Ducamo. Get in touch

Privacy policy

This policy explains what personal information Ducamo holds, why we hold it, who helps us process it, and the control you have over it.

Who we are

Ducamo is an AI transformation practice based in London, United Kingdom. We are responsible for the personal information described in this policy, which makes us its controller under UK data protection law. For any question about this policy, or to use any of the rights below, email privacy@ducamo.com.

What we hold and why

Below is each kind of information we hold, what we use it for, the lawful basis we rely on, and how long we keep it. Where we rely on legitimate interests, we have weighed our interest against your rights and kept to what a person would reasonably expect.

Enquiries

Your name, work email, organisation and its size, and your message, when you contact us through the site or by email. We use them to reply and, if it leads somewhere, to discuss working together.

Lawful basis: Legitimate interests, and steps you ask us to take before an agreement.

How long we keep it: Up to 24 months after our last contact.

Meetings and correspondence

Emails, messages, and notes, transcripts or summaries of calls we have with you. We use them to keep an accurate record of what was discussed and to follow up.

Lawful basis: Legitimate interests.

How long we keep it: Up to 24 months after our last contact, or as client records if we work together.

Introductions

Your name, role, organisation and contact details, when someone who knows you introduces us. We use them to get in touch about whether we can help.

Lawful basis: Legitimate interests.

How long we keep it: Up to 24 months after our last contact.

Clients

Contact details of the people we work with, and the records of our work, agreements and invoices. We use them to deliver the work and run our business.

Lawful basis: Contract, and legal obligation for financial records.

How long we keep it: Up to 6 years after the work ends.

Private pages

The name you give and the comments and edits you leave on the password-protected pages we share with clients and partners. Some of these pages also record which parts were read and for how long, what was opened, the type of device and the time zone. We use this to work on the material together and to see what was useful.

Lawful basis: Legitimate interests.

How long we keep it: While the page is in use, and up to 24 months after.

Site statistics

Which page was visited, the site that sent the visit, any campaign tag on the link, the country, whether it was a phone or a computer, how far down the page the visit reached, and whether an enquiry was sent. We use this to understand how the site is used and to improve it.

Lawful basis: Legitimate interests.

How long we keep it: Up to 13 months.

Technical logs

Your IP address and browser details, which our hosting provider records when you load a page. They are used to run and secure the site.

Lawful basis: Legitimate interests.

How long we keep it: For the period our hosting provider keeps them.

We do not ask for special category information, such as details of your health, religion or ethnicity, and we ask you not to include it in a message. If you do, it is held with the rest of your enquiry under this policy, and we will delete it on request.

If your details came to us from someone who introduced us, you can ask us who that was.

Site statistics and cookies

Our site does not use advertising or tracking cookies. The site statistics described above store nothing on your device and are not used to identify you or to follow you between visits or across other sites. Each visit is counted on its own.

You can turn the statistics off for this browser at any time, and that choice is the only thing we remember on your device to keep it.

Our password-protected pages set a cookie when you sign in, so you are not asked for the password on every page. Pages where you can comment also keep your name and a random key in your browser, so you can edit or delete your own comments. Neither is used for anything else.

Who we share it with

We do not sell personal information, and we do not share it for anyone else’s marketing. We use service providers to host our site and private pages, receive enquiries, run our email, keep our records and take meeting notes, and we use AI tools to help us draft, summarise and organise our work. These providers process information on our behalf. We can tell you which providers we use on request.

Some of these providers are based outside the UK, including in the United States. Where information is transferred outside the UK, it is covered by safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or approved contract terms.

We do not use your information to train AI models, and we do not make decisions about you by automated means alone. We may share information if the law requires it.

Your rights

Under UK data protection law you can ask us for a copy of the information we hold about you, and ask us to correct it, delete it or restrict how we use it. You can object to our use of it, including for site statistics, and in some cases ask for it in a portable form. Email privacy@ducamo.com and we will respond within one month, as the law requires.

If you are unhappy with how we have handled your information, we would appreciate the chance to put it right first. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

We update this page when the way we handle personal information changes.

Ducamo, London

Back to the site