1. Introduction

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or use our services. We are committed to ensuring that your privacy is protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website, you agree to the collection and use of information in accordance with this policy.

2. Who We Are

We are a UK-based IT consultancy. For the purposes of data protection law, we are the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: hello@dunn-it.com

3. What Personal Data We Collect

3.1 Data You Provide Directly

When you download our free PDF resources via our website, we collect your email address through our third-party email marketing platform, MailerLite. This is the only personal data we ask you to provide voluntarily.

3.2 Data Collected Automatically

We use Google Analytics to collect anonymised, aggregated information about how visitors use our website. This may include:

Pages visited and time spent on each page
Approximate geographic location (country/region level only)
Browser type and device information
Referring website or source

This data does not identify you personally and is used solely to help us understand how our website is being used so we can improve it.

4. How We Use Your Personal Data

We use the data we collect for the following purposes:

Email address (collected via MailerLite): To send you the PDF resource you requested and, with your consent, to send you occasional relevant updates, news, or information about our services.
Website analytics data (Google Analytics): To analyse website traffic and usage patterns to improve the content and experience on our website.

We will not use your data for any purpose other than those stated above without first obtaining your consent.

5. Legal Basis for Processing

We process your personal data under the following lawful bases as defined by the UK GDPR:

Consent: When you submit your email address to download a PDF, you are giving us your consent to contact you. You may withdraw this consent at any time.
Legitimate Interests: We use Google Analytics data to understand and improve our website, which is in our legitimate interest as a business, provided it does not override your rights and freedoms.

6. Third-Party Services

6.1 MailerLite

We use MailerLite to manage our email list and deliver PDF downloads. When you submit your email address on our website, that data is stored and processed by MailerLite. MailerLite acts as a data processor on our behalf and is required to handle your data in accordance with UK GDPR standards.

For more information, please review MailerLite’s Privacy Policy at: https://www.mailerlite.com/legal/privacy-policy

6.2 Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to collect anonymised statistical data about website usage. Google may transfer this data to servers in the United States or other countries.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at: https://tools.google.com/dlpage/gaoptout

For more information on how Google uses your data, please visit: https://policies.google.com/privacy

7. Cookies

Our website uses the following types of cookies:

Analytics cookies (Google Analytics): These help us understand how visitors interact with our website by collecting and reporting information anonymously.

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of some parts of our website. Most browsers allow you to refuse cookies or delete existing ones — please refer to your browser’s help documentation for guidance.

8. Data Retention

We retain your email address in MailerLite for as long as you remain subscribed to our mailing list. If you unsubscribe or request deletion, your data will be removed promptly from our active lists. MailerLite may retain suppressed records to prevent future accidental contact.

Google Analytics data is retained for 26 months by default, after which it is automatically deleted.

9. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete data.
Right to erasure: You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
Right to data portability: You can request that we transfer your data to you or another organisation in a machine-readable format.
Right to object: You can object to us processing your data based on legitimate interests or for direct marketing purposes.
Right to withdraw consent: Where processing is based on your consent, you can withdraw that consent at any time by clicking the unsubscribe link in any email we send, or by contacting us directly.

To exercise any of these rights, please contact us at: hello@dunn-it.com. We will respond within one month of receiving your request.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Access to your data is limited to authorised personnel only. Our third-party processors (MailerLite and Google) maintain their own security standards and certifications.

11. International Data Transfers

Some of our third-party service providers, including Google, may process data outside the United Kingdom. In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent mechanisms approved under UK data protection law, to protect your data.

12. Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK’s data protection supervisory authority:

Information Commissioner’s Office (ICO)

Website: https://ico.org.uk

Helpline: 0303 123 1113

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.