Last updated: 09/06/2023
Thank you for trusting Dualo with your customer insights and your personal information. Holding onto your private information is a serious responsibility. As your data processor we want you to know how we're handling it.
Dualo, we, and us refer to Dualo, a trade name of Dualo Limited. The Service refers to applications, software, products, and services provided by Dualo.
The Platform refers to Dualo’s website located at dualo.io, and all Content, Services, and products provided by Dualo at or through the Platform and its subdomains.
The User, You, and Your refer to the individual person, company, or organisation that has visited or is using the Platform or Service. Owner and Account Owner refer to the individual person (or its legal successor) within a company or organisation that entered into the Agreement with us to provide the Service.
Content refers to content featured or displayed through the Platform, including without limitation text, data, articles, images, photographs, graphics, software, applications, designs, features, and other materials that are available on the Platform or otherwise available through the Service. “Content” also includes Services. “User-Generated Content” is Content, written or otherwise, created or uploaded by our Users. “Your Content” is Content that you create or own.
Your principal rights under data protection law are:
1. the right to be informed;
2. the right to access;
3. the right to rectification;
4. the right to erasure;
5. the right to restrict processing;
6. the right to object processing;
7. the right to data portability; and
8. the right to not be subject to automated decision making
You can exercise any of these rights by emailing firstname.lastname@example.org
You have the right to opt-out of marketing communications we send you at any time.
Similarly, if we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws and aim to respond to all data subject access requests within one calendar month.
You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. We would, however, appreciate the chance to deal with your concerns before you approach the authority so please contact us in the first instance.
We collect anonymous data from visitors of dualo.io to monitor traffic and fix bugs. For example, we collect information like web requests, the data sent in response to such requests, the IP address, the browser type, the browser language, and a timestamp for the request.
For the Service, we ask you to register an account, log in and provide certain information (such as your name and email address) in order to be able to store your insights as well as periodically bill you for use of the Service.
In order to take advantage of certain features of the Service, you may also choose to provide us with other personal information (such as your job title and a profile picture) but your decision to utilise these features and provide such data will always be voluntary.
Contact information (such as your name and email address) may be collected for marketing purposes as part of any offer or campaign we promote on our website e.g. requesting a demo of Dualo, completing an application to Dualo Academy, or subscribing to our online content. Engaging with these promotions and providing us with your contact information and consent as a result of this will always be voluntary.
We only use your personal information to provide you with the Service and to communicate with you about the Service or dualo.io. This includes both automated and manual processing of data.
With respect to any data you may choose to enter or upload to Dualo, we take your privacy and confidentiality of this data seriously. Your data (in the Service) is specifically not shared between accounts or with the public by default. We employ industry standard techniques to protect against unauthorised access of data that we store, including personal information. All backups of your data are securely encrypted.
We do not share personal information you have provided to us without your consent, unless there is a legal ground to do so (as outlined in the GDPR legal grounds for processing).
Dualo may contact you by email. For example, Dualo may send you promotional emails relating to Dualo or communicate with you about your use of the Dualo Platform and Service. We will only send you these emails if you have expressed interest in them. You may decide to opt out of receiving emails at any time and can request to be unsubscribed by emailing our team. Please note that for some emails (for example billing emails), there’s no option to opt-out.
We don’t share your personal information with third parties except as listed below.
Google Cloud Platform: hosting of Dualo servers, databases including all customer data. Some data, like passwords, are always encrypted by industry standard measures. Google Cloud Platform is also used for storing encrypted archives of backup data and profile images.
Webflow: used to capture the contact details of anyone who requests a demo, completes an application to Dualo Academy, or subscribes to our online content.
Google Workspace: used for email correspondence via the Gmail application.
Postmark: used for automated application emails.
If Dualo Limited is acquired or merged with another company, or Dualo Limited sells the Dualo Platform and Service to another company, or if Dualo goes out of business or enters bankruptcy, user information may be transferred to a third party. You acknowledge that such transfers may occur, and that any acquirer of Dualo Limited or its assets may continue to use your personal information as set forth in this policy.
In order to accommodate customers who need older data restored, we keep backups for 30 days and cannot delete personal data from them as these are stored off-site, read-only and heavily encrypted and compressed. If we do have access or restore data to our production systems or for purposes of debugging, any deletions of personal data will be applied retroactively or the personal data will be anonymised.
We will store your content (like insights) and your personal data (like name, email address, job title, profile picture) for as long as we provide the Service to your organisation, unless you delete it or request its deletion (barring legal requirements).
We keep copies of all purchasing records for tax and auditing purposes. We need to store this data for 6 years to comply with UK tax law.
Some 3rd party services collect data independently from us and manage the storage, processing, retention, and deletion of this data as part of their service, as below:
Google Sign-In: allows you to register and sign in to Dualo using Google to authenticate your identity.
Google Workspace: allows you to access your Google Drive files via Dualo, using Google to authenticate your identity.
We do not store any copies of this data, and data subject requests for this data must be submitted to the 3rd party service, since we do not control the data.
You can email email@example.com at any time to request the withdrawal of your consent.
Address: 3rd Floor 86-90 Paul Street, London, England, EC2A 4NE