Home / PRIVACY
PRIVACY
Your information. Your choices.
How DPM handles website enquiries and protects your information.
Your enquiry stays a business enquiry. We use it to respond and scope your project. We do not sell your information, add you to a marketing list, or send your brief to manufacturing partners automatically. Optional website measurement starts only if you allow it.
1. Who is responsible
DPM Technologies LTD is the controller of the personal information described in this notice. Company number: 17423011. Registered in England and Wales. Registered office: ALFLTD, St Martins Way, Bedford, MK42 0PQ, Great Britain.
Contact the DPM owner about privacy, your information or a complaint at enquiries@dpmtech.co.uk, +44 7810 525068, or the registered office. This notice covers this website and the initial enquiry discussion. Additional project-specific processing will be explained when the scope is agreed.
2. Information we collect
You provide your name, email address and project summary when you submit the form. You may also provide your organisation, quantities, target date, intended process and other project information. If you contact us by email or telephone, we receive the contact information and correspondence you choose to provide. We keep a reference, dates, status and relevant notes to manage the enquiry.
The hosting service receives technical information needed to deliver and protect the website, such as IP address, request time, requested page and browser information. Our abuse-prevention counters use a short-lived hash derived from the IP address, rather than storing the raw IP in those counters. Hosting security logs may contain the original technical information.
Please use a non-confidential summary. Do not submit passwords, payment-card details, health information or other sensitive personal information. If required, we can agree an NDA and suitable file-sharing arrangements before exchanging confidential technical information.
3. Why we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Answering a business enquiry and managing contact with an organisation’s representative | Legitimate interests: responding to requested contact, assessing suitable work and managing ordinary business relationships. |
| Taking steps you request towards a contract with you personally, or performing that contract | Contract, where the processing is necessary for those steps or that contract. |
| Keeping the website available, preventing abuse and protecting enquiry records | Legitimate interests: maintaining a secure, reliable service and protecting visitors and DPM. |
| Optional usage and performance measurement | Your consent. You can refuse or withdraw it using Privacy choices below. |
| Responding to data-rights requests and meeting applicable legal record-keeping duties | Legal obligation where a duty applies. Necessary records for resolving a dispute or legal claim may also be kept under legitimate interests. |
We limit processing based on legitimate interests to what is necessary and proportionate and consider your interests and reasonable expectations. You may object to this processing.
4. Who receives information
The DPM owner and people authorised to handle the relevant project can access the records they need. The website is hosted through OpenAI’s ChatGPT Sites service and its infrastructure providers, including Cloudflare. They process hosted information to provide, maintain and secure the service. Resend sends notifications to DPM containing an enquiry reference and a protected dashboard link; the notification does not contain your name, email or project summary. DPM’s business mailbox provider, Proton, processes correspondence sent to our inbox.
We may share information needed for an agreed project with selected design, manufacturing or testing partners, or with professional advisers and authorities where necessary. We agree the project and confidentiality arrangements before sharing confidential technical files. We do not disclose initial briefs to every partner or give partners access to the owner dashboard.
5. Processing outside the UK
Our hosting and email services operate internationally, including in the United States and Europe. Information may therefore be processed outside the UK. OpenAI’s Sites data-processing terms provide contractual safeguards for UK hosted data using standard contractual clauses with the UK Addendum. Resend’s data-processing terms also provide for the UK Addendum where required; Proton’s published arrangements describe its processing in Switzerland and other locations.
Where a restricted transfer requires safeguards, the applicable provider terms and approved transfer mechanisms must cover it. You can contact DPM for information about the relevant safeguards and how to obtain a copy, subject to protection of confidential material. See OpenAI’s Sites data-processing terms, Resend’s data-processing terms and Proton’s privacy information.
6. How long we keep information
- Enquiries and correspondence: while needed to respond and manage the discussion. We review inactive or closed enquiries after 12 months from the last substantive contact and remove information no longer needed. If a continuing project, legal duty or dispute requires longer retention, we keep the relevant records for that purpose and review the need again.
- Agreed project records: retention is set by the project, applicable legal requirements and any justified claims or traceability needs. We explain additional project-specific requirements when agreeing the work.
- Optional measurement events: at most 90 days in the active website reporting dataset. Older rows are purged when the reporting or measurement service runs.
- Abuse-prevention counters: expire after two hours and are removed during subsequent counter maintenance.
- Privacy preference: remembered in your browser for 180 days, unless you clear it or change your choice.
Service providers may retain restricted operational logs and recovery copies for their documented security, recovery or legal purposes. Removing an active record may not immediately remove a protected backup; any restoration must reapply completed deletion requests. Contact us for the retention arrangements relevant to your enquiry.
7. Browser storage and your choices
Essential functions include remembering your privacy choice and temporarily carrying a route-finder brief you have chosen to prepare into the enquiry form. The route brief uses session storage and is not sent to DPM until you submit it. Authentication storage is used when the owner signs in.
If you allow optional measurement, we record page-level events, a broad source category and loading or interaction timings to improve the site. We do not include form content, contact details, query strings or a persistent visitor identifier in those events. Attribution may be remembered for the browser session. Refusing measurement does not affect the enquiry form. Do Not Track and Global Privacy Control signals disable it. No advertising pixels are used.
8. Your rights
Depending on the circumstances and lawful basis, you can request access, correction, deletion or restriction, object to processing based on legitimate interests, and request portability of information you supplied where processing is automated and based on consent or contract. These rights have conditions and exemptions. You can withdraw consent for future optional measurement at any time; that does not affect the lawfulness of processing before withdrawal.
Contact DPM using the details above. We may need proportionate information to confirm identity. We normally respond to a data-rights request within one month, subject to any extension or pause allowed by law; we will explain if this applies. Our commercial enquiry response promise is as soon as possible, but within 48 hours.
You can complain to the Information Commissioner’s Office without first complaining to us. Where EU GDPR applies, you may also complain to the competent supervisory authority in your country.
9. Choice, decisions and updates
Providing information is voluntary. We need a name, working email address and enough context to respond through the form; without these we may be unable to handle your request. You can telephone or email instead. The route finder offers general guidance, and DPM reviews enquiries personally. We do not use this website to make solely automated decisions with legal or similarly significant effects about you.
We review this notice when the website or processing changes and explain material new uses before they begin. Updated 15 September 2026.