1. Who we are

Dubietis provides digital credibility services to UK construction companies. This privacy policy explains how we collect, use, store, and protect your personal data when you visit our website or use our services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect

We may collect the following categories of personal data:

Information you provide directly

• Full name
• Company name
• Email address
• Phone number
• Annual turnover range
• Details of your enquiry (free-text message)

This information is collected when you complete the audit application form on our website.

Information collected automatically

• IP address (anonymised where possible)
• Browser type and version
• Device type and operating system
• Pages visited, time spent, and referral source
• Approximate geographic location (city or region level)

This information is collected via Google Analytics and is used to understand how visitors interact with our website.

3. How we use your data

We do not use your data for automated decision-making or profiling.

4. Who we share your data with

We do not sell, rent, or trade your personal data. Your data may be shared with the following third-party processors who act on our behalf:

• Google Analytics — website analytics (data may be transferred to the US under appropriate safeguards)
• Cloudflare — website security and spam prevention via Turnstile
• Hosting provider — our website hosting provider stores data on servers as part of normal website operation
• Email provider — to deliver form submission notifications and correspondence

All third-party processors are required to handle your data securely and in accordance with applicable data protection law.

5. Cookies

Our website uses the following cookies:

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

6. How long we keep your data

• Enquiry form submissions: retained for up to 24 months after your last interaction, then securely deleted.
• Client project data: retained for up to 6 years after the end of the engagement for legal and accounting purposes.
• Analytics data: retained in accordance with Google Analytics default retention settings (14 months).

7. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — ask us to delete your data where there is no compelling reason for continued processing.
• Right to restrict processing — ask us to limit how we use your data.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interest.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please email simon@dubietis.com. We will respond within one calendar month.

8. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (SSL/TLS), access controls, and secure storage of form submissions.

9. International transfers

Some of our third-party processors (such as Google) may transfer data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or UK adequacy decisions, to protect your data to the same standard required under UK GDPR.

10. Children’s data

Our services are directed at businesses, not individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

12. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the revised date shown at the top. We encourage you to review this page periodically.

13. Contact

If you have any questions about this privacy policy or how we handle your data, please get in touch: