This Privacy Policy explains how Dika Design Ltd ("we", "us", "our") collects, uses and protects personal information when you visit dika.design (in any of its language versions), contact us, request a quote or join the Dika Studio waitlist. We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where it applies to you, the EU General Data Protection Regulation.
1. Who we are
Dika Design Ltd is the controller of the personal data described in this policy.
- Registered in England and Wales, company number 16251779
- Registered address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
- Email for privacy questions: [email protected]
2. What we collect
Information you give us
When you use the contact, quote or waitlist forms, we collect what you enter: your name and email address, and, depending on the form, your company, phone number, website, the service you are interested in, your budget range, how you would use Dika Studio, the tools you use today, and your message. We also record which form you used and the language of the page.
If you email or call us, we keep the contents of that correspondence.
Information collected automatically
- Country and a protected form of your IP address. When you send a form, our hosting provider tells us the country the request came from. We do not store your IP address itself; we store a one-way, salted hash of it, which we use only to limit each sender to three forms a day.
- Security checks. Our forms use Cloudflare Turnstile to tell people from automated bots. Turnstile processes technical information about your browser and device for that check.
- Usage analytics, only with your consent. If you allow analytics in the cookie banner, Google Analytics and Microsoft Clarity collect information such as the pages you view, how you scroll and click, your device and browser type, approximate location and referring website. Clarity masks text typed into forms.
- Preferences. Your language, theme and cookie choices are stored in your own browser (see our Cookie Policy).
We do not ask for, and ask you not to send us, special category data (for example health information) through the forms.
3. How we use your information and why
| Purpose | Information | Lawful basis |
|---|---|---|
| Replying to your question or quote request, and preparing a proposal | Form details, correspondence | Steps you ask us to take before a contract; our legitimate interest in answering enquiries |
| Managing the Dika Studio waitlist and sending your early-access invitation | Waitlist form details | Your consent, given when you join the waitlist |
| Protecting the forms from spam and abuse (security check, three forms a day) | Turnstile check, hashed IP address, email address | Our legitimate interest in keeping the website secure |
| Understanding how the website is used and improving it | Analytics data | Your consent, given in the cookie banner |
| Running and securing the website | Technical request data handled by our hosting provider | Our legitimate interest in operating a secure website |
| Meeting legal obligations and handling legal claims | Relevant records | Legal obligation; legitimate interest |
We do not use your information for automated decision-making that has legal or similarly significant effects on you, and we do not sell it.
4. Who we share it with
We share personal data only with service providers that help us run the website and respond to you, under contracts that require them to protect it:
- Cloudflare, Inc.: website hosting, content delivery, security, Turnstile and the database that stores form submissions.
- Telegram: new form submissions are sent as a short notification to our team's private Telegram chat so we can reply quickly.
- Google Ireland Ltd (Google Analytics) and Microsoft Ireland Operations Ltd (Microsoft Clarity): analytics, only if you consent.
- Our email and office software providers, when we reply to you by email.
We may also disclose information if the law requires it, to protect our rights, or as part of a sale or reorganisation of our business, in which case the new owner would be bound by this policy.
5. International transfers
Some of our providers process data outside the United Kingdom, for example in the United States or the European Economic Area. Where that happens, we rely on UK adequacy regulations or on safeguards approved under UK law, such as the International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework where the provider is certified.
6. How long we keep it
- Enquiries and quote requests: up to 24 months after our last contact with you, unless we go on to work together, in which case project records are kept for as long as the law and our contracts require.
- Waitlist entries: until you receive access to Dika Studio or ask to leave the waitlist, and no longer than 24 months.
- Hashed IP addresses are stored with the form submission and deleted with it.
- Analytics data: Google Analytics keeps event data for 14 months; Microsoft Clarity keeps recordings for up to 30 days and aggregated reports for up to 13 months.
7. How we protect it
Form submissions are sent over encrypted connections and stored in a database that only authorised team members can access. We limit what we collect, store IP addresses only as salted hashes, and review access regularly. No method of transmission or storage is completely secure, but we work to protect your information and will act promptly if a security incident occurs.
8. Your rights
You have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct inaccurate data or complete incomplete data;
- ask us to delete your data, or to restrict how we use it;
- object to processing based on our legitimate interests;
- withdraw your consent at any time, for example to leave the waitlist or switch off analytics with the Cookie settings link at the bottom of every page (this does not affect processing that took place before);
- receive data you gave us in a portable format.
To use any of these rights, email [email protected]. We reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk) or, if you live in the EU, to your local data protection authority. We would appreciate the chance to address your concern first.
9. Children
This website and our services are intended for businesses and are not directed at children under 16. We do not knowingly collect personal data from children.
10. Other websites
Our website links to other websites, including Dika Studio, Dika Ops and our social media pages. Those websites have their own privacy policies, which we do not control.
11. Changes to this policy
We update this policy when the way we handle personal data changes. The date at the top of this page shows when it was last updated. If we make significant changes, we will make that clear on the website.