Privacy notice.

1. Who is responsible for your information

Redfield360 is operated by Redfield Media in the United Kingdom. Redfield Media is the controller of personal information used to provide the service.

2. Information we collect

• Account information, including your name, email address, company name and password hash.
• Account preferences, such as branding, welcome-screen settings and optional marketing consent.
• Project information, including property addresses, tour configuration, panoramas, floor plans and logos you upload.
• Purchase records, such as the bundle bought, payment status and Stripe customer or transaction identifiers. Redfield360 does not store full card details.
• Technical and security information needed to operate the service, such as session identifiers, request information and failed sign-in attempts.
• Contact-form information, including your name, reply email address and message, when you choose to send us a question.

3. Why we use it

We process account, project and purchase information because it is necessary to provide the service you request and administer our agreement with you. We use limited technical information for our legitimate interests in securing, maintaining and improving Redfield360. We send optional product news only where you have actively opted in; you can change that choice in Account settings.

4. Public property tours

When you publish a tour, its panoramas, room names, agency branding and related tour information become accessible through its public URL. Do not upload people, private documents, vehicle registrations or other personal information unless you have a lawful reason and the necessary permission. Deleting a project removes its tour record and associated stored images from Redfield360.

5. Service providers

Cloudflare provides website delivery, account data storage, image storage, email delivery and privacy-focused web analytics. Stripe processes payments. These providers process information under their own security and privacy obligations. Information may be processed outside the United Kingdom using the safeguards provided by the relevant service provider.

6. Cookies and analytics

Redfield360 uses a strictly necessary sign-in cookie to keep authenticated users signed in. Cloudflare Web Analytics measures aggregate page traffic and performance without using cookies, local storage or fingerprinting individual visitors. We do not use advertising cookies.

7. How long we keep information

We keep account and project information while your account or projects remain active. Verification links expire after 24 hours and sign-in sessions after 30 days. Limited transaction and security records may be kept for longer where needed for accounting, fraud prevention, dispute handling or legal obligations. You can delete your account in Account settings or contact us for help.

8. Your rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or object to use of your personal information, and to receive certain information in a portable form. You may also withdraw marketing consent at any time. Contact us to exercise a right. You can complain to the UK Information Commissioner’s Office if you are unhappy with how a concern is handled.

9. Changes to this notice

We may update this notice as Redfield360 develops. The current version and its update date will remain available on this page.