you can tell us to stop. Lawful basis: legitimate interests or consent.

Who we share it with

We share personal information only as needed.

Some suppliers may store information outside the UK. Where they do, we use a lawful transfer tool, such as the UK adequacy regulations or the International Data Transfer Agreement, and we keep a record of it.

  • Suppliers who host email, the website, or files, under contract and only to provide that service.
  • A sign-in provider, such as Google, X, or Facebook, if you choose that method. Their own policy covers their handling of the sign-in.
  • The client organisation, where the information belongs to their project.
  • Professional advisers, insurers, or authorities, where we must or where it is needed to establish or defend a claim.
  • A buyer of the business, if the company is sold, and only what the transfer needs.

How long we keep it

We may keep a record for longer if the law requires it, or if a claim is underway.

  • Enquiries that do not become work: 24 months from the last message, then deleted, unless you ask sooner.
  • Client work, contracts, and related correspondence: for the job, then 6 years, so we can deal with tax and with claims within the normal limitation period.
  • Invoices and payment records: 6 years from the end of the tax year they relate to.
  • Site-manager accounts: while the account is in use, then deleted within 30 days of a valid closure request, apart from records we must keep.
  • Server logs: up to 12 months.

Security

We use access controls and ordinary technical measures appropriate to a small IT company. No method of storage or email is perfectly secure. You should not send passwords or full payment-card numbers by email or through the brief chat.

Your rights

You can ask to see, correct, delete, or restrict your information, and you can object to some uses, including direct marketing. Where we rely on consent, you can withdraw it. Where we rely on a contract, you can ask for a copy of the information you provided, in a portable form. These rights are not absolute. We will tell you if a request cannot be met, and why.

To ask, email [email protected] or use the data deletion page. We may need to confirm it is you. We aim to reply within one month.

You can complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or at ico.org.uk. We would like the chance to put things right first.

Cookies

This site uses only cookies needed to run it, including a sign-in cookie if you use the site manager. Those cookies are strictly necessary and do not need a consent banner. We do not use advertising or analytics cookies on this site. If that changes, we will ask first where the law requires it, and we will update this policy.

Children

This site and our services are for businesses, charities, and adults. We do not knowingly collect information from children.

Changes and law

We may update this policy. The version on this page is the current one. It is governed by the laws of England and Wales.

Last updated: 16 October 2026.