1. Overview & Data Controller
This Privacy Policy describes how DOT IT Services (“the Company”, “We”, “Us”, or “Our”) collects, stores, uses, and protects personal data when you visit our website at https://dotit.uk (or https://dotit.io) and when you engage us for digital design, software development, e-commerce, and consulting services.
For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, DOT IT Services acts as the Data Controller responsible for determining the purposes and means of processing your personal data.
2. Interpretation & Definitions
The words in which the initial letter is capitalized have meanings defined under the following conditions, applicable equally in singular or plural forms:
Any information relating to an identified or identifiable natural person (“Data Subject”) who can be identified directly or indirectly.
DOT IT Services, which alone or jointly determines the purposes and means of personal data processing under UK law.
Refers to the online portal, websites, and associated digital agency services delivered by DOT IT Services.
Data collected automatically from your device or website interactions (e.g. IP address, page response times, browser details).
Any vetted entity that processes data on our behalf under a compliant Data Processing Agreement (DPA).
Small text files placed on your device to ensure core site stability, preferences, and performance measurement.
3. Personal Data We Collect
While interacting with our website or commissioning a digital project, we may collect and process specific categories of information:
Direct Information Provided by You
- First name and last name
- Corporate or personal email address
- Contact telephone / mobile number
- Company name & registered business address
- Project scope details, specifications & budgets
- Invoicing & billing transaction records
Automatically Collected Technical & Usage Data
When you access our Service, our infrastructure automatically logs technical data:
- Internet Protocol (IP) address & network location
- Browser type, engine version & operating system
- Pages viewed, referral source & visit duration
- Unique device identifiers & telemetry diagnostics
4. Legal Bases & Processing Purposes (UK GDPR Art. 6)
Under UK data protection law, we only process your personal information when a lawful basis applies:
Developing your website, deploying hosting, processing deliverables, issuing invoices, and managing ongoing support obligations.
Safeguarding our technical infrastructure, preventing fraudulent inquiries, monitoring service uptime, and improving UI workflows.
Complying with statutory UK accounting laws, tax reporting (HMRC), fraud prevention, and lawful law-enforcement requests.
Sending requested digital agency updates, newsletters, or case studies where you have explicitly opted in (withdrawable anytime).
6. International Data Transfers & UK Safeguards
Where personal data is processed by our development teams, servers, or service providers located outside the United Kingdom or the European Economic Area (EEA), we enforce robust transfer safeguards recognized by UK law.
All cross-border data handling is governed by the UK Information Commissioner's Office (ICO) approved International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses, ensuring equivalent legal protections for your personal data regardless of processing location.
7. Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
Retained for up to 12 months from last interaction unless a commercial engagement is formed.
Retained for 6 years post-completion to satisfy UK statutory accounting & limitation periods.
Diagnostic server logs and traffic telemetry are purged or anonymized within 90 days.
8. Your Legal Rights Under UK GDPR
As an individual in the United Kingdom, you hold clear statutory data privacy rights.
Request a copy of the personal data we hold about you free of charge within 30 days.
Request the prompt correction of any inaccurate or incomplete personal records.
Request deletion of your data when it is no longer required for statutory or contractual purposes.
Request the temporary suspension of processing while accuracy or objections are verified.
Receive your personal data in a structured, commonly used, machine-readable format.
Object at any time to direct marketing or processing founded upon legitimate interests.
9. Security of Your Personal Data
The security of your personal data is a primary directive at DOT IT Services. We deploy robust physical, technical, and administrative protections including:
10. Children's Privacy
Our services and websites are directed strictly toward commercial clients, entrepreneurs, and adults over the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you believe a minor has submitted personal information to our systems, please notify us at hello@dotit.io, and we will promptly purge the data from our repositories.
11. Links to External Third-Party Websites
Our platforms may contain links to external third-party sites, client websites, or industry resources. Clicking on a third-party link navigates you away from DOT IT Services. We have no authority over and accept no legal responsibility for the privacy practices, policies, or content of third-party platforms. We strongly advise reviewing the privacy statement of every external destination you visit.
12. Policy Updates, Inquiries & ICO Notice
We may periodically update this Privacy Policy to reflect technical enhancements or regulatory amendments. Any revisions will be published on this page with an updated “Last Updated” timestamp. For questions or to submit a data rights request, reach out through our official contact channel:
You have the right to lodge a complaint with the UK supervisory authority: The Information Commissioner's Office (ICO) at ico.org.uk.