Privacy Policy

1. Who We Are

Dewroi Ltd is a company registered in England and Wales (Company No. 16728492). Our registered office is at 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE.

We are the data controller for personal data you provide through this website. This means we decide how and why your information is used, and we are responsible for keeping it safe.

If you have any questions about this policy, please contact us at contact@dewroi.com.

2. What Data We Collect

When you submit an enquiry through our website questionnaire, we collect the following personal data:

• Your name
• Your email address
• Your company name (if you choose to provide it)
• Your questionnaire response — a description of the business challenges or problems you are hoping to solve
• Any additional notes you include in the optional free-text field

As a technical by-product of the submission, we also receive your IP address. This is used solely for spam and abuse prevention and is not used to identify you personally.

We do not collect sensitive personal data (as defined under Article 9 of the UK GDPR), and we do not run analytics or behavioural tracking on this website.

3. Why We Collect It — Lawful Basis

We process your personal data for a single purpose: to respond to your business enquiry and provide the information or initial thoughts you have requested.

The lawful basis for this processing is your consent (Article 6(1)(a) of the UK GDPR), given by ticking the consent checkbox before submitting the form.

You may withdraw your consent at any time by emailing contact@dewroi.com. Withdrawing consent does not affect the lawfulness of any processing already carried out before withdrawal.

4. How Long We Keep Your Data

We retain enquiry data for up to 12 months from the date of receipt. If an enquiry progresses into a working relationship, we retain relevant correspondence for as long as the relationship requires and as required by applicable law (e.g. HMRC record-keeping obligations).

After the applicable retention period, your data is securely and permanently deleted.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We use the following third-party service providers to operate this website. Each acts as a data processor on our behalf — processing your data only as we instruct them to, and only as necessary to provide their service.

Provider	Purpose	Data Involved
Cloudflare (Turnstile)	Bot and spam prevention. Cloudflare verifies that form submissions come from a real person.	IP address, challenge response token
Hostinger	Website hosting and email delivery. Your submitted data is transmitted to us via Hostinger's SMTP infrastructure.	All form fields — name, email, company, enquiry content

We have or will put in place appropriate Data Processing Agreements (DPAs) with each provider before processing personal data through their services.

6. International Data Transfers

Cloudflare is a US-based company with a global network. Where your data is transferred outside the UK, Cloudflare applies appropriate safeguards — including Standard Contractual Clauses (SCCs) approved by the UK ICO — to ensure your data is protected to UK GDPR standards. For further detail, see Cloudflare's Privacy Policy.

Hostinger's primary data processing infrastructure is located within the European Economic Area (EEA), which the UK recognises as providing adequate data protection.

7. Your Rights Under UK GDPR

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

• Right of access — request a copy of the personal data we hold about you (a "Subject Access Request").
• Right to rectification — request that we correct inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data (the "right to be forgotten"), where we have no legitimate reason to continue holding it.
• Right to restriction of processing — request that we limit how we use your data while a dispute is resolved.
• Right to data portability — receive your data in a structured, commonly used, machine-readable format.
• Right to object — object to our processing of your personal data in certain circumstances.
• Right to withdraw consent — where processing is based on your consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email contact@dewroi.com. We will respond within one calendar month of receiving your request, as required by UK GDPR.

8. Right to Lodge a Complaint

If you are dissatisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's independent supervisory authority for data protection:

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to address your concerns directly before you contact the ICO — please reach out to us first at contact@dewroi.com.

9. Cookies

This website does not set any first-party tracking or analytics cookies.

Cloudflare Turnstile (our spam-prevention tool) may set a short-lived functional cookie as part of its verification challenge. This cookie does not track you across websites, does not build a behavioural profile, and is discarded once the challenge is resolved.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The Last Updated date at the top of this page will always show when the policy was last revised. We encourage you to review this page periodically.

Where changes are material, we will take reasonable steps to notify you (for example, by updating the date prominently or contacting you directly if we hold your data at the time of the change).