What We Collect
Redmill Solutions collects and processes personal information where necessary to operate and secure Redmill’s TUK-TUK platform (“Platform”), provide our products and services, manage our business relationships, communicate with you and comply with our legal and contractual obligations. The categories of personal information we collect may include:
Account and Contact Information
- Name
- Phone number
- Email address
- Physical address
- IP address
- Login information
- Geographic location
- Payment card information
- Information you provide when submitting a job application to us
Account and Contact Information
- Name
- Business title
- Company Name
- Phone number
- Business or postal address
We process this information to create and administer user accounts, communicate with you, provide customer support, manage our contractual relationship with you or your organisation, and respond to your enquiries.
Platform User and Authentication Information
- IP address
- Login credentials (including username and encrypted passwords);
- User account details
- Device and browser information
- Geographic location
We process this information to authenticate users, provide secure access to our Platform, administer user accounts, maintain system security, detect and prevent unauthorised access, troubleshoot technical issues, and improve the performance, availability and resilience of our Platform.
Customer Relationship Information:
- Correspondence
- Meeting notes;
- Contract negotiations and procurement activities;
- Product demonstrations;
- Proof of concept activities;
- Customer support requests;
- Feedback and survey responses.
We process this information to manage prospective and existing customer relationships, evaluate business opportunities, provide our products and services, improve our Platform, respond to enquiries, and maintain appropriate business records.
Billing and Payment Information:
- Billing contact details;
- Bank account details;
- Payment card information (where applicable)
- invoicing information
Billing and Payment Information
- Billing contact details;
- Bank account details;
- Payment card information (where applicable)
- Invoicing information
We process this information to administer customer accounts, process payments, issue invoices and comply with our financial, tax and accounting obligations.
Recruitment Information:
- information you provide when submitting a job application to us including your CV, employment history, qualifications and contact details.
We process this information to assess your suitability for employment, communicate with you regarding recruitment opportunities and comply with our legal obligations relating to recruitment.
In some circumstances, we may also collect information relating to your preferences, interests, marketing preferences and responses to customer surveys to help us improve our products, services and customer experience.
Some personal information is required for us to provide our services or fulfil our contractual or legal obligations. Where such information is not provided, we may be unable to provide certain products or services or respond to your request.
We may collect personal information directly from you, from your organization or through your use of our Platform. We may use assistance from trusted third parties to collect personal information. Redmill Solutions will only collect and process personal information where it has a lawful basis to do so and only for the purposes described in this Privacy Notice.
Our products and services are intended for business users and are not directed at children.
We do not knowingly collect personal data from children.
Lawful Bases for Processing
We process personal data only where we have a lawful basis to do so. These include:
- where processing is necessary for the performance of a contract;
- where processing is necessary for our legitimate business interests, including operating, maintaining, securing and improving our platform and services, maintaining backups and disaster recovery capabilities, managing customer relationships, detecting fraud and security incidents, providing customer support, protecting our business and systems, and establishing, exercising or defending legal claims.
- where processing is necessary to comply with legal obligations; and
- where you have given your consent, where required.
How We Use Your Personal Information
We use personal information for the purposes described above and where applicable to:
- provide, administer and support our products and services
- provide secure access to and operation of our Platform;
- manage our relationships with customers, prospective customers, suppliers and business partners;
- enable collaboration between users of the Platform who are working on the same media plan (whether or not those users belong to the same organisation as you), including by displaying certain profile information — such as your name, country, company, job title, and email address — to those other users;
- communicate with you regarding our products, services, support requests and business relationship; monitor, maintain, secure and improve our Platform, systems and services;
- create and maintain backups, disaster recovery systems and business continuity arrangements;
- detect, prevent and investigate fraud, security incidents and unauthorised access;
- troubleshoot technical issues and provide customer support;
- process payments and administer customer accounts;
- process job applications and recruitment activities;
- send promotional or marketing communications about new products, special offers or other information which we think you may find interesting where permitted by law or where you have consented
- conduct customer surveys, market research and product development;
- comply with legal, regulatory and contractual obligations
- establish, exercise or defend legal claims; and
- protect our business, personnel, customers and systems.
- with other users of the Platform who have access to the same media plan as you, whether or not they belong to your organisation, where necessary to enable collaboration on that media plan (for example, your name, country, company, job title and email address may be visible to those other users)
- to comply with a request that you have made in the usual course of our business
- to protect against fraud
- as necessary in the context of litigation
- in connection with an actual or proposed merger, acquisition, financing, corporate re-organisation or sale of all or part of our business
We do not make decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects on individuals.
Where we send marketing communications to existing customers about similar products or services, without separate consent, we do so in reliance on the “soft opt-in” exception under applicable electronic marketing rules, and an option to opt out is proved in every such communication.
Retention
We retain personal data only for as long as necessary for the purposes for which it was collected and processed, taking into account the nature of the data, the purposes of processing, our contractual obligations, legal requirements and our legitimate business interests. In particular:
- user account and login information is retained while the relevant user account remains active;
- where a user account is deactivated or removed, or other personal data is otherwise deleted, the relevant personal data may be retained for a period up to six (6) months after deletion or deactivation occurs, for legitimate business purposes including maintaining secure system backups and disaster recovery capabilities, enabling restoration following accidental deletion or reactivation of user account, and ensuring the integrity, availability and security of the Platform (not for day-to-day operational purposes); and
- at the end of the applicable retention period, personal data is securely deleted or anonymised, unless a longer retention period is required by law, to defend legal claims or is otherwise necessary for the purposes described above.
Sharing Personal Information
Redmill Solutions Ltd may, to the extent permitted by applicable law, disclose personal information under certain circumstances which are summarised below:
- For purposes permitted by applicable law
- In accordance with a properly executed court order or as otherwise required by law
- For other purposes with your consent
- To service providers and business partners who assist us in providing our services and who are subject to appropriate confidentiality and data protection obligations
- With other users of the Platform who have access to the same media plan as you, whether or not they belong to your organisation, where necessary to enable collaboration on that media plan (for example, your name, country, company, job title and email address may be visible to those other users)
- To comply with a request that you have made in the usual course of our business
- To protect against fraud
- As necessary in the context of litigation
- In connection with an actual or proposed merger, acquisition, financing, corporate re-organisation or sale of all or part of our business
- for purposes permitted by applicable law
- in accordance with a properly executed court order or as otherwise required by law
- for other purposes with your consent
- to service providers and business partners who assist us in providing our services and who are subject to appropriate confidentiality and data protection obligations
- with other users of the Platform who have access to the same media plan as you, whether or not they belong to your organisation, where necessary to enable collaboration on that media plan (for example, your name, country, company, job title and email address may be visible to those other users)
- to comply with a request that you have made in the usual course of our business
- to protect against fraud
- as necessary in the context of litigation
- in connection with an actual or proposed merger, acquisition, financing, corporate re-organisation or sale of all or part of our business
Redmill Solutions may use its affiliate companies (as further described below) and service providers in the development, customisation and delivery of our products and services or generally in the operation of our business including our marketing efforts. Redmill Solutions Ltd may disclose personal information to these service providers in the usual course of our business.
International Transfers
Redmill processes your information in the United Kingdom, but we have facilities and services providers in several other countries and personal data may be transferred to and processed in countries outside the United Kingdom, including to Redmill affiliates and service providers located in Turkey and China.
Data protection rules in these countries may be different than in your country of residence. Your personal information may be stored and processed by these service providers. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect such data in accordance with applicable data protection laws. These safeguards include approved contractual mechanisms, such as the UK International Data Transfer Agreement or the European Commission’s Standard Contractual Clauses and the UK Addendum, together with supplementary technical and organisational measures where required.
We will not transfer personal data internationally unless we are satisfied that an adequate level of protection is maintained. Where personal data is transferred to Turkey, China or other destination without UK adequacy status, we carry out a transfer risk assessment prior to transfer to evaluate the level of protection afforded in the destination country and, where necessary, put in place additional technical and organizational measures.
While no system can be guaranteed to be completely secure, we implement appropriate technical and organisational measures to protect personal data.
How We Use Cookies
We use cookies and similar technologies on our website and platform. For further information, including details of the types of cookies used and how to manage your preferences, please see our Cookie Notice.
Where we introduce any cookies that are not strictly necessary (for example, analytics or marketing cookies), we will only set those cookies with your consent, obtained via a cookie banner or preference centre, and you will be able to withdraw that consent at any time.
Links To Other Websites
Our website may contain links to other websites for your convenience or information. These websites are operated independently from Redmill Solutions Ltd and have their own privacy policies and terms of use. We do not control the content or privacy practices of such third-party sites and are not responsible for their privacy practices or content. We encourage you to review the privacy notices of any third-party websites you visit.
Your Rights
You have the right to:
- access your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data in certain circumstances;
- restrict or object to processing in certain circumstances;
- request a copy of your personal data in a portable format;
- ask a human to review any automated decision that significantly affects you; and
- withdraw your consent, where processing is based on consent.
To exercise your rights, you can contact us at privacy@redmillsolutions.com.
If you are concerned about how we handle your personal data, you can complain to us directly using the contact details in the “Contact Us” section below, and we will look into your complaint and respond to you. We will acknowledge your complaint within 30 days of receipt and, having made appropriate enquires, respond to you without undue delay. Without prejudice to any other administrative or judicial remedy you might have, you also have the right to lodge a complaint with the Information Commissioner’s Office (the “ICO”, or any successor regulatory body) or if you consider that we have infringed applicable data privacy laws when processing your personal data. The ICO can be contacted using the following link: https://ico.org.uk/
If you are located outside the United Kingdom, you may also have the right to lodge a complaint with the data protection supervisory authority in your own country of residence or work.
To exercise your rights, you can contact us at privacy@redmillsolutions.com.
If you are concerned about how we handle your personal data, you can complain to us directly using the contact details in the “Contact Us” section below, and we will look into your complaint and respond to you. We will acknowledge your complaint within 30 days of receipt and, having made appropriate enquires, respond to you without undue delay. Without prejudice to any other administrative or judicial remedy you might have, you also have the right to lodge a complaint with the Information Commissioner’s Office (the “ICO”, or any successor regulatory body) or if you consider that we have infringed applicable data privacy laws when processing your personal data. The ICO can be contacted using the following link: https://ico.org.uk/.
If you are located outside the United Kingdom, you may also have the right to lodge a complaint with the data protection supervisory authority in your own country of residence or work.
Controlling Your Personal Information
You may choose to restrict the collection or use of your personal information in the following ways:
- you can opt out of receiving marketing communications at any time by using the unsubscribe link in our emails or by contacting us.
- if you have previously agreed to us using your personal information for direct marketing purposes, you can change your mind at any time by emailing us at privacy@redmillsolutions.com
You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable to the extent permitted by law. If you would like a copy of the information held on you, please write to Redmill Solutions Limited, Calleo House, 49 Theobald Street, Borehamwood, Hertfordshire, WD6 4RT, UK.
Please note that, for various reasons (e.g. to avoid the violation of the rights of others) we may not be able to allow you access to your personal information to the fullest extent you request.
If Redmill Solutions Limited needs to contact you concerning your personal information we may do so by email, telephone or mail.
Contact Us
If you have any data protection complaints, questions about this Privacy Notice or our processing of personal data, or if you wish to exercise your rights, you can contact us by email or post at:
Email: privacy@redmillsolutions.com
Registered office and postal address: 5th Floor North Side, 7/10 Chandos Street, Cavendish Square, London W1G 9DQ).
We may request information to verify your identity before responding to your request. Where reasonably necessary to identify the personal data you are seeking, we may pause the response period while we seek clarification from you, and we will conduct a search that is proportionate to the request.
Changes To This Privacy Policy
We may, from time to time, update this Privacy Notice to reflect changes to our processing activities, services or applicable law. The updated version will be made available on our website and will indicate the date it was last updated. We encourage you to review this Privacy Notice periodically to remain informed about how we collect and process personal data.
Where changes are material, we will take reasonable steps to bring those changes to your attention, which may include providing a notice within the Platform or, where appropriate, contacting you using the details you have provided.
This Notice was last updated August 2026.
Any questions or concerns about Redmill Solutions Limited’s privacy policy may be emailed to hello@redmillsolutions.com.
