This Privacy Policy explains how Redrok Cyber Ltd. (“RedRok”, “we”, “us”), a company registered in Israel with offices in Hod Hasharon, Israel, handles personal data when you use the website at redrok.io (the “Site”). It applies to the Site only. Personal data processed inside RedRok’s products on behalf of a customer is governed by that customer’s agreement with RedRok, including the EULA at /legal/eula/ and any data processing addendum.
1. What we collect
Information you give us. The Site collects personal data only when you submit a form. Each form asks for what it needs and nothing more:
| Form | What you provide |
|---|---|
| Book a demo | Work email, full name, role, company size |
| Partner application | Work email, full name, company, number of managed clients, services offered, region |
| Contact | Full name, work email, company (optional), topic, your message |
| Report download | Work email, role |
| Newsletter | Work email |
| ROI calculator | Work email, plus the figures you enter (open findings, analysts, hours per fix) |
Information collected automatically when you submit a form. Together with the form, our server records the page you sent it from, the country your connection appears to come from, and the time of submission. Your IP address is used at the moment of submission to limit how many forms a single connection can send per minute and, where enabled, to verify that the submission came from a person; it is not stored with your form.
Information we do not collect. The Site does not use analytics, advertising or social media tracking, sets non-essential cookies only with your consent, as described in our Cookie Policy at /legal/cookies/. Simply browsing the Site does not send us personal data. Our hosting provider, Cloudflare, processes connection data such as IP addresses to deliver and protect the Site, as described in Section 4.
2. Why we use it and on what basis
| Purpose | Data | Legal basis (where the GDPR or UK GDPR applies) |
|---|---|---|
| Responding to your request: a demo, a partner application, a contact message, a report or an ROI estimate | The form you submitted | Taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries |
| Contacting you about RedRok’s products and services after an enquiry | Your contact details and the enquiry | Our legitimate interest in business-to-business marketing; you can object at any time |
| Sending the newsletter | Your email address | Your consent, which you can withdraw at any time |
| Keeping the Site and its forms secure and preventing abuse | IP address, connection data | Our legitimate interest in security |
| Complying with legal obligations and establishing or defending legal claims | Whatever is relevant | Legal obligation; legitimate interest |
Where Israeli law applies, we process personal data in accordance with the Protection of Privacy Law, 5741-1981 and the regulations under it. We do not sell personal data and do not use it for automated decisions that have legal or similarly significant effects on you.
3. Where your data goes
- Our team. Form submissions are delivered to the RedRok people who handle sales, partnerships, press, support or careers, depending on the topic you chose.
- Our CRM. Submissions are forwarded to our customer relationship management system, HubSpot, Inc., where they are stored and used to respond to you and manage our relationship.
- Hosting and security. The Site runs on Cloudflare, Inc. infrastructure, which delivers pages, applies rate limiting and bot protection and, where enabled, runs Cloudflare Turnstile to verify that a form was sent by a person. Cloudflare processes connection data for these purposes under its own privacy policy and data processing terms.
- Advisers and authorities. We may share personal data with professional advisers, or with authorities and courts where the law requires it.
- Corporate transactions. If RedRok is involved in a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction, subject to this Policy.
We do not share personal data with third parties for their own marketing.
4. International transfers
RedRok is based in Israel, which the European Commission recognises as providing adequate protection for personal data. Our service providers may process data in the United States and other countries. Where data leaves the EEA, the United Kingdom or Israel, we rely on adequacy decisions or on standard contractual clauses and equivalent safeguards with the provider concerned.
5. How long we keep it
- Enquiries and demo, partner and contact submissions: for as long as the enquiry and any resulting customer relationship lasts, and for up to 24 months after our last contact, unless you ask us to delete them sooner.
- Newsletter: until you unsubscribe, after which your address is kept only on a suppression list so we do not email you again.
- Report and ROI submissions: the same period as enquiries.
- Security and server logs: our server logs record only that a form was received and whether it was forwarded, not its contents. Cloudflare retains connection logs for its own short periods.
Nothing is stored on the Site’s own servers beyond the moment of submission; the data lives in the systems listed in Section 3.
6. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where processing is based on consent. Under the Israeli Protection of Privacy Law you have the right to inspect the data held about you and to request that inaccurate data be corrected or deleted.
To exercise any of these rights, write to privacy@redrok.io. We will respond within the period required by applicable law and may ask you to confirm your identity first. If you are in the EEA or the United Kingdom you may also lodge a complaint with your local data protection authority; in Israel, with the Privacy Protection Authority.
You can stop marketing emails at any time by using the unsubscribe link in any message or by writing to the address above.
7. Data Protection Officer
RedRok has appointed a Data Protection Officer in accordance with the Israeli Protection of Privacy Law (Amendment 13). You can contact the DPO about any question or request concerning your personal data at privacy@redrok.io. RedRok maintains the records, security procedures and policies required under that law.
8. Security
We protect personal data with technical and organisational measures appropriate to its sensitivity, including encrypted connections (TLS) for every page and form on the Site, access limited to the people who need it, and rate limiting and bot protection on form endpoints. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Children
The Site is intended for businesses and their representatives. It is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to this Policy
We may update this Policy from time to time. The current version, with its effective date, is always available on the Site. If a change materially affects how we use your personal data, we will take reasonable steps to bring it to your attention.
11. Contact
Redrok Cyber Ltd. HaNagar 3, Hod Hasharon, Israel Privacy enquiries: privacy@redrok.io Legal notices: notices@redrok.io Data Protection Officer: privacy@redrok.io