← back to dola tech
▸ legal · privacy

Privacy Policy

Last updated: 4 May 2026 · Dola Tech Limited · Company No. 17163542

Dola Tech Limited ("we", "us") is the data controller for personal data processed via dolatech.co.uk and our software services. We comply with the UK GDPR, the Data Protection Act 2018 (DPA 2018) and the Privacy and Electronic Communications Regulations (PECR).

1. Data we collect

Identity (name, employer), contact (email, phone), commercial (brief contents, billing), technical (IP, device, browser), usage (interactions with our site and products) and any data you choose to share with us in correspondence.

2. Lawful bases

We rely on (a) contract — to deliver services you've engaged us for; (b) legitimate interests — to operate, secure and improve our services; (c) consent — for non-essential cookies and marketing emails; (d) legal obligation — to comply with tax, accounting and statutory duties.

3. How we use your data

To respond to enquiries, deliver engagements, issue invoices, prevent fraud and abuse, run our website, comply with the law, and (with consent) send you occasional updates.

4. Sharing

We share data with vetted sub-processors strictly to deliver the service (see Sub-processor list). We do not sell personal data. We may disclose data to regulators, courts or law enforcement where legally required.

5. International transfers

Where data leaves the UK/EEA we rely on UK IDTA, EU SCCs and supplementary measures (encryption in transit and at rest, RBAC, audit logs).

6. Retention

Brief enquiries: 24 months. Client records: 7 years (statutory). Server logs: 90 days. Backups: 30 days, then purged. Cookies: per the cookie policy.

7. Your rights

Access, rectification, erasure, restriction, portability, objection, withdraw consent, complain to the ICO (ico.org.uk). Email care@dolatech.co.uk — we respond within one month.

8. Security

TLS 1.3, AES-256 at rest, MFA/passkeys, least-privilege RBAC, quarterly secret rotation, dependency review, incident response with 72-hour breach notification.

9. Contact / DPO

Data protection enquiries: care@dolatech.co.uk. Postal: 20 Wenlock Road, London, England, N1 7GU.

Questions? care@dolatech.co.uk · 20 Wenlock Road, London, England, N1 7GU