Privacy Notice

1. For convenience, We use the following terms in this Privacy Notice:

“Privacy Notice” – this document, which is available at the following link: https://reddog.fish/en/privacy-notice/, (hereinafter — “Privacy Notice”, “Notice”).

“Company” – RED DOGFISH GROUP PTE. LTD, registered in Singapore (Registration No. 202510854H), with its address at 1 Liang Seah Street, #02‑02, Liang Seah Place, Singapore 189022 (hereinafter — “Company”, “We”, “Us”, “Our”)

“Platform” - a digital product developed and owned by the Company, accessible via the following link: https://reddog.fish, which provides access to Our Services (hereinafter referred to as “Platform”, “RedDogFish”)

“Account” - a User account created when the User registers on the Platform or signs in via OAuth-based authentication methods (such as Google or Apple login). The Account allows access to the Platform’s features as described in these Notice, including purchasing and managing eSIMs

“Services” – all functions and features provided through the Platform, including browsing available eSIMs, purchasing and managing eSIMs, and accessing customer support to the extent described in Our Terms & Conditions

“eSIM” - a digital SIM (embedded SIM) provided by third-party mobile operators, which gives You access to mobile data services without requiring a physical SIM card

“Content” – any materials, data, media, or intellectual property made available through the Platform, including but not limited to text, images, graphics, audio, video, design elements, and any other information displayed, generated, or posted within the Platform

“Personal Data” – any information relating to an identified or identifiable natural person (hereinafter — “Personal Data”, “Data”)

“Processing of Personal Data” – any operation or set of operations which is performed on Personal Data, whether or not by automated means, including but not limited to collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, erasure, or destruction (hereinafter — “Processing”, “Process”)

“Subject of Personal Data” – a natural person who accesses, uses, or interacts with the Platform and whose Personal Data is Processed in the context of such interaction (hereinafter — “Subject of Personal Data”, “User”, “You”, “Your”)

“Consent” – any freely given, specific, informed, and unambiguous indication of the User’s wishes by which they, by a clear affirmative action, signify agreement to the Processing of their Personal Data

“Third Party” – any person, public authority, agency, or body other than the Data Subject, the Controller, or the Processor, who may access Personal Data in accordance with the law, contractual obligation, or as necessary to provide Services

“Controller” – the Company, which determines the purposes and means of Processing of Personal Data

“Processor” – a natural or legal person, public authority, agency, or other body which Processes Personal Data on behalf of the Controller

“Cookies” – small text files that are stored on the User’s device (such as a computer, tablet, or smartphone) when they visit the Platform. Cookies collect information about the User’s interaction with the Platform, including preferences, login status, session duration, and browsing behavior. These files help improve the performance and functionality of the Platform, provide analytics, and ensure security

“General Data Protection Regulation” (GDPR) – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data

“CCPA” – California Consumer Privacy Act of 2018, applicable to Users from California, USA

“CalOPPA” – California Online Privacy Protection Act of 2003.

2. PERSONAL DATA WE PROCESS WHEN YOU USE THE PLATFORM

• 2.1. Personal Data You provide to Us personally

  When You choose to interact with the Platform, We may Collect and Process certain Personal Data that You knowingly and voluntarily provide to Us. This may occur, in particular, when:

  • You register an Account on the Platform;
  • You update Your profile information within Your Account;
  • You initiate a purchase of an eSIM;
  • You contact Our support team via available communication channels;
  • or You interact with Us in any other direct way.

• At this stage, You may be asked to provide the following Personal Data:

  • Your full name;
  • Your email address;
  • Your phone number;
  • Your password;
  • billing and payment-related Data (such as Your payment card number);

  We Process this information to ensure proper operation of the Platform, manage Your Account, complete transactions, and provide You with the requested Services and support.
  
  We Collect only the Personal Data that is necessary to provide Our Services and that You voluntarily submit. Where applicable, We rely on Your Consent or in accordance with applicable law.

• 2.2. Personal Data We Process automatically

  When You access or use the Platform, certain technical information is automatically collected by Us or Third-Party services integrated into the Platform. This information is necessary to ensure the security, stability, performance, and improvement of Our Services, and may also be used for analytics or marketing purposes.
  
  Automatically collected Personal Data may include:

  • IP address;
  • device information (such as device model, operating system, and browser type);
  • language preferences and interface settings;
  • approximate geolocation data (such as country or region);
  • date, time, and duration of access;
  • information about Your interaction with the Platform (pages visited, buttons clicked, referral source, etc.);
  • technical logs (collected via Prometheus, Grafana, and similar tools);
  • authentication metadata (such as login timestamps, login method, and used device), if You sign in via Google or Apple.

• Such information may be collected through the use of:

  • Cookies and similar tracking technologies (such as pixels or tags);
  • analytics tools like Google Analytics, Google Tag Manager, and Facebook Pixel;
  • marketing and advertising tools such as Google Ads and Facebook Ads;
  • cloud infrastructure and monitoring tools, including AWS, Prometheus, and Grafana, which may record technical logs and metrics including IP addresses and approximate geolocation;
  • authentication providers (Google Auth, Apple Auth), which may provide metadata such as timestamp of login and device details.

  These tools allow Us to better understand how Users interact with the Platform, improve its performance, and provide relevant functionality. We emphasize that Google Analytics and similar providers implement anonymization and pseudonymization mechanisms to comply with privacy standards, including the GDPR.
  
  In the future, We may integrate other analytics or marketing tools that use Cookies and similar technologies. If this occurs, We will update this Privacy Notice accordingly
  
  For more detailed information about the use of Cookies, please see Section 15 of this Privacy Notice.

3. CHILDREN’S PRIVACY

Protecting the privacy and safety of minors is very important to Us. We are committed to complying with data protection laws that regulate the Processing of children's Personal Data — including the GDPR, CCPA, COPPA, and other applicable legislation depending on the User’s country of residence.

We do not knowingly Process the Personal Data of individuals under the age from which it is legally permitted to give valid Consent for the Processing of their Personal Data. In the EU, this age is generally 16 years, although in some countries it may be lowered to 13 years. In Ukraine, the minimum age is 14 years (with Consent of a legal representative), and full legal capacity is reached at 18

We presume that by using the Platform, You confirm that:

• You have reached the legal age required to independently give Consent to the Processing of Your Personal Data in accordance with the legislation of Your country of residence;
• or that such Consent has been duly provided by Your legal representative (such as a parent or guardian).

Use of the Platform requires registration, authentication (e.g., via Google or Apple login), and in some cases, submission of billing information — all of which presumes legal capacity.

If We discover that Personal Data has been provided by a person who has not reached the minimum legal age and such Consent was not obtained from a legal representative, We will take appropriate steps to delete this information as soon as reasonably possible

If You believe that We may have collected or are Processing the Personal Data of a child without proper authorization, please contact Us immediately at support@reddog.fish.

We disclaim any liability for situations where individuals under the applicable legal age use the Platform and provide their Personal Data without obtaining the necessary Consent. It is the responsibility of such individuals or their legal representatives to ensure that proper authorization is in place before using the Platform

To use the Platform, You must be of legal age under this Privacy Notice and Our Terms & Conditions, and any applicable laws of Your country of residence.

4. PURPOSES OF PERSONAL DATA PROCESSING

We Process Your Personal Data solely for specific, lawful, and legitimate purposes, in line with the principles set out in the GDPR, CCPA, COPPA, and other applicable data protection laws depending on Your place of residence.

Below is a breakdown of the purposes for which We Process Your Personal Data and a brief explanation for each:

We do not Process Your Personal Data for any purposes beyond those described above.

Should We intend to Process Your Data for purposes other than those stated, We will notify You in advance and, where required, request Your explicit Consent, unless otherwise permitted by applicable law (e.g., where Processing is necessary for compliance with legal obligations or for legitimate interests under GDPR Article 6(1)(f)).

5. LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

We Process Your Personal Data only when We have a valid legal basis to do so, as defined by the GDPR and other applicable data protection laws, depending on Your country of residence.

Below is a breakdown of the legal grounds on which We rely when Processing Your Personal Data:

We ensure that all Processing of Your Personal Data is carried out fairly, lawfully, transparently, and strictly for the purposes outlined in this Privacy Notice.

If We rely on Consent as a legal basis, We will provide clear opt-in options and ensure that You are able to manage or withdraw Your Consent at any time through Your Account settings or by contacting Us directly.

6. STORAGE OF PERSONAL DATA

• 6.1. How long do We keep Your Personal Data?

  We retain Your Personal Data only for as long as it is necessary for the purposes for which it was collected, including to:

  • operate and maintain Our Platform and eSIM Services;
  • provide support and transaction history within Your Account;
  • comply with legal requirements and tax/accounting obligations;
  • prevent fraud and security incidents;
  • demonstrate compliance with applicable law.

• We apply the principle of storage limitation, as required under the GDPR and other applicable privacy laws. Personal Data is retained:

  • while You maintain an active Account and actively use the Services;
  • or for a maximum of 24 months of continuous inactivity, after which the Account is deemed “inactive”. Inactive Accounts are flagged for deletion/anonymization following a 30‑day notice to the User;
  • where legal retention periods apply, Data is retained only for the required statutory term.

  Category of Personal Data	Retention period	Purpose / Notes
  Personal Data provided when registering or using the Platform (e.g., name, email, phone, Account credentials)	While Account is active or 24 months of inactivity + 30‑day grace period	Data remains available as long as You use the Platform. Deletion can be triggered by You directly via the “Delete Account” function. Necessary to provide the Service; deleted or anonymized after retention term.
  Support messages, chats or communication Data (including through email or Telegram)	36 months from last ticket or until Account deletion	Retained to resolve Your inquiries or provide ongoing support. Deleted upon Account closure or request.
  Automatically collected technical Data (e.g., IP address, browser info, location, cookies)	13 months (standard analytics window)	Retained for analytics, diagnostics, and Platform optimization as long as Your Account remains active.

  Encrypted backups may be stored for an additional period of up to 6 months after primary Data deletion, to ensure continuity and disaster recovery, unless earlier erasure is technically feasible and legally permitted.
  
  If You deactivate Your Account or stop using Our Services, We will retain Your Personal Data for no longer than necessary, and You may manually request full deletion via the Platform interface
  
  Once the relevant retention period ends, or You exercise Your right to erasure (where applicable), Your Data will either be
  – securely and permanently deleted, o
  – anonymized in a way that it can no longer be linked to You
  
  We ensure all deletion processes are carried out securely and in accordance with industry best practices.

• 6.2. Where do We store Your Personal Data?

  Your Personal Data is securely stored on servers provided by Amazon Web Services (AWS) and physically located in Frankfurt, Germany, within the European Economic Area (EEA). Hosting in the EEA ensures that the Processing of Your Data meets the strong privacy standards of the European Union, including those under the GDPR.
  
  We take the protection of Your Personal Data very seriously. We implement commercially reasonable safeguards to protect Your Data from unauthorized access, loss, misuse, disclosure, or alteration
  
  Please note: while We take appropriate precautions, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, any Data transfer is at Your own risk.

• 6.3. Security of Your Personal Data

  We have implemented appropriate technical and organizational measures to safeguard Your Personal Data against unauthorized access, loss, destruction, or disclosure.
  
  These measures include:

  Organizational measures	Technical measures
  Internal privacy and security policies	Data encryption (at rest and in transit)
  Staff training on data protection	Data transfer protection (SSL/TLS, HTTPS)
  Non-Disclosure Agreements (NDAs)	Two-Factor Authentication (2FA)
  Access control and role-based permissions	Firewall and network security controls
  Action logging and audit trails	Regular backups and disaster recovery plans

  In the event of a Personal Data breach, We are committed to responding swiftly and in accordance with applicable Data protection laws, including the GDPR and relevant local regulations, by promptly assessing the breach, notifying the relevant supervisory authority, within 72 (seventy-two) hours of becoming aware of the breach, providing all necessary details. Unless the Personal Data breach is unlikely to result in a risk to the rights and freedoms of natural persons where the notification is not made within 72 (seventy-two) hours, it could be accompanied by reasons for the delay.
  
  By adhering to these measures, We reaffirm Our commitment to maintaining the confidentiality, integrity, and availability of Your Personal Data at all times.

7. DO WE TRANSFER YOUR PERSONAL DATA TO THIRD PARTIES?

We may transfer Your Personal Data to Third Parties, but only when necessary for the operation of the Platform, to provide You with Our Services, or when required by applicable law. All such transfers are carried out in accordance with this Privacy Notice and applicable law.

We may engage certain employees and contractors to assist Us in providing User support or resolving technical issues. These persons act under strict confidentiality obligations and do not have direct access to the databases containing Your Personal Data unless such access is explicitly required to perform their duties

We also use the services of various Third-Party providers for hosting, analytics, communication, payment processing, and infrastructure monitoring. These providers may receive limited access to Your Personal Data on a need-to-know basis and solely for the purposes of performing their services

The Third-Party providers We currently use include, but are not limited to:

Each of these partners is carefully selected and, where required, bound by data processing agreements to ensure that they maintain an adequate level of security and confidentiality.

We do not sell or rent Your Personal Data to any Third Parties

Additionally, all Third-Party providers whose services are integrated into the Platform and which may process Your Personal Data via cookies or similar technologies are listed in the Cookie settings panel. There, You can find detailed information about each service, including its description, the name and location of the processing company, the purposes of data collection and processing, the technologies used, the types of Personal Data collected, the applicable legal basis, the location of processing, the retention period, details on international data transfers, data recipients, and links to each provider’s privacy and cookie policies

Authorities. We reserve the right to disclose and / or report any Personal Data of the User, if this is required by any law of Singapore or the European Union or another applicable legal act, or a confirmed legal requirement of state authority and / or local authorities, for the purpose of compliance with the requirements of the laws of Singapore and the legislation of the European Union, protection of the integrity of the Platform, to fulfill the requests of Users, state authorities and / or local authorities, or for the purpose of facilitating any investigation by law enforcement agencies or an investigation aimed at guaranteeing public (national) security. In some cases, We may also provide the User's Personal Data to the authorities of the European Union (both national and supranational) and the authorities of other countries, if such provision of Personal Data is required by law, or in the event of an official request from such an authority as part of a criminal investigation.

8. CROSS-BORDER TRANSFER OF PERSONAL DATA

In the course of Our business operations, We may transfer Your Personal Data to third parties, including, but not limited to service providers and partners, located in countries outside of Your country of residence, including countries outside the European Union (EU), European Economic Area (EEA), Switzerland, and the United Kingdom of Great Britain and Northern Ireland, or that Process Personal Data there. This may occur when We use third-party services like Google Analytics, which may store and Process Personal Data on servers located in various jurisdictions.

Please be aware that when Your Personal Data is transferred to third countries, such countries may have Data protection laws that differ from, and in some cases provide less protection than, the Data protection laws in Your country. Nevertheless, We are committed to ensuring that any such transfer of Your Personal Data is conducted in full compliance with applicable Data protection regulations, including but not limited to the GDPR. Specifically, We use one of the following safeguards:

• • Transfer based on adequacy decisions. Whenever possible, We rely on adequacy decisions issued by relevant authorities to transfer Personal Data to countries or international organizations that provide an adequate level of protection.

    • European Commission: for transfers from the EU, adequacy decisions are adopted by the European Commission. You can access the full list of countries and international organizations that have been deemed adequate by the EC on their official website.
    • UK Secretary of State: for transfers from the UK, adequacy decisions are adopted by the UK Secretary of State. The full list of countries with adequacy status is available on the website of the Information Commissioner’s Office (ICO).
    • Federal Council (Switzerland): adequacy decisions for transfers from Switzerland are listed in Annex 1 of the Data Protection Ordinance (O-FADP), which details states, territories, or sectors with adequate data protection.
    • Additionally, We may transfer Personal Data to service providers in the United States that participate in the EU-U.S. Data Privacy Framework, which is subject to an adequacy decision by the European Commission. This also includes the UK Extension to the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework. These frameworks provide specific safeguards for transfers of Personal Data between the EU, UK, Switzerland, and the U.S. For more information on the Data Privacy Framework (DPF) program, please visit: https://www.dataprivacyframework.gov/. We regularly verify the DPF certification status of Our U.S.-based providers to ensure continued compliance.
  • Transfer in the absence of adequacy decision. In cases where Personal Data is transferred to a country that has not been deemed to provide an adequate level of protection by the European Commission or other legal authorities, We will implement appropriate safeguards to protect Your Data, including but not limited to: Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs), explicit Consent, or other legally recognized transfer mechanisms.
  • Third Party whose services We use. We collaborate with the third-party service provider Google LLC to facilitate analytics and marketing activities. This may involve the cross-border transfer of Your Personal Data to ensure the effective operation of these services. Google LLC is certified under the EU-U.S., UK-U.S., and Swiss-U.S. Data Privacy Frameworks, which establish comprehensive safeguards for the processing and transfer of Personal Data between regions.
    
    By using Our Platform, You Consent to the transfer, storage, and Processing of Your Personal Data outside Your country of residence, including to countries that may have different data protection laws than Your home jurisdiction
    
    We will take all necessary measures to ensure that Your Personal Data is treated securely and in accordance with this Notice
    
    Additionally, a complete list of Third-Party service providers that may receive Your Personal Data as part of international transfers is available via the Cookie settings panel.

9. YOUR RIGHTS REGARDING PERSONAL DATA

Under the GDPR, You have a set of rights that allow You to control how Your Personal Data is collected and used. Depending on Your place of residence, some rights may vary under local laws (e.g., CCPA, UK GDPR, or other regulations).

You can exercise these rights at any time by contacting Us at support@reddog.fish or through other communication channels specified in Section 15 of this Privacy Notice.

To protect Your privacy, We may ask You to verify Your identity before responding to a request. This helps ensure that Personal Data is not shared with anyone who is not authorized to receive it.

We respond to all valid requests within 30 (thirty) calendar days of receipt. If more time is needed due to the complexity or number of requests, We will inform You accordingly

We are committed to supporting Your rights and maintaining transparency about how Your Data is used within Our system. If You have questions or concerns, do not hesitate to reach out

If You are located outside the EU/EEA or the United States, additional rights or obligations may apply under the data‑protection laws of Your jurisdiction. Please contact Us at support@reddog.fish if You wish to exercise any such rights.

10. COOKIES

• 10.1. What are Cookies?

  Cookies are small pieces of data (text files) or parts of program code that contain a unique User ID and information about how You use the Platform. Cookies are transmitted through a server and stored on Your device when You visit and / or use the Platform. They are stored on Your device when You use the Platform. Cookies are transmitted through a server and stored locally on Your device to help enhance Your experience and track usage patterns. These technologies are passive, meaning they do not contain harmful programs, viruses, or spyware and cannot access other information on Your device.
  
  A Cookie consists of 2 parts: the name and the content or value of the Cookie. Moreover, the duration of existence of a Cookie is determined. Data stored using these technologies can only be accessed by the Platform or services that store it, which ensures Data consistency and privacy across visits. Cookies themselves do not require Personal Data to be used and, in most cases, do not personally identify Users.
  
  On the Platform, Data may be stored temporarily (“session data”) or for a longer period (“persistent data”). Session data is erased when You close Your browser. “Persistent Cookies” remain on the User's device for a certain period of time specified in the Cookies. They are activated every time the User visits the Platform
  
  Cookies may also be used to collect anonymous statistics about the experience of visiting the Platform. The data collected is not personally identifiable and is limited to the minimum information necessary to optimize the performance of the Platform
  
  In order to obtain additional general information about Cookies, You can check out information about HTTP Cookies, which is available at the following link.

• 10.2. Consent to the use of Cookies

  Cookies are not strictly necessary for visiting and / or using the Platform (except for the “strictly necessary” type of Cookies) and will be used by Us only after obtaining Your Consent to their use. Once You agree to Our use of Cookies in a separate notice about the use of Cookies, We will consider Your Consent to be obtained.
  
  When You have given Us Your Consent to use Cookies when visiting and / or using the Platform, the Processing of the Data collected by Cookies is carried out in accordance with Art. 6(1)(a) GDPR, in accordance with which the Processing shall be lawful only if and to the extent that at least one of the following applies: the Subject of Personal Data has given Consent to the Processing of his or her Personal Data for one or more specific purposes. You can familiarize Yourself with the text of the GPDR by following the link: https://eur-lex.europa.eu/eli/reg/2016/679/oj
  
  You may certainly change Your Cookie settings on Your device at any time. For more information, please read section 10.6. “How You can manage Your Cookies settings”.

• 10.3. The types of Cookies We collect:

  We use the following categories of Cookies:

  • Strictly necessary Cookies. These Cookies are essential for the basic functioning of the Platform. They enable core features such as page navigation, access to secure areas, session authentication, fraud prevention, and service availability. The Platform cannot function properly without these Cookies, and they do not require User Consent.
  • Functional Cookies. These Cookies enable the Platform to remember the choices You make, such as Your language preference, time zone, login credentials, or region. They enhance functionality and personalization by allowing the Platform to provide more tailored features and content. Disabling them may lead to reduced Platform performance or usability.
  • Analytics Cookies. These Cookies collect aggregated and anonymous information about how Users interact with the Platform — such as visited pages, click paths, time spent on each page, and error messages. We use this data to understand usage patterns, improve navigation, and optimize performance and User Experience (UX). All data is processed in a pseudonymized or anonymized form.
  • Marketing (targeting) Cookies. These Cookies are used to deliver advertisements that are more relevant to You and Your interests. They may also be used to limit the number of times You see an ad and to measure the effectiveness of advertising campaigns. They are usually placed by advertising networks with Our permission and track Your browsing across other websites as well. Disabling these Cookies will not prevent ads, but may result in less relevant advertising.

  privacy-policy-page.statements.cookies.sublist.type.text-2

• 10.4. The purposes of collecting Cookies

  The Platform uses Cookies for the following purposes:

  • ensuring the proper functioning of the Platform,
  • ensuring the security of Users while they are on the Platform,
  • adjusting and enhancing Your interaction experience with the Platform,
  • obtaining standard analytics information,
  • detecting errors and identifying their causes to improve Platform performance,
  • evaluate performance and improve UX,
  • assess effectiveness of Our communications and posts.

  We assure You that all Data collected through Cookies is used solely for the purposes stated in this Notice, and Cookies in no way are harmful to You or Your device, as they do not make any changes to its configuration.

• 10.5. Services used to collect Cookies

  We use several third-party services to process Cookies and tracking technologies on Our Platform, including tools for analytics, advertising, and performance monitoring.
  
  The legal basis for processing such data is Your explicit consent under Article 6(1)(a) GDPR, provided via the cookie banner
  
  You can view the full and up-to-date list of all services, technologies, processing purposes, data collected, recipients, transfer locations, and retention durations at any time by visiting the Cookie settings panel on the Platform.

• 10.6. How You can manage Cookies settings?

  You can manage and control the privacy Cookies settings through Your desktop browser’s privacy or security settings.
  To manage tracking and Data collection on different desktop browsers:

  • For Chrome: go to Settings > Privacy and Security > Cookies and other site data to set Your preferences for cookies and tracking data,
  • For Firefox: navigate to Settings > Privacy & Security and adjust options under Cookies and Platform Data to control Data collection,
  • For Safari: go to Preferences > Privacy and configure cookie management settings according to Your preferences.

  For additional information about managing Platform tracking and Cookie settings, You can visit Your browser's support page.
  
  PLEASE NOTE THAT CHANGES TO THE TRACKING AND DATA COLLECTION SETTINGS MAY RESULT IN LIMITED FUNCTIONALITY OF THE PLATFORM, WHICH COULD IMPACT YOUR USER EXPERIENCE.

11. SENDING MARKETING COMMUNICATIONS

By voluntarily providing Your Personal Data and explicitly checking the corresponding box during registration, You give Your informed and unambiguous Consent to receive marketing communications from RedDogFish. This Consent confirms Your wish to receive materials such as product updates, platform news, promotional offers, usage tips, feature announcements, and other content We believe may be relevant and valuable to You.

Marketing communications are sent solely by Us using the contact details You voluntarily provided - including but not limited to Your email address or other channels of communication You have used to interact with the Platform (such as messaging apps). We do not share or sell Your Personal Data to any Third Parties for their own direct marketing purposes

All marketing activities are conducted in full compliance with applicable data protection and electronic communication laws, including but not limited to the GDPR and other relevant jurisdictions depending on Your location

You have the right to withdraw Your Consent and opt out of receiving marketing communications at any time. To do so, You may:

• click the “Unsubscribe” link in any marketing email; or
• contact Us at support@reddog.fish; or
• use any of the contact channels listed in Section 15 of this Privacy Notice.

If You have not provided Your Consent to receive marketing communications, We will only contact You regarding matters directly related to Your specific request or interaction with the Platform.

We may use cookies and similar tracking tools in Our communications to measure engagement, evaluate the effectiveness of campaigns, and optimize future Content. You may manage such preferences through Your browser settings or Cookie policy tools, as outlined in this Privacy Notice

If You have any questions about how We handle marketing communications or wish to change Your communication preferences, please contact Us using the details provided in this Privacy Notice.

12. EXTERNAL LINKS

The Platform may contain links to external websites, platforms, or services that are not operated or controlled by the Company. These links may be included, for example, in informational materials, blog Content, or in communications sent through the Platform.

Please note that We are not responsible for the content, privacy practices, or security of any Third-Party websites or services. The presence of a link on Our Platform does not imply endorsement or affiliation with the linked resource, unless expressly stated

Once You follow a link to a Third-Party site, this Privacy Notice no longer applies. That Third Party may collect, use, or share Your Personal Data in accordance with their own privacy policies and legal obligations. These may include different cookie tracking mechanisms, analytics tools, or data sharing practices over which We have no control

We strongly recommend reviewing the privacy policies and terms of service of any external site before sharing Your Personal Data or interacting with its content

If You encounter a link on Our Platform that appears harmful, outdated, or inconsistent with applicable laws or this Privacy Notice, please notify Us at support@reddog.fish so that We can review and take appropriate action.

13. CHANGES TO THIS NOTICE

We reserve the right to update or amend this Privacy Notice at any time and for any reason by publishing a new version on the Platform. We encourage You to review this Notice periodically to stay informed about any changes.

If You do not agree with the revised version of the Notice, You must stop using the Platform and may request the deletion of Your Personal Data

If the changes are substantial, We will notify You at least 15 (fifteen) calendar days before such changes take effect and, where legally required, obtain Your Consent again.

14. DISPUTE RESOLUTION

Before initiating legal proceedings in court, the User must first submit a written claim (a proposal for voluntary settlement of the dispute) to Us. Within 30 (thirty) calendar days of receiving the claim, We will respond in writing regarding the outcome of the claim review.

If no agreement is reached, the dispute shall be resolved by the competent courts of Singapore, in accordance with the applicable legislation of Singapore. This Notice is governed and interpreted in accordance with the laws of Singapore.

15. CONTACT INFORMATION

If You have any questions, comments, or concerns regarding this Privacy Notice or the way We handle Your Personal Data, please contact Us using any of the following methods:

• by email: support@reddog.fish; or
• via live chat: You may initiate contact through the live chat window available on Our Platform.

We will make every reasonable effort to respond to Your inquiry without undue delay and, in any case, within 30 (thirty) calendar days from the date of receipt.

16. ADDITIONAL INFORMATION FOR RESIDENTS OF THE UNITED STATES OF AMERICA

This section applies only if You are a resident of certain U.S. states that have implemented state-level privacy laws. You, as a Subject of Personal Data, have some special privacy rights. To use them, please contact Us at support@reddog.fish.

Please note! Depending on the state and legislative requirements, We have from 30 (thirty) to 60 (sixty) days to exercise Your request, with the right to postpone it for 30 (thirty) days more
If Your complaint is not satisfied, You can file a complaint with the Federal Trade Commission

Also, You may submit a complaint as follows:

• For Colorado residents, to the Colorado AG at: https://coag.gov/file-complaint/
• For Connecticut residents, to the Connecticut AG at: https://www.dir.ct.gov/ag/complaint/
• For Montana residents: https://dojmt.gov/consumer/
• For Oregon residents: https://justice.oregon.gov/consumercomplaints/
• For Texas residents: https://oag.my.salesforce-sites.com/CPDOnlineForm
• For Utah residents: https://attorneygeneral.utah.gov/contact/complaint-form/
• For Virginia residents, to the Virginia Attorney General at: https://www.oag.state.va.us/consumercomplaintform
• For residents of Florida at: https://www.myfloridalegal.com/consumer-protection/consumer-complaint-form

Please note! Some states do not have privacy laws. The rights of residents of such states are governed by U.S. federal law. If Your state is not on the list, please contact Us, support@reddog.fish.

Access to specific Data and the right to transfer Data

With certain exceptions, if You are a resident of the state of California, USA, You have the right to request a copy of the Personal Data (defined as Personal information for the purposes of this section) We have collected about You in the 12 (twelve) months prior to Your request. After receiving Your request and establishing Your identity, We will inform You of:
– categories of Personal information that We have collected about You,
– Our business or commercial purpose for collecting such Personal information,
– categories of Third Parties with whom We share this Personal information.

Also, if You are an Oregon resident, Delaware, Minnesota (effective from 31/07/2025), Maryland (effective from 01/10/2025) You also have the right to receive a list of the specific Third Parties to which We have disclosed Personal Data in Our capacity as a Controller, provided that We are not required to disclose its trade secrets.

To exercise Your rights, You may submit the request by sending an email to: support@reddog.fish. We will ensure that Your request is processed in accordance with the relevant legal requirements. We may require specific information from You to help Us confirm Your identity and process Your request. You have the right not to be discriminated against for exercising any of Your rights.

Non-discrimination

We will not discriminate against You for exercising Your rights related to the Processing of Your Personal information, as well as Your right to refuse to receive Our Features in the future, or for refusing to receive further marketing, informational / advertising materials from Us.

Do not sell and share my Personal information

California residents have the right under the California Consumer Privacy Act as well as California Privacy Rights Act to opt out of the “sale” and “share” of their Personal information by a company governed by CCPA. In this context, the word “sale” means any “selling, renting, releasing, disclosing, disseminating, making available, transferring or otherwise communicating orally, in writing, or by electronic means, a consumer's personal information by the business to another business or a Third Party, for monetary or other valuable consideration”. If You are a resident of other US states that give You rights to opt out of “sale”, “share” and / or use of Personal information for “targeted advertising”, You may also find this information helpful.

In exceptional cases, We may share Your Personal information as it is described in section 8. We do not and will not “sell” Your Personal information, but We recognize that the CCPA defines “Personal information” in such a way that providing access to identifiers associated with You may be considered a “sale”. In the event that these Platform visitor identifiers and inferences may be identified as a sale under the CCPA, please use the “Do not sell and share my Personal information” setting on the Platform's home page. After receiving Your request through the “Do not sell and share my Personal information” setting, the Company makes a corresponding entry in its database of Personal information / Platform Users, which indicates that the Company is aware of the impossibility of further selling Your Personal information. Also, if You would like to record Your preference that We will not “sell” and “share” Your Personal information in the future, please contact Us via support@reddog.fish.

Finally, if Your browser supports it, You can use the Universal Opt-Out Mechanism mentioned below.

Universal Opt-Out Mechanism

For residents of California, Colorado, Connecticut, New Hampshire, Texas, Montana, New Jersey, Minnesota (effective from 31/07/2025), Delaware (effective from 01/01/2026), Oregon (effective from 01/01/2026), Maryland (effective from 01/04/2026) We recognize the Global Privacy Control (“GPC”) signal. If You are using a browser setting or plug-in that sends an opt-out preference signal to each website You visit, We will treat that as a valid request to opt out. To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If You choose to use the GPC signal, You will need to turn it on for each supported browser or browser extension You use.

COPPA (Children Online Privacy Protection Act)

When it comes to the collection of Personal information from children under 13, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, the nation’s consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.

Fair Information Practices

The Fair Information Practices Principles form the backbone of privacy law in the United States, and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect Personal Data.

In order to be in line with Fair Information Practices We will take the following responsive action, Platform a data breach occur:
- We will notify the Users via Platform notification within 7 (seven) business days.

We also agree to the individual redress principle, which requires that individuals have a right to pursue legally enforceable rights against data Collectors and Processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or a government agency to investigate and / or prosecute non-compliance by Data Processors.