I take a plain approach to privacy on this site: I collect as little as possible, I don't use third-party trackers or analytics, and nothing is sold or shared for marketing. Here's exactly what happens with your data.

Who I am

This site, dysc.co.uk, is run by DAPA Solutions Ltd (trading as DYSC), a company registered in England and Wales. Full details are in the panel alongside this page. For the purposes of data protection law, DAPA Solutions Ltd is the data controller for any personal data collected through this site.

What data I collect

When you use the contact form. If you fill in the contact form, I collect whatever you enter — typically your name, email address, phone number (if given), and the content of your message. This is used solely to respond to your enquiry.

Cookies. This site uses two strictly necessary, first-party cookies and nothing else:

Both exist purely for security and technical function — not for tracking, profiling, or advertising. Because they're strictly necessary for the site to work securely, they don't require your consent under UK cookie law (PECR), and no cookie consent banner is shown.

No third parties. This site doesn't use third-party cookies, third-party analytics (e.g. Google Analytics), advertising trackers, embedded social media widgets, or any other third-party plugins that collect data about you. Nothing you do on this site is shared with, or visible to, any third party.

What I don't do

I don't sell or rent your data to anyone.
I don't use your data for marketing unless you've specifically asked to hear from me.
I don't track you across other websites.
I don't build advertising profiles.

Why I process your data (legal basis)

Where you contact me, I process your details on the basis of legitimate interest — responding to enquiries is the plain, expected purpose of a business contact form — and, if that enquiry turns into a project, on the basis of taking steps to enter into a contract with you.

The antiforgery and session cookies are processed on the basis of legitimate interest in keeping the site secure and functioning correctly.

How long I keep it

Contact form submissions are kept only as long as needed to deal with your enquiry and any resulting conversation or project — typically no more than a few years, after which they're deleted unless there's a good reason to keep them (for example, an ongoing client relationship, or a legal requirement).

Session and antiforgery cookies are short-lived and expire automatically — typically at the end of your browsing session or shortly after.

Sharing your data

I don't share your personal data with third parties, except where I'm legally required to (for example, if requested by a regulator or law enforcement), or where a service is genuinely necessary to run the site or business (for example, hosting infrastructure) — in which case that provider only processes data on my instruction and doesn't use it for their own purposes.

Your rights

Under UK GDPR, you have the right to:

ask what personal data I hold about you;
ask me to correct anything inaccurate;
ask me to delete your data;
ask me to restrict or object to processing;
ask for your data in a portable format;
withdraw consent, where processing is based on consent.

To exercise any of these, just get in touch at hello@dysc.co.uk. I'll respond within a month, as required by law.

If you're unhappy with how your data has been handled, you also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Keeping your data secure

I take reasonable technical and organisational steps to protect any data submitted through this site, including the security measures the antiforgery and session cookies themselves support.

Changes to this policy

I may update this page occasionally — for instance if the site's functionality changes. The version shown here at any given time is the current one.

Getting in touch

Questions about this policy or your data are welcome — use the contact form, or email me directly at hello@dysc.co.uk.