01Who we are
DadLink Technologies Limited is an independent software studio registered in England and Wales under company number 16161444, based in Handforth, Macclesfield, Cheshire. We design, build and operate software products: SaaS platforms, iOS applications, AI systems and communications infrastructure.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, DadLink Technologies Limited is the data controller for personal data collected through this website and, unless a product policy says otherwise, for the products we operate.
You can reach us about anything in this policy at support@dadlink.co.uk.
02What this policy covers
This policy applies to:
- This website - dadlinktechnologies.co.uk and any pages under it
- Enquiries you send us by email or through any contact route on this site
- Our products as a baseline - every product we operate trades under its own name but is owned and run by DadLink Technologies Limited as the legal entity
Most of our products publish their own privacy policy on their own site, written for what that product actually does. Where a product has its own policy, that policy takes precedence for data collected through that product. Where it does not, or where it is silent on a point, this policy applies.
If you signed up to one of our products, look for the privacy link in that product's footer first. This page is the parent policy that sits behind all of them.
03The data we collect
Data you give us
When you contact us, we receive whatever you choose to send: typically your name, email address, company name, and the content of your message. If you are enquiring about a project, that may include details about your business and what you want built.
Data collected automatically
This website is a static site. It does not run analytics scripts, tracking pixels or advertising technology. Our hosting provider records standard server logs in the course of serving pages - IP address, browser type, requested URL, referrer and timestamp - which we use only for security and to diagnose faults.
The site loads typefaces from Google Fonts. When your browser fetches those font files, Google receives your IP address as part of that request. See section 06 for how we treat this.
Data collected through our products
Depending on the product, this can include account details (name, email, business name, address, phone number), billing and subscription records, the content you create or upload (invoices, quotes, customer records, bookings, artwork, messages), usage data, and - for AI voice and messaging products - call recordings, transcripts and message content processed on your behalf. Each product's own policy sets out exactly what it collects.
Data from the App Store
For our iOS apps, Apple provides us with aggregated, anonymised analytics (downloads, crashes, retention) under Apple's own terms. We do not receive your Apple ID or payment details. In-app purchases are processed entirely by Apple.
Special category data
Some of our products operate in areas where sensitive data may be involved - for example screening services that process health-related information, or wellbeing apps where you record how you feel. Those products handle that data under their own policies, with explicit consent where required, and never use it for anything other than the service you asked for. This studio website does not collect special category data.
04How we use it and why
UK GDPR requires us to have a lawful basis for every use of your personal data. Here is what we do and the basis we rely on:
| Purpose | What we use | Lawful basis |
|---|---|---|
| Answering your enquiry | Name, email, message content | Legitimate interests - responding to someone who contacted us |
| Scoping and delivering a project | Contact details, business details, correspondence | Contract - steps taken at your request before entering a contract, then performance of it |
| Providing a product you signed up to | Account, billing and content data | Contract |
| Billing and accounting | Invoices, payment records, VAT records | Legal obligation - HMRC and Companies Act record-keeping |
| Keeping the site and products secure | Server logs, IP addresses, access records | Legitimate interests - preventing abuse and diagnosing faults |
| Product updates and service notices | Email address | Legitimate interests for existing customers; consent for anyone else |
| Establishing or defending legal claims | Whatever is relevant to the matter | Legitimate interests |
We do not sell personal data. We do not use it to build advertising profiles. We do not use your data to train AI models. Where our products use third-party AI services to deliver a feature (for example transcribing a call), the data is processed to provide that feature and nothing else.
07International transfers
We are a UK company and our primary data storage is in the UK and EU regions of Google Cloud. Some of the providers listed above are based in the United States or process data there.
Where personal data leaves the UK, we rely on one of the safeguards recognised under UK GDPR: an adequacy decision for the destination country, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with the provider's own security commitments. You can ask us for details of the safeguard applied to any specific transfer.
08How long we keep it
We keep personal data only as long as we have a reason to. As a guide:
| Data | Retention | Why |
|---|---|---|
| Enquiries that go nowhere | 12 months from last contact | In case you come back to it |
| Client project correspondence | 6 years after the project ends | Limitation period for contract claims |
| Invoices and payment records | 6 years after the end of the financial year | HMRC requirement |
| Product accounts | Life of the account, then deleted or anonymised within 90 days of closure | Providing the service; short grace period for reactivation |
| Server logs | Up to 30 days | Security and fault diagnosis |
Individual products may set longer or shorter periods where their service demands it - call recordings, for example, follow the retention setting the account holder chooses. Their own policies state the specifics.
09Security
We take the security of your data seriously and apply measures proportionate to the risk:
- All connections to our sites and products are encrypted in transit using TLS
- Data at rest is encrypted by our cloud providers as standard
- Access to production systems is restricted, authenticated and logged
- Payment card data is never stored on our infrastructure - it goes directly to Stripe
- Products with role-based access control let account holders limit what their own staff can see
No system is perfectly secure. If we become aware of a breach that is likely to put your rights and freedoms at risk, we will notify you and the Information Commissioner's Office without undue delay, and within 72 hours of becoming aware of it where the law requires.
10Your rights
Under UK GDPR you have the right to:
- Access - ask for a copy of the personal data we hold about you
- Rectification - have inaccurate or incomplete data corrected
- Erasure - ask us to delete your data where we no longer have a reason to keep it
- Restriction - ask us to stop processing your data while a dispute about it is resolved
- Portability - receive the data you gave us in a structured, machine-readable format
- Object - to processing based on legitimate interests, and to direct marketing at any time
- Withdraw consent - where we rely on consent, at any time, without affecting what was done before
- Not be subject to automated decisions that have legal or similarly significant effects on you without human review
To exercise any of these, email support@dadlink.co.uk. We will respond within one month. We may ask you to verify your identity first - we will not hand over someone's data to a person who simply claims to be them. There is no charge unless a request is manifestly unfounded or excessive.
If you are unhappy with how we have handled your data, you have the right to complain to the UK supervisory authority, the Information Commissioner's Office, at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve it with you first.
11Children
This website and our business products are aimed at adults and businesses. We do not knowingly collect personal data from anyone under 18 through this site. Our iOS apps carry age ratings set through the App Store, and any app aimed at or likely to be used by younger people follows Apple's guidelines and the ICO's Age Appropriate Design Code. If you believe a child has provided us with personal data, contact us and we will delete it.
12Changes to this policy
We update this policy when our practices change or the law does. The version number and date at the top of this page tell you what you are reading. For material changes affecting product users, we will notify account holders by email or an in-product notice before the change takes effect.
13Contact
Questions, requests and complaints about personal data all go to the same place:
DadLink Technologies Limited
Registered office: Handforth, Cheshire, United Kingdom
Company No. 16161444
support@dadlink.co.uk
We are not required to appoint a Data Protection Officer, but the founder is personally responsible for data protection at the studio and reads every request that comes in.