Red Cloud Project 🩸☁️
Periods, culture and religion

PRIVACY POLICY

Last updated: December 03, 2025

This Privacy Notice for Ricebox Studio (“we”, “us” or “our”) describes how and why we might access, collect, store, use and share (“process”) your personal information when you use our services (“Services”), including when you:

• Visit our website at https://redcloudproject.uk/ or any website of ours that links to this Privacy Notice.
• Use Red Cloud Project, a period education project by Ricebox Studio Ltd. This project was originally commissioned and funded in 2020 by The Rights Studio and CRIN, with continuation funding by We Are Family Foundation, Youth To The Front Fund in 2025.
• Engage with us in other related ways, including marketing or events.

If you do not agree with our policies and practices, please do not use our Services. If you have any questions or concerns, contact us at thericeboxstudio@gmail.com


What personal information do we process?
We may process personal information depending on how you interact with us and the Services.

Do we process any sensitive personal information?
Some information may be considered “special” or “sensitive” (for example, religious beliefs or personal testimonies). We may process sensitive information with your consent or when permitted by law.

Do we collect information from third parties?
We do not collect information from third parties.

How do we process your information?
We process information to provide, improve, and administer our Services; communicate with you; protect against fraud; and comply with laws.

When and with whom do we share personal information?
We may share information in specific situations and with specific third parties.

How do we keep your information safe?
We use organisational and technical safeguards but cannot guarantee 100% security.

What are your rights?
Depending on where you live, you may have rights related to accessing, correcting, or deleting your personal information.

How do you exercise your rights?
You can submit a data subject access request or contact us directly..


1. WHAT INFORMATION DO WE COLLECT?

We collect personal information you voluntarily provide when you express interest in our Services, participate in activities, or contact us.

Personal information may include:
• Email addresses
• Names
• Contact or authentication data

With your consent or when permitted by law, we may process sensitive information such as:
• Personal testimonies and experiences

All personal information you provide must be true, complete, and accurate.

Some information is collected automatically, such as your IP address, browser characteristics, device details, language preferences, referring URLs, location, and usage data. This helps us maintain and improve our Services.

We also collect information using cookies and similar tracking technologies.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements:
https://developers.google.com/terms/api-services-user-data-policy


2. HOW DO WE PROCESS YOUR INFORMATION?

We process your information to:
• Provide, improve, and administer our Services
• Communicate with you
• Ensure security and prevent fraud
• Comply with legal obligations
• Request feedback
• Deliver marketing communications (with consent)


3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

If you are in the UK or EEA, we rely on:
• Consent
• Contract
• Legitimate interests
• Legal obligations

You may withdraw consent at any time.


4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may share your personal information with:
• Service providers
• Professional advisers
• Government authorities, when legally required

We do not sell your personal information.


5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We use cookies and similar technologies to collect and store information.
You can control cookies through your browser settings.


6. HOW LONG DO WE KEEP YOUR INFORMATION?

We keep your personal information only as long as necessary or legally required. When no longer needed, we delete or anonymise it.


7. HOW DO WE KEEP YOUR INFORMATION SAFE?

We use organisational and technical security measures, but no method of transmission or storage is completely secure.


8. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your location, you may have the right to:
• Access your data
• Correct your data
• Delete your data
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent

You can submit a request here:
https://app.termly.io/dsar/d978a201-bc9a-4c10-9191-0637b1e1e59c


9. CONTROLS FOR DO-NOT-TRACK FEATURES

There is no standard for DNT signals; we do not currently respond to them.


10. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

If you are a US resident, you may have additional rights under state-specific privacy laws.


11. DO WE MAKE UPDATES TO THIS NOTICE?

Yes, we will update this Notice as needed to stay compliant with laws.


12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

Email: thericeboxstudio@gmail.com


13. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?

You can submit a data request using the link above or by contacting us directly.