Privacy Policy — Dhaataa

This policy covers Dhaataa Ltd. as a company — our website at dhaataa.com, and the enquiries and waitlist requests you send us. It is deliberately short, because this website collects very little: no cookies, no analytics, and no tracking of any kind.

Who we are

The data controller

Dhaataa Ltd. is a company registered in the United Kingdom. For the personal data described in this policy, Dhaataa Ltd. is the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

You can reach us about anything in this policy at hello@dhaataa.com.

Scope

What this policy covers

This policy applies to this website and to business contact with us. Our products have their own policies, because each one handles data differently:

Righto privacy policy — our AI governance tool for organisation-managed Macs.
Sydney Transit privacy policy — our iOS transport app.

Iru ADE Manager runs entirely on your own Mac and communicates only with your own device management tenant. It has no Dhaataa backend and sends us no data.

Overview

What we collect

What you send us in a form Our contact form collects your name, email address, the service you're interested in and your message. Our Righto waitlist form collects your email address, company name and the approximate number of Macs you manage.

What you send us by email If you email us, we hold that correspondence and your email address so we can reply and keep a record of the conversation.

No cookies, no analytics, no tracking This website sets no cookies, runs no analytics, embeds no advertising or social media trackers, and stores nothing in your browser. There is no tracking to opt out of.

Why

Our lawful bases

Under the UK GDPR we rely on the following lawful bases:

Consent — when you join the Righto waitlist, so we can tell you about Righto. You can withdraw it at any time by emailing us.
Legitimate interests — when you make a business enquiry, so we can respond to you and provide the service you asked about.
Contract — where we are working with you as a client, to deliver and administer that work.

Retention

How long we keep it

We keep enquiry and waitlist details until you ask us to remove them. Email us at hello@dhaataa.com and we will delete your details and confirm when it's done.

Where we are required to retain records for tax, accounting or legal reasons — for example invoices for client work — we keep those for as long as the law requires.

Third parties

Who else is involved

We keep this list short on purpose. These are the only third parties involved in running this website:

GitHub Pages — hosting

This website is hosted on GitHub Pages. As part of serving pages to you, GitHub processes technical request information, which can include your IP address. See the GitHub privacy statement.

Google Fonts — typefaces

Our pages load the DM Sans and DM Serif Display typefaces from Google's font servers. When that request is made, Google receives your IP address. We do not use Google Fonts to identify or track you. See the Google privacy policy.

Google Forms — form submissions

Our contact and waitlist forms submit to Google Forms, where the responses are stored in our Google account. Anything you type into those forms is processed by Google on our behalf. See the Google privacy policy.

We do not sell your personal data, share it for advertising, or pass it to anyone else for their own purposes.

Transfers

International transfers

The providers above are US-headquartered and may process data outside the United Kingdom. Where personal data is transferred out of the UK, it is protected by the safeguards those providers put in place for international transfers, such as the UK extension to the EU–US Data Privacy Framework or standard contractual clauses.

Your rights

What you can ask us to do

Under the UK GDPR you have the right to:

ask for a copy of the personal data we hold about you;
have inaccurate data corrected;
have your data erased;
restrict or object to how we use it;
receive your data in a portable form;
withdraw consent at any time, where consent is the basis we rely on.

Email hello@dhaataa.com to exercise any of these. We will respond within one month.

If you think we have handled your personal data poorly, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put it right first.

Security

How we protect it

We keep the amount of personal data we hold deliberately small, limit access to it to the people who need it, and rely on the security controls of the established providers listed above. No system is perfectly secure, and we won't claim otherwise — but there is very little here to lose.

Children

Children's privacy

This website is aimed at businesses and is not directed at children. We do not knowingly collect personal data from children.

Updates

Changes to this policy

If we make material changes we will update the effective date at the top of this page. Where the change affects how we use data you have already given us, we will contact you.

Contact

Get in touch

Questions about this privacy policy, or a request about your data?

✉️ hello@dhaataa.com