Privacy policy.

We use the information you submit to respond to your enquiry. Our legal basis for this is legitimate interest - it’s reasonably necessary for us to process your details in order to reply to you, and doing so doesn’t override your rights.

If you become a client, we use your information to deliver our services and manage that relationship, on the basis that it’s necessary for the performance of our contract with you.

We don’t sell your information or share it with third parties for marketing purposes.

We use a small number of third-party tools to run this website and manage enquiries: Vercel (website hosting), Neon (database hosting, for a lightweight record of cookie consent choices - see below), Formspree (form processing, for our contact form and project questionnaire), Google Analytics (site analytics), and Google Workspace (email, for responding to enquiries). These providers only process your data on our instructions, to help us run the site and respond to you - they don’t use it for their own purposes.

All of these providers are based in the US. Vercel and Google are certified under the UK Extension to the EU-US Data Privacy Framework, the mechanism recognised by UK data protection law for transferring personal data to the US. Formspree and Neon transfer data under Standard Contractual Clauses, the alternative mechanism recognised for the same purpose. Either way, your data remains protected to UK standards when processed by these providers.

We use Google Analytics to understand how visitors use this site - including which pages are viewed, how visitors found the site, which buttons and links are clicked (such as our call-to-action buttons), and how long visitors typically stay before leaving (bounce rate). This helps us see what’s working and improve the site over time.

Google Analytics does this using cookies. We only set these cookies with your consent, given via the cookie banner on this site - you can change your preference at any time. If you don’t consent, no analytics cookies are set and your visit isn’t tracked in this way.

Because we use Google Analytics rather than a cookieless analytics tool, some data from your visit is also processed by Google under its own privacy policy. We don’t use this data to identify you personally, but Google’s own use of aggregated data is governed by their terms, not ours.

Separately, we keep a lightweight record of the choice itself (whether you accepted analytics cookies, and when) so we can demonstrate compliance if asked. This record doesn’t include your IP address or any other way of identifying you - just the decision, its timestamp, and which version of this policy was in force at the time.

Under UK data protection law, you have the right to ask what personal data we hold about you, request that it’s corrected, deleted, or restricted, and object to how it’s used. To exercise any of these rights, contact us using the details below.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you’re unhappy with how your data has been handled - see ico.org.uk or call 0303 123 1113. We’d appreciate the chance to put things right first (see below), but you’re not required to come to us before contacting the ICO.

If you have concerns about how we’ve handled your personal data, you can raise this directly with us by emailing hello@duologydigital.co.uk with the subject line “Data protection complaint.” We’ll acknowledge your complaint within 30 days, investigate without undue delay, keep you informed of progress, and let you know the outcome.

If you have any questions about this policy or how your data is handled, email us at hello@duologydigital.co.uk.