Privacy Policy
Last Updated: 1 June 2026
UK GDPR Compliant2DEC Technologies Limited ("we", "us", "our") is committed to protecting your privacy and handling your personal data responsibly in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how we collect, use, store, and protect your personal information.
1. Data Collection
We collect personal data that you provide to us directly, including: • Name, email address, phone number, and company name when you contact us, register for an account, or request a demo • Payment and billing information when you subscribe to our services • Usage data and interaction logs when you access our platforms • Device information, IP address, browser type, and operating system We also collect data automatically through cookies and similar technologies when you visit our website or use our services. Please see our Cookies section for more information.
2. Data Processing
We process your personal data on the following legal bases: • Contract performance: To provide services you have requested and fulfil our contractual obligations • Legitimate interests: To improve our services, prevent fraud, and ensure platform security • Consent: For marketing communications and non-essential cookies (which you can withdraw at any time) • Legal obligation: To comply with applicable laws and regulatory requirements We process data for the following purposes: • Providing, operating, and improving our products and services • Processing transactions and sending related communications • Responding to enquiries and providing customer support • Sending service notifications and product updates • Detecting and preventing fraud and unauthorised access • Complying with legal and regulatory obligations
4. GDPR Compliance
2DEC Technologies Limited is committed to full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As a data controller, we: • Only collect personal data that is necessary for specified, explicit, and legitimate purposes • Ensure data is accurate, kept up to date, and not retained longer than necessary • Implement appropriate technical and organisational security measures • Conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities • Maintain records of our processing activities as required by Article 30 UK GDPR • Appoint a Data Protection Officer (DPO) where required Where we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions.
5. Data Retention
We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Our standard retention periods are: • Account and profile data: Retained for the duration of your account, plus 12 months after closure • Transaction and billing records: 7 years (required by UK tax and financial regulations) • Support correspondence: 3 years from last contact • Marketing preferences and consent records: Until withdrawn, plus 2 years • Website analytics data: 26 months from collection (anonymised after 14 months) • Legal hold data: Retained for the duration of any legal proceedings After the applicable retention period, data is securely deleted or anonymised.
6. Security
We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction: • All data in transit is encrypted using TLS 1.2 or higher • Data at rest is encrypted using AES-256 encryption • Access to personal data is restricted to authorised personnel on a need-to-know basis • We conduct regular security assessments and penetration testing • Our infrastructure is hosted on ISO 27001-certified cloud providers • We maintain an incident response plan and will notify affected individuals and the ICO within 72 hours of a confirmed data breach, where required Despite these measures, no transmission over the internet or electronic storage is 100% secure. We encourage you to use strong passwords and notify us immediately if you suspect any unauthorised access to your account.
7. Your Rights
Under UK GDPR, you have the following rights regarding your personal data: • Right of access: Request a copy of the personal data we hold about you (Subject Access Request) • Right to rectification: Request correction of inaccurate or incomplete data • Right to erasure: Request deletion of your data ("right to be forgotten") where no legal basis for retention exists • Right to restrict processing: Request that we limit how we use your data in certain circumstances • Right to data portability: Receive your data in a structured, commonly used, machine-readable format • Right to object: Object to processing based on legitimate interests or for direct marketing purposes • Rights related to automated decision-making: Not be subject to decisions made solely by automated processing To exercise any of these rights, please contact us at privacy@2dectechnologies.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.
8. Contact Information
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us: Data Controller: 2DEC Technologies Limited 40 Chesterton Road, Manchester, M23 9LB United Kingdom Email: privacy@2dectechnologies.com General: info@2dectechnologies.com Registered in England and Wales. Company Registration Number: 17244557. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO): Website: www.ico.org.uk Helpline: 0303 123 1113
Privacy Enquiries
Contact us at privacy@2dectechnologies.com for any privacy-related questions or to exercise your data rights.