Privacy Policy

1. Who we are

This Privacy Policy explains how Ringdale collects, uses, shares and protects personal data, including personal data collected through ringdale.com and related websites (the "Website"), and the rights you have in relation to it.

"Ringdale", "we", "us" and "our" means:

• Ringdale UK Ltd, a company registered in England and Wales under number 02877306, whose registered office is at 26 Victoria Way, Burgess Hill, West Sussex, RH15 9NF, United Kingdom; and
• Ringdale, Inc., a Texas corporation whose principal office is at 870 CR-156, Granger, Texas 76530, United States of America.

Ringdale provides workplace technology, software and related services to business customers and partners (the "Services"). This Policy should be read together with our Website Terms & Conditions and our Cookie Policy.

We are committed to protecting the personal data we hold and to handling it in accordance with Data Protection Law. In this Policy, "Data Protection Law" means, as applicable, the UK General Data Protection Regulation and the Data Protection Act 2018 (as amended), the Privacy and Electronic Communications Regulations 2003, the EU General Data Protection Regulation ((EU) 2016/679) where it applies to our processing, and applicable United States federal and state privacy laws.

2. Our role

Ringdale as controller. Where you provide personal data to us directly, for example through the Website, a secure sign-in area, an inquiry, an event or correspondence, and we decide how it is used, Ringdale is the controller of that data. Ringdale UK Ltd and Ringdale, Inc. may act as joint controllers where they use that data together. Under their arrangement, Ringdale UK Ltd is responsible for handling requests to exercise your rights and complaints on behalf of both companies, although you may contact either of them about any matter in this Policy.

Ringdale as processor. Where we process personal data on behalf of our customers as part of the Services, for example when we host a service for a customer or access a customer's system to provide support, we act as processor (or "service provider" under US law). We process that data only on our customer's documented instructions and under our contract with them. The customer's own privacy notice explains how that data is used, and requests about it should be directed to the customer.

3. Personal data we collect

Personal data means any information about an identified or identifiable individual. It does not include data from which identity has been removed (anonymous data). Where Ringdale is controller, we collect the following categories:

We do not intentionally collect special category data (such as data about racial or ethnic origin, religious or philosophical beliefs, health, sex life or sexual orientation, political opinions, trade union membership, or genetic or biometric data) or data about criminal convictions or offenses, and we ask you not to submit such data through the Website.

We collect personal data:

• directly from you, when you complete a form, apply for access to a secure sign-in area, register for or attend an event, buy from us, or contact us by email, telephone, post or otherwise;
• automatically, through cookies and similar technologies when you use the Website, as described in our Cookie Policy; and
• from third parties, such as Ringdale resellers and distribution partners, event organizers, and publicly available business sources.

Where we need personal data to meet a legal obligation or to perform a contract and you do not provide it, we may be unable to provide the products or Services concerned. We will tell you if this is the case.

4. How we use personal data

We use personal data only where Data Protection Law allows, for the purposes for which it was collected or for a compatible purpose. If we need to use it for an unrelated purpose, we will tell you and explain the lawful basis.

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You can ask us for details of that assessment.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

5. Marketing

We send business-to-business marketing about our products, Services and events to contacts at customers, partners and prospects. Where the law requires consent, we ask for it first. You can opt out at any time by using the unsubscribe link in any marketing email or by contacting us. Opting out of marketing does not affect service messages we need to send you.

6. Sharing personal data

We share personal data only as follows:

• between Ringdale UK Ltd and Ringdale, Inc., and with their affiliates (companies that control, are controlled by or are under common control with either of them), for the purposes in this Policy;
• with service providers acting on our behalf, such as hosting, website, CRM, email, IT support and payment providers, under written contracts that require them to protect the data and use it only on our instructions;
• with Ringdale resellers and distribution partners, where needed to respond to your inquiry or supply products and Services in your region;
• with professional advisers, such as lawyers, accountants, auditors and insurers;
• with authorities, regulators and courts, where required by law or to establish, exercise or defend legal claims, or to protect the rights, property or safety of Ringdale, our customers or others; and
• with a buyer or successor, in connection with a sale, merger or reorganization of all or part of our business, who may use the data in the same way as described in this Policy.

We do not sell personal data for money. Under some US state privacy laws, our use of advertising cookies may count as "selling" or "sharing" personal data, or as processing for targeted advertising. You can opt out as described in section 10.

7. International transfers

Ringdale operates in the United Kingdom and the United States, so personal data is transferred between them and may also be processed by service providers in other countries.

Where we transfer personal data from the UK or the EEA to a country without an adequacy decision or regulations, we use an approved safeguard, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, the EU Standard Contractual Clauses, or another mechanism recognized by Data Protection Law. You can contact us for further information about these safeguards.

8. Security

We use appropriate technical and organizational measures to protect personal data against accidental loss, unauthorized access, use, alteration and disclosure. Access is limited to employees, contractors and service providers who need it, and who are bound by a duty of confidentiality.

We have procedures to deal with any suspected personal data breach and will notify you and the relevant regulator where we are legally required to do so. No transmission over the internet is completely secure. You are responsible for keeping your passwords and account details confidential.

9. Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax and reporting requirements. In setting retention periods, we consider the nature and sensitivity of the data, the risk of harm from unauthorized use, the purposes of processing, and legal requirements.

When personal data is no longer needed, we securely delete or anonymize it. Deleted data cannot be recovered, so if you want a copy, please request it before deletion.

10. Your rights

UK and EEA. Subject to conditions and exceptions in Data Protection Law, you have the right to:

• be informed about how we use your personal data;
• access your personal data and receive a copy of it;
• have inaccurate or incomplete data corrected;
• have your data erased;
• restrict our processing of your data;
• object to processing based on legitimate interests, and object at any time to direct marketing;
• receive your data in a portable format, or have it transferred to another organization;
• withdraw consent at any time, where we rely on consent, without affecting processing carried out before withdrawal; and
• not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

United States. If you live in a US state with a comprehensive privacy law that applies to our processing, you may have rights to know about, access, correct, delete and obtain a portable copy of your personal data, and to opt out of targeted advertising, profiling and the sale of personal data. You can opt out of targeted advertising at any time through the cookie settings on the Website. We will not discriminate against you for exercising your rights. You may use an authorized agent to submit a request, and if we decline your request, you may appeal by contacting us.

Exercising your rights. Contact us using the details in section 13. We may need to verify your identity before responding. There is normally no fee, but we may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive. We aim to respond within one month, or within the period required by applicable law, and will tell you if we need longer because a request is complex.

11. Children, cookies and external websites

The Website and Services are intended for business users. We do not knowingly collect personal data from anyone under 18, and we delete any such data we become aware of.

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are set only with your consent, which you can change at any time through the cookie settings on the Website.

The Website may link to third-party websites, including those of our partners. Those websites have their own privacy policies, and Ringdale is not responsible for their content or practices.

12. Complaints and changes

We would welcome the chance to resolve any concern you have, so please contact us first. You also have the right to complain to a supervisory authority. In the UK, this is the Information Commissioner's Office (ico.org.uk). In the EEA, it is the data protection authority in the country where you live or work. In the US, you may contact the Attorney General or privacy regulator of your state.

We may update this Policy from time to time. The latest version is always available on the Website, with the date of the last update. Where changes are significant, we will take reasonable steps to tell you.

13. Contact us

For any question about this Policy or to exercise your rights, contact the Data Protection Manager through ringdale.com/contact or by post at either office:

Please keep us informed if your personal data changes, so that the information we hold remains accurate.

This Privacy Policy was last updated on October 30, 2026.