01Who we are
DACUITY LTD (“Dacuity”, “we”, “I”) is the data controller for the personal data described in this policy. We are a company registered in the United Kingdom, company number 17431332.
For any question about this policy, to exercise your rights, or to request our full registered company details, contact hello@dacuity.io.
This policy covers the dacuity.io website and enquiries made through it. Personal data we process on behalf of a client during a paid engagement is governed by that engagement’s contract and data processing agreement, where Dacuity acts as a processor rather than a controller.
02What we collect
Information you give us
If you submit the enquiry form or email us, we collect the information you choose to provide: your name, work email address, company name, the service you’re interested in, and the content of your message. If we go on to work together, we will also hold ordinary business contact and contracting information.
Information collected automatically
Our hosting provider records standard server logs, which may include IP address, browser type, pages requested and timestamps. These are used to keep the site running securely and are not used to profile visitors.
Cookies and third-party requests
This website sets no cookies and runs no analytics, advertising or tracking scripts. There is therefore no cookie banner and nothing to consent to or opt out of.
All fonts and assets are served from our own domain. Loading a page on this site makes no requests to third-party servers, so no data about your visit is shared with content delivery networks, font providers or anyone else.
03Why we use it, and our lawful basis
Under the UK GDPR we must have a lawful basis for processing personal data. Ours are set out below.
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and discussing whether we might work together | Legitimate interests — replying to someone who has contacted us about our services. Where you are a sole trader or individual, this may instead be steps taken at your request prior to entering a contract. |
| Providing services, and administering the contract between us | Performance of a contract. |
| Keeping records for accounting, tax and professional indemnity purposes | Legal obligation, and legitimate interests in defending potential claims. |
| Keeping the website secure and available | Legitimate interests in protecting our systems. |
We do not send marketing emails, build mailing lists, sell data, or share it with third parties for their own purposes.
04Who processes it on our behalf
We use a small number of service providers who process personal data on our instructions, under written terms that restrict them to our purposes:
| Category | Role |
|---|---|
| Form handling | Receives enquiry form submissions and delivers them to our inbox. |
| Website hosting | Serves this website and generates standard server logs. |
| Business email and storage | Holds our correspondence and engagement records. |
Some of these providers are based outside the United Kingdom. Where that is the case, transfers are made under the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an applicable adequacy decision. We will tell you which specific providers we use on request — email hello@dacuity.io.
05How long we keep it
- Enquiries that don’t lead to work: up to 12 months from our last contact, then deleted.
- Client records: for the duration of the engagement and 6 years afterwards, to meet accounting, tax and professional indemnity requirements.
- Server logs: as retained by our hosting provider, typically no more than 90 days.
06Your rights
Under the UK GDPR you have the right to:
- ask what personal data we hold about you, and get a copy of it;
- have inaccurate data corrected;
- have your data erased, where we have no continuing need for it;
- restrict how we use it, or object to processing based on legitimate interests;
- receive data you provided in a portable, machine-readable format;
- withdraw consent at any time, where processing was based on consent.
To exercise any of these, email hello@dacuity.io. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113. We would appreciate the chance to address your concern first.
07Security
The site is served over HTTPS. Enquiry data is transmitted over an encrypted connection and held in access-controlled business email and storage accounts protected by multi-factor authentication. We keep the amount of personal data we hold to what is necessary, and no more.
08Automated decision-making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
09Changes to this policy
If this policy changes materially, we will update the date below and, where the change affects how we use data you have already given us, contact you directly.