Legal
Red Pie Limited is committed to protecting your personal data, handling it responsibly and respecting your privacy. This policy explains what we collect, why we collect it, and the rights you have over it.
Last updated
Red Pie Limited ("we", "Red Pie", "our" or "us") is a legal risk management consultancy registered in England (company number 07392358). We are the data controller for the personal data described in this policy.
This policy covers the personal data we collect whenever you interact with us: when you use our website, when you attend or are invited to Red Pie events, and when you correspond with us by email or telephone. It also covers personal data we receive from third parties.
Where we act as a data processor on behalf of a client, the client's own privacy policy will govern that processing, and the terms of our engagement with them will set out our obligations.
We collect personal data from your interactions with us, such as when you engage with our website, attend a Red Pie event, or email or telephone us. This includes:
In the course of providing consultancy services we may also handle personal data contained in documents and correspondence relating to a matter. We treat that material as confidential and process it only for the purposes of the engagement.
Sometimes we receive personal data from third parties, in particular:
This section explains our reasons for processing your personal data and our lawful bases for doing so under the UK GDPR.
If you have opted in to receive information from Red Pie, we use your details to contact you by email, post or telephone. We also rely on your consent for non-essential cookies and similar technologies. Wherever we rely on consent, you may withdraw it at any time.
We process your personal data where necessary to enter into or perform a contract with you: to respond to your request for services or a quotation, to administer your account, and to provide the services you have engaged us for.
We process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights. Those interests include:
You have the right to object to any processing we carry out on the basis of our legitimate interests.
We process personal data where we are legally required to do so, including responding to valid requests from government or law enforcement authorities and meeting our anti-money laundering and record-keeping obligations.
We work with clients internationally, and some of our suppliers are based outside the United Kingdom. Where your personal data is transferred to a country that is not covered by UK adequacy regulations, we ensure it is protected by appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission's standard contractual clauses.
In particular, the Google Analytics and Google Maps services used on our website may involve transfers of data to the United States. Google relies on the UK Extension to the EU-US Data Privacy Framework and on standard contractual clauses with the UK Addendum for these transfers.
A copy of the relevant safeguard can be provided for your review on request.
We retain personal data for as long as our relationship with you is active, and for at least six years afterwards. This reflects the period during which claims may be brought and our legal, contractual and regulatory record-keeping obligations. Where we no longer need personal data, we delete it or render it anonymous.
Marketing preferences are retained for as long as necessary to honour your choices, including any request not to be contacted.
We use reasonable organisational, administrative and technical measures to protect personal data within our organisation. Confidentiality is fundamental to our work, and we treat client information accordingly.
No system of transmission or storage can be guaranteed to be completely secure. Transmission of information over the internet, including by email, is not entirely secure and any transmission is at your own risk. Once we have received your information we apply appropriate procedures and security measures to guard against unauthorised access. If you have reason to believe your interaction with us is no longer secure, please tell us immediately using the contact details below.
You have the right to withdraw consent wherever we rely on it, and the right to object to processing carried out on the basis of our legitimate interests. You also have an absolute right to object to the use of your personal data for direct marketing.
In addition, you may ask us:
These rights do not always apply. For example, we may be unable to fulfil a request where doing so would reveal personal data about another person, or where we are required by law, or have a compelling legitimate interest, to retain the information. If that is the case, we will explain why when we respond.
We will respond to requests within one month, though we may extend this by up to two further months for complex requests, in which case we will tell you.
The easiest way to stop receiving information from us is to email and ask. You can also correct your details at any time by emailing us with your updated information. When contacting us about your personal data, please provide your full name, your preferred contact details, and a summary of your query.
Red Pie Consulting
2b Ratcliffe Wharf
18-22 Narrow Street
London E14 8DQ
peter.moody@redpie.co.uk
If you consider our use of your personal data to be unlawful, you have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection. Details are available at ico.org.uk. We would, of course, welcome the chance to address your concerns directly first.
The information in this policy is provided to individuals whose personal data we process as data controller, in compliance with Articles 13 and 14 of the UK GDPR.
We update this policy from time to time. Please check back for the current version.