Privacy Policy
Last updated: May 2026
1. Introduction
Redsun Innovations Ltd (trading as "Redsun") ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our white-label recruitment platform and services.
Data Controller: Redsun Innovations Ltd
Contact Email: ayrton@redsunplatform.com
2. Information We Collect
Personal Information
We may collect the following personal information:
- Name and contact information (email, phone number)
- Company name and professional details
- Resume and career information (for candidates)
- Salary and compensation data
- Location and work preferences
- Account credentials
Automatically Collected Information
When you access our platform, we may automatically collect:
- Device and browser information
- IP address and location data
- Usage patterns and preferences
- Cookies and similar tracking technologies
3. How We Use Your Information
We use collected information to:
- Provide and improve our recruitment platform services
- Generate anonymized market insights and salary benchmarks
- Match candidates with relevant opportunities
- Train, evaluate and improve our AI systems and prompt templates using aggregated platform-usage signals (such as which AI-generated content recruiters edit, accept or reject, generation latency, errors and quality scores)
- Communicate with you about our services
- Process and manage your account
- Comply with legal obligations
- Detect and prevent fraud or abuse
4. Visitor Activity & Re-engagement
Our platform tracks visitor browsing activity — including pages viewed, time spent on content, and session patterns — using an anonymous visitor identifier. This identifier does not contain personally identifiable information.
Upon voluntary form submission (for example, registering interest in a role or uploading a CV), this anonymous activity history may be linked to your contact record. This allows the recruitment agency operating the site to understand which roles or content you have previously viewed.
This linked data may be used to generate re-engagement recommendations for recruiters — for example, notifying a consultant that a known candidate has returned to view specific roles. A 48-hour cooldown mechanism is applied to prevent excessive or repetitive notifications.
- Activity tracking uses first-party data only; no cross-site tracking occurs
- Anonymous activity data is not shared with third parties
- You can request deletion of your activity data via our Data Rights Portal
5. AI & Automated Decision-Making
Our platform uses artificial intelligence and automated processing to enhance recruitment services. This includes:
- Resume Parsing: Automated extraction of skills, experience, and qualifications from uploaded documents
- Candidate Matching: AI-assisted matching of candidates to job opportunities based on profile data
- Salary Insights: Statistical analysis to generate market benchmarks
- Content Generation: AI-assisted drafting of website copy, job descriptions and marketing content for our recruitment-agency customers, with human review before publication
- System Improvement: Continuous improvement of our AI systems by analysing aggregated platform-usage signals, prompt-template performance, and which AI-generated content recruiters edit, accept or reject. This processing operates on platform-operational data and on the Customer’s own data for the Customer’s benefit, and on anonymised, aggregated derivations across the Platform.
Your Rights: Under GDPR Article 22, you have the right not to be subject to decisions based solely on automated processing that significantly affect you. All AI-generated recommendations are reviewed by humans before any final decisions are made; we do not use AI to automatically reject, shortlist or rank candidates without recruiter review. You may request human intervention, express your point of view, or contest any automated decision by contacting us.
For more details, see our AI Transparency page.
6. Data Anonymization
Salary data and candidate information submitted through our platform is anonymized and aggregated before being used for market insights. Individual salary submissions cannot be traced back to specific users in our published benchmarks and reports.
7. Information Sharing
We may share your information with:
- Hiring Partners: If you're a candidate, we may share your profile with approved hiring managers seeking talent (only with your explicit consent)
- Service Providers: Third parties who assist in operating our platform (see our Subprocessors list)
- Legal Requirements: When required by law or to protect our rights
We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) or any other US state privacy law, and we do not engage in targeted advertising. California residents may submit a confirmation request via our Do Not Sell or Share My Personal Information page.
8. International Data Transfers
Your data may be processed in countries outside the United Kingdom, including in the United States and Australia. When we transfer data internationally we ensure appropriate safeguards are in place:
- transfers to countries covered by a UK adequacy regulation;
- the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses for transfers from the UK to a third country;
- for transfers involving California residents' personal information, contractual restrictions on the receiving party as a "Service Provider" or "Contractor" under the CCPA/CPRA;
- for disclosures involving Australian residents' personal information, reasonable steps to ensure the overseas recipient handles personal information in a manner equivalent to the Australian Privacy Principles (APP 8);
- additional technical and organisational measures where required by a transfer risk assessment.
For details on our sub-processors and their locations, see our Sub-processors page.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption in transit (TLS) and at rest
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
10. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Candidate data is automatically purged after 24 months of inactivity unless you request earlier deletion.
11. Your Rights
Depending on where you live, you have specific rights over your personal information.
United Kingdom (UK GDPR & Data Protection Act 2018)
- Access your personal information;
- Correct inaccurate data;
- Request deletion ("right to be forgotten");
- Object to or restrict processing;
- Data portability — receive your data in a machine-readable format;
- Withdraw consent at any time;
- Lodge a complaint with the Information Commissioner's Office (ICO).
California (CCPA / CPRA)
If you are a California resident, you have the right to:
- know what personal information we collect, use, disclose and (where applicable) sell or share;
- request access to and a copy of your personal information;
- request correction of inaccurate personal information;
- request deletion of your personal information;
- opt out of the sale or sharing of your personal information — we do not sell or share personal information, but you can submit a request via our Do Not Sell or Share My Personal Information page;
- limit the use of sensitive personal information to the purposes for which it was collected;
- not be unlawfully discriminated against for exercising any of these rights.
Other US states (CO, CT, VA, UT, TX, OR and others)
If you are a resident of Colorado, Connecticut, Virginia, Utah, Texas, Oregon or another US state with a comprehensive consumer privacy law, you generally have rights to (a) confirm whether we process your personal data, (b) access and obtain a copy, (c) correct inaccuracies, (d) delete personal data, (e) opt out of targeted advertising, the sale of personal data and certain profiling. We do not sell personal data, do not engage in targeted advertising of recruitment candidates and do not use solely automated profiling that produces legal or similarly significant effects without human review.
Australia (Privacy Act 1988 & Australian Privacy Principles)
- request access to and correction of your personal information (APPs 12 and 13);
- be informed how we collect, hold, use and disclose your personal information (APP 1 and APP 5);
- opt out of receiving direct marketing (APP 7);
- complain to us and, if unresolved, to the Office of the Australian Information Commissioner (OAIC).
To exercise any of these rights, visit our Data Rights Portal or contact us at ayrton@redsunplatform.com. We respond within 30 days for UK and Australian requests, within 45 days for CCPA/CPRA requests and within the timeframes required by other applicable US state laws.
12. Cookies
We use cookies and similar technologies to enhance your experience, analyze usage, and personalize content. You can control cookie preferences through your browser settings.
For full details, see our Cookie Policy.
13. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform or sending you an email.
15. Contact Us
For questions about this Privacy Policy or to exercise your data rights, please contact us:
- Email: ayrton@redsunplatform.com
- Contact Form: redsun.io/contact