Privacy

This notice explains what personal data Duspat Consultancy Limited collects through this website, why we collect it, and the rights you have over it. We keep it deliberately short, because we collect very little.

Who we are

Duspat Consultancy Limited is a Data and AI consultancy registered in England and Wales, company number 10442096. We are the data controller for the personal data described in this notice. If you have any question about your data or this notice, contact us at info@duspat.co.uk.

Information we collect

We do not use advertising trackers, and we do not currently run website analytics. We do not build profiles of visitors or buy in data about you from anyone else.

The only personal data we collect is what you choose to give us when you contact us:

• When you email us or fill in our contact form — your name, work email address, organisation, and (optionally) your role, together with the details of your enquiry: the service you are interested in, the stage you are at, and your message.
• Technical data tied to a form submission — if you submit our contact form, we also process your IP address and the time of submission. This is used only to prevent spam and abuse of the form, and to keep a reliable record of genuine enquiries.

You do not have to give us any of this. If you would rather not use the form, you can email us directly.

How we use your information

We use the information you give us to:

• respond to your enquiry and answer your questions;
• discuss your requirements and, where there is a fit, prepare a proposal;
• carry out and manage any engagement you go on to agree with us;
• keep in touch about work you have asked us to do; and
• meet our own legal, accounting and record-keeping obligations.

We will not add you to a marketing list, and we will not send you unsolicited email. We do not sell your data, and we never will.

Our lawful bases

Under UK data protection law we rely on the following bases to process your data:

• Consent — when you submit our contact form, you confirm you are happy for us to hold your details in order to reply. You can withdraw that consent at any time.
• Legitimate interests — to respond to enquiries, to run and grow our consultancy, and to keep our website and contact form secure and free of abuse.
• Contract — where we are taking steps at your request before entering into an engagement, or performing one.
• Legal obligation — where we must keep certain records, for example for tax and accounting.

Cookies and local storage

This website sets no tracking or advertising cookies. It stores a single value in your browser — your choice of light or dark theme — so the site remembers it on your next visit. That value stays on your device, is never sent to us, and identifies nobody. Because it is strictly necessary for a preference you set, it does not require a consent banner.

Sharing and international transfers

We do not sell or trade your personal data. We share it only with the service providers that help us run the website and respond to you, and only to the extent they need it:

• Amazon Web Services (AWS) — hosts this website and, when you use our contact form, delivers the notification email to us and stores your enquiry. We use AWS's London (UK) region, so this data is processed in the United Kingdom.
• Cloudflare — if you submit the contact form, provides the anti-spam check that confirms you are a person rather than a bot. This may involve processing outside the UK under appropriate safeguards, such as the UK's International Data Transfer Agreement.

We may also share your data with our professional advisers, or where we are required to do so by law.

Retention

We keep your personal data only for as long as we reasonably need it. Enquiries submitted through our contact form are automatically deleted after two years. Technical data used to prevent spam is discarded within hours, and our server logs are kept for a short period — no more than ninety days — for security and diagnostics. Where an engagement follows, we keep the records we are required to for legal and accounting purposes, and no longer.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct anything that is inaccurate;
• ask us to erase your data, or to restrict or object to how we use it;
• ask us to transfer your data to you or another provider; and
• withdraw any consent you have given.

To exercise any of these, email us at info@duspat.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk. We would ask that you give us the chance to put things right first.

Changes to this notice

We may update this notice from time to time as our services or our tools change — for example, if we introduce website analytics. When we do, we will publish the revised version here and update the date at the top of the page.