Privacy Policy for Dorsal Hub LTD

Effective Date: 2025-12-10
Last Updated: 2025-12-10

1. Introduction

Dorsal Hub LTD ("DorsalHub," "we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

For the purpose of the UK General Data Protection Regulation (UK GDPR), the data controller is Dorsal Hub LTD.

2. Information We Collect

  • A. Information You Provide to Us:
    • Account Information: When you register for an account, we collect your email address and password (stored as a secure hash).
    • User Content: We collect the file metadata, annotations, and tags that you choose to index to the Service.
    • Communications: If you contact us directly (e.g., via our contact form), we may receive additional information about you such as your name, the contents of your message, and any other information you may choose to provide.
  • B. Information We Collect Automatically:
    • Log and Usage Data: Like most websites, we collect information that web browsers and servers typically make available, such as your IP address, browser type, operating system, and the date and time of each request.
    • Cookies and Tracking Technologies: We use cookies to operate and administer our Service. See Section 5 for more details.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, and maintain our Service.
  • To process and manage your account, subscriptions, and payments.
  • To respond to your comments, questions, and requests.
  • To monitor and analyze usage and trends to improve the Service.
  • To prevent fraudulent transactions and other illegal activities and to protect the rights and property of DorsalHub and others.

4. Lawful Basis for Processing

Under UK GDPR, we process your personal data on the following lawful bases:

  • Performance of a Contract: We process your account information and Content to fulfill our contract with you to provide the Service.
  • Legitimate Interest: We process usage data and security logs for our legitimate interest in securing and improving our Service.
  • Consent: Where required, we will ask for your consent to process your information (e.g., for sending marketing communications or using non-essential cookies).

5. Cookies and Tracking Technologies

A cookie is a small piece of data stored on your device.

  • Strictly Necessary Cookies: We use these cookies for essential functions like keeping you logged in and securing our forms. These cannot be disabled.
  • Analytics and Marketing Cookies: We may in the future use cookies from third-party partners like Google for analytics and to display advertisements to non-logged-in users. These non-essential cookies will only be used if you provide your explicit consent through a cookie consent banner. You can withdraw this consent at any time.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share information with third-party vendors and service providers that perform services for us, such as payment processing (e.g., Stripe) and email delivery (e.g., Amazon SES), but only as necessary for them to provide those services.

7. Data Retention & Deletion

We retain your personal data for as long as your account is active or as needed to provide you with the Service. Upon account deletion:

  • Private Data: All records and metadata marked "Private" are permanently deleted.
  • Public Contributions: We remove all of your contributions from the Public Index. This means any tags, filenames, or annotations you submitted are removed from our database.
  • Collaborative Records: If a file record relies on your data and data from others, we will remove your data and recalculate the record based only on the remaining users. If you were the record owner, ownership will be transferred to the next valid contributor.

8. International Data Transfers

All of your data is currently stored and processed on servers located within the United Kingdom and the European Economic Area (EEA). If we ever engage service providers that transfer your data outside of this region, we will update this policy and ensure that such transfers are protected by appropriate safeguards as required by UK GDPR.

9. Your Data Protection Rights

Under UK data protection law, you have certain rights regarding your personal data:

  • The right to access: You have the right to request copies of your personal data.
  • The right to rectification: You have the right to request that we correct any information you believe is inaccurate.
  • The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
  • The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you. The Dorsal library's export features are provided to help you exercise this right.

To exercise any of these rights, please contact us at contact@dorsalhub.com.

10. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18.

11. Marketing Communications

We may, in the future, ask for your consent to send you marketing communications. If you agree, you will always have the right to opt-out at a later date by using the "unsubscribe" link in the email or by changing your account settings.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and, if the changes are significant, by providing a more prominent notice (such as by email).

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at: contact@dorsalhub.com.