This policy explains how Red Onion collects and uses personal information when you visit redonion.app, contact us or book a demo. If you have any questions, email privacy@redonion.app.
Who we are
Red Onion is a trading name of Bolt Digital Holdings Ltd, a company registered in England and Wales (company number 16576940). Our registered office is West Hill House, Allerton Hill, Chapel Allerton, Leeds, LS7 3QB.
Bolt Digital Holdings Ltd is the controller of the personal information described in this policy.
What we collect
We collect information to respond to enquiries, arrange demos and run our website securely.
- Contact forms: your name, work email address, message and the time you sent it. We store your enquiry in our website database, send copies to our team's business inboxes and send you a confirmation email.
- Emails: your email address, your message and any other information you include.
- Demo bookings: the details you give through Calendly, including your name, email address, appointment time and any other booking information you choose to provide.
- Optional preparation questions: your answers are stored temporarily in your browser. When you click "Book a time", they are passed to Calendly with the booking calendar to help us prepare for your demo, even if you don't complete a booking.
- Technical information: information such as your IP address, browser details, page requests and diagnostic data, processed to deliver the website, fix faults and prevent misuse. We use a scrambled (hashed) version of your IP address for one hour to limit repeated form submissions; we don't store it with your enquiry.
Required fields are marked on our forms. Without the necessary contact details, we may not be able to reply or arrange a demo. The preparation questions are optional.
Please don't include sensitive personal information, such as health information, in messages or preparation answers.
How we use your information
| Purpose | Legal basis |
|---|---|
| Respond to enquiries and communicate with you | Our legitimate interests in answering enquiries and managing business communications |
| Arrange and prepare for demos | Our legitimate interests in explaining our services to prospective customers |
| Send information you've asked for and discuss next steps after an enquiry or demo | Our legitimate interests in managing prospective business relationships |
| Deliver the website, fix faults and prevent spam or misuse | Our legitimate interests in running a reliable and secure website |
| Keep records required by tax, accounting or other laws | Compliance with a legal obligation |
Where we rely on legitimate interests, we consider the impact on your privacy and balance our interests against your rights.
We don't send newsletters or promotional emails, and contacting us or booking a demo doesn't sign you up to any. We don't sell your personal information or use it to make solely automated decisions that have legal or similarly significant effects on you.
Who we share your information with
We use a small number of providers to run our website and manage enquiries and bookings:
- Lovable: website hosting, our website database, and sending contact-form notifications and confirmation emails.
- Microsoft 365: our business email and calendars. Enquiry emails and booking details may be stored there.
- Calendly: our demo booking calendar. It processes booking details and preparation answers.
These providers use their own supporting infrastructure and service providers. Where they process information on our behalf, this is covered by data-processing terms. Where they use information for their own purposes, their own privacy notices apply.
We may also share relevant information with professional advisers, such as accountants and lawyers, or with authorities where the law requires it.
International transfers
Some of our providers may process personal information outside the UK. Where this happens, transfers are covered by a UK adequacy arrangement or appropriate safeguards, such as the UK Extension to the EU-US Data Privacy Framework or the EU standard contractual clauses with the UK Addendum. Email privacy@redonion.app for details of the safeguards that apply.
How long we keep your information
The same information may be held in more than one system, so we set out each one.
- Website enquiry records: deleted automatically once they are 12 months old, by a cleanup that runs daily.
- Email correspondence: deleting a website record doesn't delete copies in our Microsoft 365 inboxes. We keep correspondence for as long as we need it to handle your enquiry and any resulting conversation, and normally no longer than 2 years after our last contact, unless you become a client.
- Bookings and preparation answers: kept for as long as we need them to arrange and follow up on your demo, and normally no longer than 2 years after our last contact, unless you become a client.
- Clients: if you become a client, we keep relevant information for as long as we work together and afterwards as the law requires (for example, financial records for six years).
- Annual review: at least once a year we review old enquiries, emails and bookings and delete what we no longer need. We may keep records longer where we need them to meet a legal obligation or to establish, exercise or defend legal claims.
- Rate-limiting data: hashed IP addresses and timestamps are kept for one hour, then expire.
- Technical logs and backups: our providers keep technical and security logs, and deleted database records may remain in backups, until they expire under the providers' own retention arrangements.
You can ask us to delete your information at any time. Whether we can depends on whether we still have a lawful reason to keep it.
Cookies and browser storage
We don't use advertising, tracking or analytics cookies.
We use your browser's session storage to remember your optional demo preparation answers while you book. It is cleared when you close the tab.
The booking calendar on our Book a demo page is provided by Calendly. It only loads when you click "Book a time". When it loads, Calendly receives technical information about your connection and may set its own cookies to run the booking process. Calendly's privacy notice explains how it uses cookies. If you'd rather not load the calendar, email us or use our Talk to us page and we'll arrange a time with you.
You can block or delete cookies and browser storage in your browser settings.
Your rights
Depending on the circumstances, you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct inaccurate or incomplete information
- ask us to delete your information
- ask us to restrict how we use it
- object to us using it where we rely on legitimate interests
- receive certain information in a portable format, or have it sent to another organisation
To use any of these rights, email privacy@redonion.app. We normally respond within one month, free of charge. If the law allows us more time, we'll tell you why.
You can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd welcome the chance to put things right first, but you don't have to contact us before complaining.
Keeping your information secure
We encrypt connections to our website (HTTPS), restrict access to enquiry records to our team, and protect our forms against spam and misuse.
Changes to this policy
We'll update this page if our services or the way we handle information change, show the latest date at the top, and highlight significant changes where required.
Contact us
Email: privacy@redonion.app
Post: Bolt Digital Holdings Ltd, West Hill House, Allerton Hill, Chapel Allerton, Leeds, LS7 3QB.