Legal

Privacy Notice

Who we are

This website is operated by Dynacom Limited ("Dynacom", "we", "us"), a company incorporated in the Isle of Man under company number 022483V, with registered office at 24 Athol Street, Douglas, IM1 1JA, Isle of Man.

For any question about this notice, or to exercise your data-protection rights, contact legal@dynacom.solutions. For all other enquiries, contact hello@dynacom.solutions.

Our lead supervisory authority is the Isle of Man Information Commissioner ( inforights.im). Because most of our clients are based in the United Kingdom, the UK GDPR also applies to our processing. You have the right to complain to the UK Information Commissioner's Office. If you are resident in the European Economic Area you may complain to your local supervisory authority.

Last updated: 2026-05-04

What data we process and why

We process personal data for the following purposes and on the following bases under the Isle of Man Data Protection Act 2018, the Applied GDPR, and — where you are resident in the UK or the EEA — under UK GDPR / EU GDPR (Article 3(2)).

(a) Responding to enquiries. Where you submit our contact form we process your name, the contact channel(s) you provide (email and/or phone), the contents of your message, and your IP address and browser user-agent. Basis: Article 6(1)(b) (steps prior to entering into a contract) where you are a prospective client; otherwise Article 6(1)(f) (legitimate interest in responding to people who contact us). The IP address and user-agent are processed under Article 6(1)(f) for the legitimate interest of preventing automated abuse of the form.
(b) Internal triage and weekly digest. Submissions are stored in a Cloudflare D1 database and a weekly summary is emailed to hello@dynacom.solutions for review. Basis: Article 6(1)(f) (legitimate interest in administering the business). Triage is performed by automated rules (anti-bot signals only); no decision producing legal or similarly significant effects is made about you on a solely automated basis (Article 22 does not apply).
(c) Analytics. If you accept analytics cookies, we use Google Analytics to measure aggregate site usage. Basis: Article 6(1)(a) (consent). You may withdraw consent at any time via the "Cookie preferences" link in the footer.
(d) Security and abuse prevention. We retain limited diagnostic data (IP, user-agent, timestamps, Turnstile bot-check outcome). Basis: Article 6(1)(f).

Recipients and international transfers

We share personal data with the following processors and recipients:

Cloudflare, Inc. (United States, with EEA/UK presence) — Workers, D1 database, Email Routing for the contact form pipeline. Transfer mechanism: EU Standard Contractual Clauses (Module 2) plus the UK International Data Transfer Addendum, as set out in Cloudflare's Data Processing Addendum (which we have accepted).
Vercel Inc. (United States) — hosting of the Next.js front-end. Transfer mechanism: EU Standard Contractual Clauses plus the UK International Data Transfer Addendum, as set out in Vercel's Data Processing Addendum (which we have accepted).
Google LLC (United States) — Google Analytics (consent-based) and Google Fonts (loaded directly from Google's CDN on every page view; your IP address is sent to Google LLC with each request). Transfer mechanism: EU Standard Contractual Clauses plus the UK International Data Transfer Addendum, supplemented by Google's self-certification under the EU–US Data Privacy Framework for EU-resident users.
Doppler, Inc. (United States) — secrets management (no personal data routed through it).

A copy of the relevant transfer documentation is available on request to legal@dynacom.solutions.

How long we keep it

Contact-form submissions and the linked IP / user-agent stored in our Cloudflare D1 database, and any subsequent email correspondence held in our hello@ and legal@ mailboxes — retained for the duration of our business relationship with you and as part of our permanent archive of business correspondence. You can ask us to delete your data at any time using the rights process below; we will do so unless we are required by law to keep it (e.g. tax-record retention, defence of a legal claim).
Google Analytics events — 14 months (default GA retention).
Cookie / consent choice (dynacom_consent_v1 in localStorage) — 6 months, after which the banner re-appears.
Server logs (Cloudflare / Vercel platform logs) — per the relevant provider's default retention; we do not extend it.

Your rights

You have the right to: access your personal data; correct it; request its erasure; restrict or object to its processing; receive a copy in a portable format; and, where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing. To exercise any right, email legal@dynacom.solutions. We will respond within one month. You can complain to the Isle of Man Information Commissioner, the UK ICO, or your local EEA supervisory authority — see "Who we are", above.

Children

Our service is not directed to children. We do not knowingly collect personal data from a child below the age of consent for information-society services in the user's jurisdiction.

Cookies and similar technologies

We use cookies and similar tracking technologies as described in our Cookie Policy. Please review that policy for full details of the technologies we use, the purposes, and how to manage your choices.

Changes

We may update this notice from time to time. We will give at least 14 days' notice of any material change by posting a banner on the site and updating the "Last updated" date above. Changes that are not material (typographic corrections, clarifications) will take effect on publication. A version history is available on request.