Duwio Privacy Policy

Last Updated: 02 September 2025

Spacesuit Media Limited (“we”, “us” or “our”) is committed to protecting the privacy and security of your personal information. This policy explains how we collect and use personal information about you when you use our platform Duwio. Please read it carefully.

1. About this policy

This privacy notice describes how we collect and use personal information about you in connection with your use of Duwio, including any data you may provide when you register with us or sign up to our newsletter.

2. Important information and who we are

Who we are: Spacesuit Media Limited, registered in England and Wales (company no. 10017634). Registered office: The Oast, EMR Centre, New Road, East Malling, Kent, ME19 6BJ.

We are the controller in relation to personal data processed for managing your account and marketing Duwio. For images uploaded via Duwio, we act as processor and the photographer or business is the controller.

3. The types of personal data we collect

  • Identity Data: name, company name
  • Contact Data: billing address, email, phone
  • Financial Data: billing details, secure payment tokens (via providers)
  • Transaction Data: payment details, purchases
  • Technical Data: IP, login data, browser type, device IDs
  • Profile Data: username, password, purchased services
  • Correspondence Data: enquiries, support requests
  • Usage Data: interactions with the website/services
  • Marketing & Communications Data: marketing preferences

We may also collect aggregated data (e.g. usage statistics), which is not personal data.

4. How is your personal data collected?

  • From your interactions with us (signing up, forms, correspondence)
  • Automated technologies (cookies, logs, analytics)
  • Third-party service providers (partners, payment providers, analytics)

5. How we use your personal data

Legal bases: contract performance, legitimate interests, legal obligations, consent (where given).

  • Account creation and confirmation
  • Payment collection
  • Support and correspondence
  • Business administration and security
  • Content delivery and analytics
  • Marketing (opt-in/opt-out options provided)

We do not typically collect special category data. Marketing is only with your consent or based on legitimate interest. You can opt out anytime.

6. Disclosures of your personal data

We may share your personal data with service providers, partners, or in business transfers (e.g. mergers). All third parties are required to respect and safeguard your data.

7. International transfers

Your data may be transferred outside the UK/EU (e.g. to US providers like Google, Cloudflare). Where this occurs, we implement safeguards such as adequacy decisions or standard contractual clauses.

8. Data security

We use appropriate technical and organisational security measures, limit access to authorised staff, and have breach notification procedures in place.

9. Data retention

We retain data only as long as necessary for legal, regulatory or business purposes. Standard retention for basic records is six years after you cease being a customer. In some cases data may be anonymised and used indefinitely.

10. Your legal rights

You have rights under data protection law including:

  • Access, correction, erasure
  • Object to processing (esp. for marketing)
  • Restrict processing
  • Data portability
  • Withdraw consent

No fee is required for standard requests; we may ask for ID and aim to respond within one month.

11. Contact details

Email: privacy@duwio.com
Postal: Spacesuit Media Ltd, The Oast, EMR Centre, New Road, East Malling, Kent, ME19 6BJ

12. Complaints

You may complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk. We encourage you to contact us first so we can resolve concerns directly.

13. Changes to this policy

We review our privacy policy regularly. Please keep us updated if your personal data changes.