Privacy Policy

Last updated: 24 July 2026  ·  Version 2.0

DORQ ("DORQ", "we", "us" or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you visit dorqweb.com (the "Site"), enquire about our services, or engage us to deliver work, and it tells you about your privacy rights and how the law protects you.

Please read this policy carefully. It is provided in a layered format so you can click through to the specific areas set out below. This policy is issued in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Scope of this policy

This policy applies to personal data we process about: visitors to our Site; prospective clients who contact us or request a proposal; clients and their staff during an engagement; suppliers and partners; and candidates who apply to work with us. It does not apply to personal data we process on behalf of our clients when acting as a "processor". In those cases our client is the controller and their privacy policy applies, and our handling is governed by the data-processing terms in our contract with them.

"Personal data" means any information relating to an identified or identifiable living individual. It does not include data where identity has been removed (anonymous data).

2. The personal data we collect

We collect, use, store and transfer different kinds of personal data, which we have grouped as follows:

• Identity data: first name, last name, job title, and the name of the company you represent.
• Contact data: email address, telephone number, business address and postal address.
• Project & enquiry data: the contents of your enquiry, the service you are interested in, your indicative budget, project requirements, briefs, feedback, approvals and any materials you share with us.
• Transaction data: details of proposals, contracts, invoices, and payments to and from you. (Card payments are handled by our payment providers; we do not store full card numbers.)
• Technical data: internet protocol (IP) address, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices you use to access the Site.
• Usage data: information about how you use our Site, such as pages visited and links clicked.
• Communications data: records and copies of your correspondence with us (email, phone, messaging) and your marketing and communication preferences.

We do not intentionally collect any special categories of personal data (such as data about health, race, religion, or sexual orientation) and ask that you do not send such data to us. We do not knowingly collect data about criminal convictions or offences.

Where we need to collect personal data by law, or under the terms of a contract, and you do not provide it, we may be unable to respond to your enquiry or perform the contract we have (or are trying to enter into) with you.

3. How we collect your personal data

• Directly from you: when you complete the contact form on our Site, email or call us, request a proposal, enter into a contract, or otherwise correspond with us.
• Automatically: as you interact with our Site, we may automatically collect technical and usage data through cookies and similar technologies. See our Cookie Policy.
• From third parties: we may receive contact and technical data from providers such as our website host and infrastructure provider (Cloudflare), our contact-form processor (Web3Forms), and publicly available sources such as LinkedIn and Companies House.

4. How and why we use your personal data

We will only use your personal data when the law allows us to. Most commonly we rely on one or more of the following lawful bases: consent, performance of a contract, legitimate interests, and legal obligation. The table below sets out the purposes for which we process your data and the lawful bases we rely on.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another related and compatible purpose. If we need to use your data for an unrelated purpose, we will notify you and explain the lawful basis.

5. Marketing communications

We may send you updates about our services, insights and offers where you have asked us to, or where we have an existing business relationship and are permitted to do so under the Privacy and Electronic Communications Regulations (PECR). You can ask us to stop sending marketing at any time by clicking "unsubscribe" in any marketing email, or by emailing info@dorqweb.com. Opting out of marketing will not affect service-related communications we send in connection with a contract.

6. Cookies and similar technologies

Our Site uses a limited set of cookies and similar technologies. You can set your browser to refuse some or all cookies, or to alert you when sites set or access cookies. For full details of what we use and how to control them, please see our Cookie Policy.

7. Who we share your personal data with

We never sell your personal data. We may share it with the following categories of recipients, who are required to respect the security of your data and to treat it in accordance with the law:

• Service providers (processors) acting on our behalf, including website hosting and content-delivery (Cloudflare), our contact-form and email-relay provider (Web3Forms), email and productivity providers (Microsoft), and, where used, analytics, cloud storage, project-management, accounting and payment providers.
• Professional advisers: including lawyers, accountants, insurers and auditors where necessary.
• Regulators, authorities and other bodies: where we are required to disclose data by law, court order, or to protect our rights, property or safety.
• Business transfers: if we sell, transfer or merge parts of our business, in which case the receiving party will be required to use your data consistently with this policy.

We require all third-party processors to take appropriate security measures and to process personal data only on our documented instructions and for specified purposes.

8. International transfers

Some of our service providers are based outside the United Kingdom, so processing your data may involve a transfer of data outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection by making sure at least one appropriate safeguard is in place, such as transferring to a country deemed to provide an adequate level of protection, or using contracts approved for use in the UK (the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses). Please contact us if you would like further information on the specific mechanism used.

9. How long we keep your personal data

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting or reporting requirements. The periods below are indicative:

When data is no longer required, we will securely delete or anonymise it.

10. How we protect your personal data

We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. These include encryption in transit (HTTPS/TLS), access controls on a need-to-know basis, use of reputable providers, and a strict content-security policy on our Site. We also have procedures to deal with any suspected personal-data breach and will notify you and the ICO of a breach where we are legally required to do so.

11. Your legal rights

Under UK data protection law, you have the following rights in relation to your personal data, free of charge in most cases:

• Request access to your personal data (a "data subject access request").
• Request correction of incomplete or inaccurate data we hold about you.
• Request erasure of your personal data where there is no good reason for us to continue processing it.
• Object to processing where we rely on legitimate interests, and to object to direct marketing at any time.
• Request restriction of processing in certain circumstances.
• Request transfer (portability) of your personal data to you or a third party.
• Withdraw consent at any time where we rely on consent (this does not affect the lawfulness of earlier processing).

To exercise any of these rights, please email info@dorqweb.com. We may need to request specific information to confirm your identity. We aim to respond to all legitimate requests within one month; occasionally it may take longer if the request is complex, in which case we will keep you informed.

12. Automated decision-making and artificial intelligence

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Where we use AI tools to help deliver our services or operate our business, they are used to assist our team, remain subject to human oversight, and are not used to profile you in ways that materially affect you without your knowledge.

13. Third-party links

Our Site may include links to third-party websites, plug-ins and applications. Clicking those links may allow third parties to collect or share data about you. We do not control these third-party sites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every site you visit.

14. Children's privacy

Our Site and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

15. Changes to this policy & how to contact us

We may update this policy from time to time. The current version will always be published on this page with the "Last updated" date above; material changes will be highlighted where appropriate. Please check back periodically.

If you have any questions, requests or concerns about this policy or our use of your personal data, contact us at info@dorqweb.com.

You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (ico.org.uk). We would, however, appreciate the chance to address your concerns before you approach the ICO, so please do contact us first.