Privacy Policy

Introduction

At Dubit we are committed to ensuring that your privacy is protected. This privacy policy sets out how we use and protect any information that you give us when you use this website, subscribe to our newsletter, or provide your contact details to us in the process of understanding more about our services.

If we ever ask you to provide certain personally identifiable information such as an email address, then you can be assured that it will only be used in accordance with this privacy policy.

What Data Do We Collect About You?

You do not have to tell us who you are to read this website. We do not ask you to enter any personal details in order to browse it, and we do not try to work out who you are from the pages you read.

In common with most other websites, we use analytics to understand how the site is used. Google Analytics tells us which pages are read and how people move between them. Microsoft Clarity records how pages are interacted with — clicks, scrolling and the journey through the site — so that we can see where a page is confusing. Both set cookies or similar identifiers in your browser. Neither tells us your name or your email address, and we do not use either to build a profile of you or to advertise to you.

While you are on the site, your browser also remembers two things about how your visit began: the name of the website that sent you to us, and the first page of ours that you landed on. This is held in your own browser for the length of that visit and is cleared when you close the tab. It only reaches us if you go on to send us an enquiry, and what we then store is described in the next section.

If you choose to make an enquiry via email through this site, or direct through telephone or other means, then only the data you provide us will be stored, and we will use this information for our correspondence together. We may subsequently ask for further details such as your phone number or a colleague's contact details. In these circumstances we will make sure it is clear exactly why we are asking for the details and it will be used within accordance to this privacy policy.

If you choose to sign up for our newsletter, then the data entered will be stored for the time that you are subscribed.

The Contact Form

If you send us an enquiry using the form on our contact page, we store the following against that enquiry:

• your name and email address, and your company if you give one;
• your message, and the services you ticked;
• the IP address the enquiry was sent from, and the description your browser sends of itself (its user agent);
• the name of the website that sent you to us — for example chatgpt.com or google.com. We keep the name of the site only, never the full web address you arrived from, so we do not see what you searched for;
• the first page of ours that you landed on, together with any campaign tags on it (utm_source, utm_medium, utm_campaign, utm_content, utm_term, ref and src). Anything else in the web address is removed before the enquiry is saved.

We store this so that we can reply to you, keep a record of our correspondence, and understand which of our pages and which referring sites bring people to us. The IP address and user agent are kept so that we can investigate spam and abuse of the form. We do not use any of it to build a profile of you, we do not use it for marketing, and we never sell or lease it.

If the page that sent you to the form was one of our own, no referring site is recorded. We do not count ourselves as a source.

The form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than an automated script. Cloudflare processes your IP address and browser information to make that check.

If a submission does not go through — because a field was not filled in correctly, or because the anti-spam check failed — we keep only a record that an attempt was made: the time, which fields were at fault, and your browser's user agent. We do not keep your name, your email address, your message or your IP address for a submission that did not complete.

Google Analytics also receives events as you use the form: that it was opened, that a field was filled in, and that an enquiry was sent or failed. Those events carry the shape of what you did — how many services were ticked and which ones, how long your message was, how long the form took — together with the referring site name and landing page described above. They never carry your name, your email address or your message.

How Is Your Information Used?

We collect your data solely to provide the service or information you have requested, such as to send you the newsletter, or to respond to your enquiry. We don't use your data for any kind of profiling or subsequent marketing. We will never sell or lease this information. We do not share it with any other company or organisation, other than the service providers listed below who process it on our behalf and only on our instructions.

Who Has Access to Your Information?

Any data collected about you by Dubit will be kept under Dubit's control. We will not share, sell or lease your data to any company or organisation outside Dubit unless should be required to do so by law (e.g. a court order, or legal request from a law enforcement agency).

We do rely on a small number of service providers to run the website and to handle enquiries. They process data on our behalf and only on our instructions:

• Vercel, which hosts this website;
• Supabase, where enquiries are stored;
• Resend, which sends the enquiry emails;
• Cloudflare, whose Turnstile service checks that a form submission comes from a person;
• Google (Analytics) and Microsoft (Clarity), which provide the website analytics described above.

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

How Long Do We Keep Your Information?

If you are subscribed to the Newsletter we will keep these contact details until you unsubscribe, whereby we will immediately remove your data from our systems.

If you have emailed us with an enquiry, we will hold onto this data until we have satisfactorily responded to your query or while you are in discussions with us about working together.

Once we begin working together, we will hold your data for as long as you are a client, and for six months after, in case of follow up work. Once the dialogue or client relationship has come to a conclusion, we will remove your data from our systems after six months.

An enquiry sent through our contact form is kept on the same basis — for as long as we are in conversation with you, and for six months after that conversation or client relationship ends. The record of an attempted submission that did not complete holds no personal details at all, so there is nothing in it to remove.

If we ever intend to keep your data for any longer than this we will make this clear to you.

What Are Your Rights?

You may choose to restrict the use of your personal information by emailing us at dpo@dubitlimited.com, or unsubscribing from the newsletter subscription list by using the link at the bottom of the weekly email newsletter.

We will not sell, distribute or lease your personal information to third parties unless you have instructed us to or we are required to do so by law. You may request details of personal information which we hold about you under the Data Protection Act 2018 and the General Data Protection Regulations 2018.

If you would like a copy of the information held on you please email us at dpo@dubitlimited.com. If you believe that any information we are holding on you is incorrect or incomplete, please email us as soon as possible at the above address. We will promptly correct any information found to be incorrect.

Contact Us

Changes to This Privacy Policy

The first version of this Privacy Policy was released on 1 June 2018. It was updated on 8 September 2026 to describe the analytics we use and exactly what our contact form records, including where a visit came from.