Privacy Policy

02Information we collect

Information you give us

• Contact form: your name, email address, company, website, the topic of your message, the services you're interested in, budget range, and your message.
• Booking requests: your name, email address, company, phone number (if provided), preferred day, time of day and time zone, meeting format, topics, and any notes.
• Support requests: your name, email address, company or project, category, priority, subject, related link, and the details you share.
• Emails and calls: anything you send us directly or share during a consultation.

Information collected automatically

When you visit the Site, our hosting provider processes technical information such as your IP address, browser type, device information, and the pages requested. We use it to deliver the Site, keep it secure, and diagnose problems. We do not use advertising or analytics cookies, and we do not build profiles of visitors.

Information from third parties

If you book through Calendly, Calendly shares the booking details you enter with us.

03How we use your information

• To respond to your inquiries and send you the information you ask for.
• To schedule and hold consultations and meetings.
• To provide, manage, and support the services we deliver to clients.
• To send transactional messages, such as confirmations of your requests.
• To protect the Site and our forms against spam, fraud, and abuse.
• To comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use it for automated decision-making that has legal or similarly significant effects on you. We only send marketing emails if you have asked to receive them, and you can opt out at any time.

04Legal bases (EEA and UK)

Where data protection laws such as the GDPR or UK GDPR apply, we rely on these legal bases:

• Pre-contract steps and contract performance: when you ask about our services, request a proposal, book a consultation, or are a client.
• Legitimate interests: to respond to your messages, run and secure the Site, and improve our services, balanced against your rights.
• Consent: where we ask for it, for example before loading an optional third-party tool. You can withdraw consent at any time.
• Legal obligation: where the law requires us to keep or disclose information.

05How we share information

We share personal information only with service providers that help us run our business and are required to protect it:

• Hosting: our website hosting provider (Vercel), which serves the Site and processes form submissions.
• Email delivery: our transactional email provider (Resend), which delivers form notifications and confirmations.
• Business tools: the email, calendar, and productivity tools our team uses to reply to you and manage projects.
• Scheduling: Calendly, only if you choose to book through it.

We may also disclose information to professional advisers, when required by law or legal process, to protect the rights and safety of DCAD or others, or as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply.

06International transfers

Our service providers may process information outside the country where you live, including in the United States. Where required, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect information transferred internationally.

07How long we keep information

We keep inquiry, booking, and support records for as long as we need them to respond to you and manage our relationship, and generally no longer than 24 months after our last interaction. Client records may be kept longer where needed to deliver services or meet legal, accounting, or reporting requirements. When information is no longer needed, we delete or anonymize it.

08Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct information that is inaccurate or incomplete;
• have your information deleted;
• object to, or ask us to restrict, certain processing;
• receive your information in a portable format;
• withdraw consent where we rely on it.

Residents of California and other U.S. states with privacy laws may also have the right to know what personal information we collect and to request its deletion or correction. We do not sell personal information or share it for cross-context behavioral advertising.

To make a request, email info@dcad.io. We may need to verify your identity, and we will respond within the time required by applicable law. You also have the right to complain to your local data protection authority.

09Security

We use reasonable technical and organizational measures to protect personal information, including encrypted connections (HTTPS) and access controls. No method of transmission or storage is completely secure, so please don't send highly sensitive information, such as passwords or payment details, through our forms.

10Children

The Site and our services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

11Third-party websites

The Site may link to websites and services we don't control, such as social networks or Calendly. Their own privacy policies apply when you use them.

12Changes to this policy

We may update this policy from time to time. We'll post the new version on this page and update the “Last updated” date. If changes are significant, we'll make that clear on the Site.

13Contact us

For any question about this policy or how we handle your information, email info@dcad.io. For general inquiries, write to info@dcad.io, and for client support, support@dcad.io.