Privacy Policy

Last updated: 2024

Dupaja ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website or use the contact form on it, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Dupaja provides painting and plastering services. For the purposes of data protection law, we are the data controller responsible for your personal data. Our contact details are set out at the end of this policy.

2. Personal Data We Collect

We collect personal data only where you choose to provide it to us, principally through the contact form on this website. This may include:

• Your name
• Your email address
• Your telephone number
• The content of your message or enquiry, including any details about the property or works you describe

We do not collect any personal data automatically through analytics, tracking scripts or session cookies. This website does not use Google Analytics, Yandex Metrica, VKontakte tools, or any similar analytics, session or CSRF cookies.

3. Why We Collect This Data

We use the personal data submitted through our contact form for the following purposes:

• To respond to your enquiry about painting and plastering services
• To provide you with a quote or estimate for requested work
• To communicate with you regarding scheduling, project details or follow-up questions
• To keep records of correspondence for our legitimate business purposes

4. Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases to process your personal data:

• Consent: where you voluntarily submit your details through our contact form, you consent to us using that data to respond to you.
• Legitimate interests: we have a legitimate interest in responding to enquiries and maintaining reasonable business records, provided this does not override your rights and freedoms.
• Contractual necessity: where processing is necessary to take steps at your request prior to entering into a contract for our services, or to perform a contract with you.

5. Cookies

This website sets only one cookie, named consent_state. This cookie stores your consent choice (for example, whether you have accepted or declined optional advertising measurement) and is retained for one year. No other cookies are set by this site.

Advertising measurement, where applicable, runs only after you have given consent via this cookie, and only on the confirmation page shown after you submit the contact form. No advertising measurement takes place elsewhere on the site, and none takes place before consent is given.

6. How Long We Keep Your Data

We retain personal data submitted through our contact form only for as long as is necessary to respond to your enquiry, provide any requested services, and comply with our legal and accounting obligations. Where no ongoing relationship develops, we will delete or anonymise your enquiry data within a reasonable period, typically no longer than 24 months from the date of last contact, unless a longer retention period is required by law.

The consent_state cookie is stored on your device for one year, after which it expires automatically.

7. Who We Share Your Data With

We do not sell your personal data. We may share personal data with:

• Trusted service providers who assist us with website hosting, email communication or administrative support, acting on our instructions and under appropriate confidentiality obligations
• Professional advisers, such as accountants or legal advisers, where necessary
• Regulatory or law enforcement authorities, where required by law

We do not transfer personal data outside the United Kingdom in the ordinary course of business. Should this change, we will update this policy accordingly and ensure appropriate safeguards are in place.

8. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

• The right to be informed about how your data is used
• The right to access the personal data we hold about you
• The right to rectification of inaccurate or incomplete data
• The right to erasure of your personal data in certain circumstances
• The right to restrict processing in certain circumstances
• The right to data portability
• The right to object to processing based on legitimate interests
• The right to withdraw consent at any time, where processing is based on consent

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month, as required by law.

9. Complaints

If you believe we have not handled your personal data in accordance with the law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection matters.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. Any updates will be posted on this page with a revised "last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

• Dupaja
• 81D Wilmslow Road
• Manchester, M24 9XY
• United Kingdom
• Email: [email protected]
• Phone: +44 161 596 2131