Privacy Policy
Last Updated: February 2026
1. Introduction
Dot Commerce Ltd ("Dot Commerce", "we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website at dotcommerce.co (the "Website") or engage with our services. By using our Website, you acknowledge that you have read and understood this policy.
2. Who We Are
Dot Commerce is a digital commerce consultancy. For the purposes of applicable data protection legislation, we are the data controller responsible for your personal information. If you have any questions about how we handle your data, you can reach us at hello@dotcommerce.co.
3. Information We Collect
We collect personal information in the following ways:
Information you provide directly:
- Name, email address, phone number, and company/organisation name when you submit a contact form or enquiry
- Any additional details you include in messages sent to us
- Information provided during the course of a business engagement
Information collected automatically:
- Device and browser information (e.g. browser type, operating system, screen resolution)
- IP address and approximate geographic location
- Pages visited, time spent on pages, and navigation paths
- Referring website or source that directed you to our Website
Information from third parties:
- We may receive information about you from publicly available sources or business partners in connection with our services
4. How We Use Your Information
We use the personal information we collect for the following purposes:
- To respond to your enquiries, requests, and communications
- To provide, deliver, and improve our services
- To send you relevant information about our services where you have given consent or where we have a legitimate interest to do so
- To administer and protect our Website, including troubleshooting, data analysis, and system maintenance
- To analyse Website usage and trends to improve user experience
- To comply with legal obligations, enforce our terms, and protect our rights
5. Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we rely on the following lawful bases to process your personal data:
- Consent — where you have given clear consent for us to process your personal data for a specific purpose (e.g. submitting a contact form, subscribing to communications)
- Contractual necessity — where processing is necessary for the performance of a contract with you or to take pre-contractual steps at your request
- Legitimate interests — where processing is necessary for our legitimate business interests (e.g. improving our services, understanding how our Website is used), provided these are not overridden by your rights and freedoms
- Legal obligation — where processing is necessary to comply with a legal or regulatory obligation
6. Cookies and Tracking Technologies
Our Website uses cookies and similar tracking technologies to distinguish you from other users, enhance your browsing experience, and analyse how the Website is used.
Types of cookies we use:
- Strictly necessary cookies — required for the Website to function and cannot be switched off
- Analytics cookies — help us understand how visitors interact with the Website by collecting and reporting information anonymously
- Functional cookies — enable enhanced functionality and personalisation
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our Website. For more information, visit aboutcookies.org.
7. Data Sharing and Third Parties
We do not sell, rent, or trade your personal information. We may share your data with the following categories of third parties, only to the extent necessary:
- Service providers — trusted third parties who assist us in operating our Website, managing our business, and delivering our services (e.g. hosting providers, CRM platforms, email service providers, analytics tools)
- Professional advisers — including lawyers, auditors, and insurers where necessary
- Regulatory authorities — where required by law, regulation, or legal process
All third-party service providers are required to process your data in accordance with applicable data protection laws and are bound by appropriate data processing agreements.
8. International Data Transfers
Some of our third-party service providers may be located outside the United Kingdom. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your information in accordance with applicable data protection legislation.
9. Data Retention
We retain your personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected. Specific retention periods depend on:
- The nature of the data and the purpose for which it was collected
- Whether there is a legal, contractual, or regulatory requirement to retain it
- Whether retention is advisable in light of our legal position (e.g. statute of limitations, litigation, or regulatory investigations)
When personal data is no longer required, we will securely delete or anonymise it.
10. Your Rights
Under applicable data protection law, you have the following rights:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to request correction of inaccurate or incomplete data
- Right to erasure — to request deletion of your personal data, subject to certain conditions
- Right to restrict processing — to request that we limit how we use your data
- Right to data portability — to request a copy of your data in a structured, commonly used, machine-readable format
- Right to object — to object to processing based on legitimate interests or for direct marketing purposes
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at hello@dotcommerce.co. We will respond to your request within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.
11. Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, loss, or destruction. While we strive to protect your data, no method of transmission over the internet or electronic storage is entirely secure, and we cannot guarantee absolute security.
12. Third-Party Links
Our Website may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policy of every site you visit.
13. Children's Privacy
Our Website and services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of the Website after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Dot Commerce Email: hello@dotcommerce.co