Privacy Policy

Last Updated: September 29, 2025
‍
DaaSX ("we," "us," or "our") operates the website www.DaaSX.com (the "Website"). This Privacy Policy explains how we collect, use, and protect personal information in connection with your use of our Website. We are committed to protecting your privacy and complying with applicable laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the California Consumer Privacy Act (CCPA).
‍
1. Information We Collect
We collect limited personal data as described below:
‍
a. Email Addresses
• What We Collect: If you choose to submit your email address through our Website’s contact or information request form, we collect your email address.
• Purpose: We use your email address solely to respond to your request for further information about our services.
• Voluntary Submission: Providing your email address is optional and at your discretion.

b. Server Logs
• What We Collect: Our web server automatically collects limited technical information, such as your IP address, browser type, date and time of visit, and pages viewed, in server logs.
• Purpose: This data is used to maintain Website functionality, ensure security, and diagnose technical issues.
• Retention: Server log data is retained for [insert retention period, e.g., 30 days] and then deleted, unless required for legal or security purposes.

c. Google Analytics Data
• What We Collect: We use Google Analytics 4 (GA4) to collect usage data, including IP addresses (anonymized), device information, browser type, pages visited, time spent on pages, and cookies (e.g., _ga for unique user IDs).
• Purpose: To analyse site performance, understand user behaviour, and improve our services (e.g., traffic patterns and engagement metrics).
• Cookies: GA4 sets first-party cookies for analytics. You can manage these via our cookie consent banner.
• Legal Basis: Consent (GDPR) or legitimate interest (CCPA, where consent not required).

2. How We Use Your Information
We use the information we collect as follows:

• Email Addresses: To respond to your inquiries or provide requested information about our services.
• Server Logs: To ensure the Website operates correctly, troubleshoot issues, and protect against unauthorized access or security threats.
• Google Analytics Data: To monitor and optimise site performance. Data is anonymized where possible and not used for advertising. We do not sell or share your personal data for cross-context behavioral advertising. We may share anonymized aggregated data for insights.

3. Sharing Your Information
• We share Google Analytics data with Google LLC (as our data processor) under Google's Data Processing Terms, which include GDPR and CCPA safeguards (e.g., no data use for Google's ads without consent).
• No other third-party sharing occurs, except as required by law or to protect our rights.
• For CCPA: Google is a service provider; we do not "sell" or "share" data as defined under CCPA/CPRA.

4. Data Storage, Retention, and Security
• Storage: Email and server log data in [insert storage method, e.g., a protected database]. GA4 data stored by Google in the US/EU (with adequacy decisions or standard contractual clauses).
• Retention: Emails deleted after response (unless ongoing communication requested). Server logs: 30 Days. GA4 data: Up to 14 months, then auto-deleted.
• Security: We use reasonable measures (e.g., encryption) to protect data. Google provides industry-standard security for GA4.


5. Your Rights Under Privacy Laws
You have the following rights regarding your personal data:

• Right to Access: Request confirmation and details of processed data.
• Right to Rectification: Request corrections to inaccurate data.
• Right to Erasure: Request deletion (e.g., emails or GA4 user data via Google tools).
• Right to Restriction: Request limits on processing.
• Right to Object: Object to processing (e.g., analytics based on legitimate interest; withdraw consent anytime).
• Right to Data Portability: Receive a copy of your data (e.g., emails) in a usable format.
• CCPA Rights: Know what data is collected, request deletion, opt out of "sales/sharing" (none occur), and non-discrimination.
• How to Exercise: Contact us (Section 7). For GA4 deletion, we can use Google's User Explorer or API.
• Right to Lodge a Complaint: With the UK ICO (ico.org.uk), EU DPA, or California AG.Withdraw consent anytime via our cookie banner; this won't affect prior processing.


6. Third-Party Links and Services
Our Website may contain links to third-party websites. We are not responsible for their privacy practices. For GA4, see Google's Privacy Policy (policies.google.com/privacy).

7. Contact Information
If you have questions, wish to exercise rights, or withdraw consent, contact us at:

• Email: Info@DaaSX.com
• Address: Suite 4, The Neon Building, Quorum Park, Benton Lane, Newcastle Upon Tyne, NE12 8BU, United Kingdom.
• For UK/EU: Contact our DPO (if appointed) at the above email or a supervisory authority.

8. Changes to This Privacy Policy
We may update this policy for practice or legal changes. Significant updates posted here with a new "Last Updated" date; we'll notify via site banner if major.

9. Applicable Laws
This complies with UK GDPR/Data Protection Act 2018, EU GDPR, CCPA/CPRA, and other US state laws.