Last Updated: September 2026
I hate corporate jargon and creepy tracking as much as you do. This policy explains exactly what information Dynumo Ventures Limited collects, why I need it, and how I keep it safe.
If you have any questions, you can always email me directly at adam@dynumo.co.uk.
1. Who is collecting your data?
For the purposes of UK data protection law (UK GDPR), the Data Controller is:
Dynumo Ventures Limited
Company Number: NI615145 (Northern Ireland)
Email: adam@dynumo.co.uk
2. What data I collect and why
I only collect the information I actually need to do my job.
- Contact & Identity Data: Your name, email address, phone number, and company details. I use this to reply to your enquiries, send proposals, and communicate during projects.
- Financial Data: Billing addresses and payment details. I use this to process invoices and keep my accountant and HMRC happy. (Note: I do not store your credit card numbers; those are handled securely by my payment processors like Stripe).
- Technical Data: When you visit this website, standard server logs may capture your IP address and browser type. For analytics I use Plausible, which sets no cookies, stores nothing on your device, and does not collect personal data or track you across sites. I use all of this purely to make sure the site is working properly and securely, and to see which pages are useful.
3. My Legal Basis for processing your data
Under GDPR, I must have a valid legal reason to use your data. I rely on:
- Contract: I need your data to fulfil a contract with you (e.g., building your website or AI tool).
- Legal Obligation: I have to keep billing records for tax purposes.
- Legitimate Interest: I use server logs and privacy-friendly analytics to keep the site secure, understand how it is performing, and market my business responsibly.
4. Who do I share your data with?
I will never sell your data. I only share it with trusted third parties that I use to run my business:
- Infrastructure: Web hosts, email providers, and cloud storage (to securely store project files).
- Analytics: Plausible Analytics, which is EU-based and processes data without cookies or personal identifiers.
- Finance: Accounting software (like Xero) and payment gateways (like Stripe).
- AI & Automation APIs: If I am building custom AI agents or workflow automations for you, relevant data may be processed through third-party APIs (e.g., OpenAI, Anthropic, Make.com). Crucially: I only use enterprise/API tiers of these services where your data is not used to train their public AI models.
- Support & Delivery Partners: Redback Creations, a Northern Ireland agency, acts as a subcontractor for some website, development and support work, including providing cover when I am unavailable. This means they may need access to your website, hosting or project data in order to help. They are bound by confidentiality and data protection obligations, and I remain responsible to you for how your data is handled.
- Business changes: If Dynumo is restructured, sold, or its business transferred to another legal entity, your data may transfer with it. If that happens I will tell you, and your data will remain protected by this policy, or by one at least as protective, until you are told otherwise.
5. International transfers
Some of the services above are based outside the UK, mainly in the United States. Where your data is transferred outside the UK, I make sure it is protected by an appropriate safeguard, such as a UK adequacy decision or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
6. When Dynumo acts as a “Data Processor”
If I build a custom app, database, or AI pipeline for your business, and your customers’ data flows through that system, you are the Data Controller for that information. Dynumo acts strictly as a Data Processor. I will only process that data according to your written instructions and for the sole purpose of keeping your software running.
Where I use a subcontractor such as Redback Creations to help deliver or support that system, they act as a sub-processor under the same obligations. I will tell you before adding a new sub-processor to any work involving your customers’ data.
7. How long do I keep your data?
- Project Data & Communications: Kept for as long as you remain a client, and for a reasonable period afterward to help with future updates or technical support.
- Financial Records: By law, I must keep invoices and tax records for 7 years.
8. Your Rights
Under UK GDPR, you have the right to:
- Ask for a copy of the personal data I hold about you.
- Ask me to correct any mistakes in your data.
- Ask me to delete your data (except where I am legally required to keep it, like tax records).
- Object to me processing your data.
If you want to exercise any of these rights, just email me at adam@dynumo.co.uk. I will respond within 30 days.
9. Complaints
If you feel I haven’t handled your data correctly, please talk to me first so I can fix it. However, you always have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).