01Who we are
DACUITY LTD (“Dacuity”, “we”, “I”) is the data controller for the personal data described in this policy. We are a company registered in the United Kingdom, company number 17431332.
For any question about this policy, to exercise your rights, or to request our full registered company details, contact hello@dacuity.io.
This policy covers the dacuity.io website and enquiries made through it, and the ClearAmbit example at clearambit.dacuity.io. Personal data we process on behalf of a client during a paid engagement is governed by that engagement’s contract and data processing agreement, where Dacuity acts as a processor rather than a controller.
02What we collect
Information you give us
If you submit the enquiry form or email us, we collect the information you choose to provide: your name, work email address, company name, the service you’re interested in, and the content of your message. If we go on to work together, we will also hold ordinary business contact and contracting information.
On the ClearAmbit example at clearambit.dacuity.io, we collect the email address you enter in order to send you a one-time sign-in code. We use it only to deliver that code — not for marketing, and not to build a mailing list.
Information collected automatically
Our hosting provider records standard server logs, which may include IP address, browser type, pages requested and timestamps. These are used to keep the site running securely and are not used to profile visitors.
Cookies and third-party requests
The dacuity.io website sets no cookies and runs no analytics, advertising or tracking scripts. There is therefore no cookie banner and nothing to consent to or opt out of.
The ClearAmbit example is the exception: signing in sets two strictly necessary cookies — one while your code is being checked (it expires after 10 minutes) and one that keeps you signed in to the example (30 days). They identify only the sign-in session and are not used to track you.
All fonts and assets on dacuity.io are served from our own domain, so loading those pages makes no requests to third-party servers. The ClearAmbit pages differ: they load fonts from Google Fonts and are served by Netlify, so visiting them shares standard request data (IP address, browser type, page requested) with those providers.
03Why we use it, and our lawful basis
Under the UK GDPR we must have a lawful basis for processing personal data. Ours are set out below.
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and discussing whether we might work together | Legitimate interests — replying to someone who has contacted us about our services. Where you are a sole trader or individual, this may instead be steps taken at your request prior to entering a contract. |
| Providing services, and administering the contract between us | Performance of a contract. |
| Keeping records for accounting, tax and professional indemnity purposes | Legal obligation, and legitimate interests in defending potential claims. |
| Sending a one-time sign-in code and keeping you signed in to the ClearAmbit example | Steps taken at your request — you asked for access. |
| Keeping the website secure and available | Legitimate interests in protecting our systems. |
We do not send marketing emails, build mailing lists, sell data, or share it with third parties for their own purposes.
04Who processes it on our behalf
We use a small number of service providers who process personal data on our instructions, under written terms that restrict them to our purposes:
| Category | Role |
|---|---|
| Form handling | Receives enquiry form submissions and delivers them to our inbox. |
| Website hosting | Serves this website and the ClearAmbit example, and generates standard server logs. |
| Sign-in email delivery | Sends the one-time access code for the ClearAmbit example. |
| Business email and storage | Holds our correspondence and engagement records. |
Some of these providers are based outside the United Kingdom. Where that is the case, transfers are made under the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an applicable adequacy decision. We will tell you which specific providers we use on request — email hello@dacuity.io.
05How long we keep it
- Enquiries that don’t lead to work: up to 12 months from our last contact, then deleted.
- Client records: for the duration of the engagement and 6 years afterwards, to meet accounting, tax and professional indemnity requirements.
- Server logs: as retained by our hosting provider, typically no more than 90 days.
- ClearAmbit sign-in: codes expire after 10 minutes and the sign-in cookie after 30 days; email addresses used for sign-in appear in hosting function logs, retained as server logs above.
06Your rights
Under the UK GDPR you have the right to:
- ask what personal data we hold about you, and get a copy of it;
- have inaccurate data corrected;
- have your data erased, where we have no continuing need for it;
- restrict how we use it, or object to processing based on legitimate interests;
- receive data you provided in a portable, machine-readable format;
- withdraw consent at any time, where processing was based on consent.
To exercise any of these, email hello@dacuity.io. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113. We would appreciate the chance to address your concern first.
07Security
The site is served over HTTPS. Enquiry data is transmitted over an encrypted connection and held in access-controlled business email and storage accounts protected by multi-factor authentication. ClearAmbit sign-in cookies are marked HttpOnly and Secure, and codes are single-use and expire after 10 minutes. We keep the amount of personal data we hold to what is necessary, and no more.
08Automated decision-making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
09Changes to this policy
If this policy changes materially, we will update the date below and, where the change affects how we use data you have already given us, contact you directly.