How RedSec LTD addresses the EU and UK General Data Protection Regulation.
Effective: July 6, 2026
This statement explains how RedSec LTD meets its obligations under the EU GDPR and UK GDPR.
This statement applies to personal data of individuals in the UK and EEA that RedSec LTD processes as a controller for its own activities, and as a processor on behalf of customers.
We process personal data on the basis of contract performance, legal obligation, legitimate interests, and—where applicable—consent.
Individuals may exercise rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent and lodge a complaint with a supervisory authority.
Requests can be directed to the contact details below. We respond within one month, extendable by two months where necessary.
We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law.
Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses and supplementary measures.
For GDPR enquiries or to exercise your rights, contact SpyPhone@DigitalBankVault.com or write to RedSec LTD, 20 Colmore Circus, Birmingham, B4 6AT, UK.
SpyPhone hardware-modified devices are sold exclusively to vetted corporate, investigative, and compliance professionals for lawful monitoring of devices the purchaser is legally authorized to monitor. Use requires legal authority under the applicable jurisdiction. We do not sell for stalking, unlawful interception, or surveillance without consent where required by law. Every request is reviewed before procurement, and all sales are conditional on acceptance of our Legal Notice.