01Scope

This privacy notice applies to anyone who visits dmc01.com, contacts DMC01 Ltd, or uses the consulting services provided. It covers what we collect, why we collect it, who we share it with, and what rights you have over it.

02What data we collect

We collect three categories of personal data:

• Contact data — name, company, role, email, phone number, and the content of any message you send us via forms or email.
• Usage data — pages viewed, clicks, device information, and IP address, captured through analytics and hosting logs.
• Client service data — information needed to deliver consulting services, as defined in the Statement of Work and contract documents that govern each engagement.

03How we collect it

Data reaches us through:

• Forms on the website (Webflow forms).
• Direct emails or calls.
• Analytics and server logs (e.g. Google Analytics).
• Third-party embeds you choose to interact with — Calendly, Vimeo, LinkedIn posts.

04Why we process it

We process personal data for the following purposes, on the lawful bases below:

• Responding to inquiries and providing proposals — basis: contract or legitimate interests.
• Operating and securing the site, including fraud prevention and diagnostics — basis: legitimate interests.
• Improving site performance — basis: consent (for non-essential analytics cookies).
• Delivering client work — basis: contract.

05Sharing & processors

We use the following data processors to operate the business:

• Webflow, Inc. — website hosting and form submissions.
• Google Analytics — site analytics (only if non-essential cookies are accepted).
• Google Workspace — email and CRM.
• Calendly — calendar and booking.

We do not sell personal data.

06Your rights

Under UK GDPR, you have the right to access, correct, delete, restrict processing of, or port your personal data, and to object to processing on legitimate-interests grounds. Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email privacy@dmc01.com. We will respond within one calendar month.

07Security

We implement technical and organisational measures appropriate to the risk, including HTTPS, access controls, and least-privilege administration. No system is perfectly secure, but we work to keep the chances and consequences of a breach as low as practicable.

08Updates to this notice

This policy may be updated from time to time. The current version always lives at this URL, with a refreshed "Last updated" date at the top.