Customer Data Privacy Policy
Purpose
Red Team Thinking is committed to protecting the privacy, confidentiality, and security of the information entrusted to us by our customers. This policy outlines how we collect, use, safeguard, and retain customer information in the course of conducting our business.
Scope
This policy applies to all employees, contractors, consultants, and other authorized individuals who access customer information while performing work on behalf of Red Team Thinking.
Information We Collect
We collect only the information reasonably necessary to conduct our business and provide our products and services. Depending on the nature of the engagement, this may include:
-
Customer and participant names
-
Company and job title
-
Business email addresses and telephone numbers
-
Billing contact information and transaction records
-
Customer communications
-
Training registration and participation information
-
Information voluntarily provided by customers during the course of business
We do not intentionally collect sensitive personal information unless it is required for a specific business purpose and has been appropriately authorized.
Billing and Payment Information
Red Team Thinking does not store customer payment card information on its systems.
Payment processing is performed by trusted third-party payment service providers. These providers are responsible for collecting, processing, storing, and protecting payment information in accordance with applicable industry security standards, including the Payment Card Industry Data Security Standard (PCI DSS), where applicable.
Red Team Thinking receives only the information necessary to confirm payment, maintain accounting records, provide customer support, and fulfill contractual obligations.
Use of Customer Information
Customer information is used solely for legitimate business purposes, including:
-
Delivering products and services
-
Managing customer relationships
-
Processing registrations and orders
-
Providing customer support
-
Communicating regarding products, services, and events
-
Maintaining business and financial records
-
Meeting legal, contractual, and regulatory obligations
-
Improving our products and services
Red Team Thinking does not sell customer personal information.
Sharing of Customer Information
Customer information is shared only when necessary to:
-
Deliver contracted products or services
-
Process payments through authorized third-party providers
-
Work with trusted service providers acting on our behalf
-
Comply with applicable laws or legal processes
-
Protect the rights, safety, or security of our customers or our company
When third-party providers process customer information on our behalf, they are expected to maintain appropriate confidentiality and security safeguards.
Information Security
Customer information is treated as confidential and is never disclosed outside Red Team Thinking except as required to deliver contracted services, comply with legal obligations, or with the customer's authorization.
Red Team Thinking maintains reasonable administrative, technical, and physical safeguards designed to protect customer information against unauthorized access, disclosure, alteration, or destruction.
Security measures may include:
-
Role-based access controls
-
Password-protected systems
-
Multi-factor authentication where available
-
Secure cloud-based business applications
-
Encryption of data in transit where supported
-
Regular software updates and security maintenance
Access to customer information is limited to individuals who require it to perform their assigned responsibilities.
Data Retention
Customer information is retained only for as long as necessary to:
-
Deliver products and services
-
Meet contractual obligations
-
Satisfy legal, accounting, tax, or regulatory requirements
-
Resolve disputes
-
Enforce contractual agreements
When customer information is no longer required, it is securely deleted or destroyed when practical and appropriate.
Customer Rights
Where required by applicable law, customers may request to:
-
Access their personal information
-
Correct inaccurate information
-
Request deletion of personal information
-
Restrict certain processing activities
-
Withdraw consent where processing is based on consent
Requests should be submitted using the contact information provided below.
Security Incident Response
Any suspected unauthorized access, disclosure, or loss of customer information must be reported immediately to company management.
Red Team Thinking will investigate security incidents promptly and will provide any notifications required under applicable laws or contractual obligations.
Employee Responsibilities
All personnel with access to customer information are expected to:
-
Maintain the confidentiality of customer information
-
Use customer information only for authorized business purposes
-
Follow all applicable security policies and procedures
-
Report suspected privacy or security incidents promptly
Failure to comply with this policy may result in disciplinary action or termination of contractual relationships.
Policy Review
This policy will be reviewed periodically and updated as business practices, technology, legal requirements, or regulatory obligations evolve.
Contact Information
Questions regarding this policy or our handling of customer information may be directed to:
Privacy Officer
Red Team Thinking
Email: support@redteamthinking.com
Website: https://www.redteamthinking.com