— Legal · Privacy

Privacy Policy.

Last Updated: July 1, 2026 · Effective across US · UK · Canada · Gulf

Your trust is the foundation of every engagement. This document explains — plainly and without ceremony — what we collect, why we collect it, and the disciplined controls that keep it protected.

01

Information We Collect

We collect only what is necessary to deliver, refine and safeguard our engagements. Nothing is collected speculatively.

Information you provide

  • — Name, business email, company and role.
  • — Brief context, brand assets and campaign materials.
  • — Billing details processed by our payment partner.
  • — Correspondence with our team.

Collected automatically

  • — Device, browser and language metadata.
  • — Approximate location derived from IP.
  • — Pages viewed and interaction analytics.
  • — Essential and preference cookies.
02

How We Use Your Information

Information is used for engagement delivery and legitimate operational purposes — never for resale.

  • Deliver & refine

    Operating engagements, sharpening strategy and improving craft.

  • Process payments

    Executing invoices and settlements via secure processors.

  • Communicate

    Responding to inquiries and sharing engagement updates.

  • Protect

    Detecting misuse, preventing fraud and meeting legal obligations.

03

Sharing Your Information

We do not sell your personal data. Ever.

We share only with vetted processors bound by contract to protect your information, and only to the extent needed to operate the engagement.

STRIPE
GOOGLE ANALYTICS
CLOUDFLARE
POSTMARK

Disclosures may also occur where required by law or to defend legal rights.

04

Data Security

We treat your information with institutional discipline: encrypted transit and storage, least-privilege access, principled retention and continuous review. No system is absolute — but our posture is deliberate, documented and audited.

05

Your Privacy Rights

Depending on your jurisdiction — including the United States (CCPA), United Kingdom & EU (UK-GDPR / GDPR), Canada (PIPEDA) and the Gulf (UAE PDPL, KSA PDPL) — you may exercise the following:

  • — Access the personal data we hold.
  • — Correct inaccurate information.
  • — Request deletion of your data.
  • — Object to or restrict certain processing.
  • — Withdraw consent at any time.
  • — Request portability of your data.

Requests are honoured within the timelines mandated by your local regulation.

06

Contact Us

Privacy Office

Questions, requests or concerns — write to us directly.

privacy@dunpol.com