Privacy Policy
How we protect and handle your personal information
Last updated: 17 June 2025
Dillydog ("we", "us", "our") is the data controller for the personal data we process. You can contact us at contact@dillydog.co for any data protection queries.
Travel Data
We collect and process the travel information you provide, including departure and arrival dates, destinations, and trip purposes. This personal data is necessary to provide our ILR calculation services.
Account Information
We collect your email address and account credentials to provide access to our service and communicate with you.
Payment Information
Payment processing is handled by our third-party processor Stripe. We do not store your payment card details on our servers. Stripe processes payment data in accordance with their privacy policy and PCI DSS standards.
Technical Data
We automatically collect technical information including IP addresses, browser type, device information, and usage analytics to improve our service and ensure security.
We process your personal data based on the following legal grounds:
- Contract performance: To provide our ILR calculation services as agreed
- Legitimate interests: To improve our service, prevent fraud, and ensure security
- Legal obligation: To comply with applicable laws and regulations
- Consent: Where you have given specific consent for certain processing activities
- To provide ILR compliance calculations and travel tracking services
- To maintain your account and save your travel history
- To process payments and manage subscriptions
- To respond to your support requests and communications
- To improve our service and develop new features
- To comply with legal obligations and prevent fraud
- To send service-related communications (you can opt out of marketing communications)
We do not sell, trade, or rent your personal data to third parties. We may share your data only in the following circumstances:
- Service providers: With trusted third parties who assist in operating our service under strict data processing agreements
- Legal requirements: When required by law, court order, or to protect our legal rights
- Business transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
- Consent: With your explicit consent for specific purposes
All third-party processors are required to provide adequate data protection safeguards equivalent to those under GDPR.
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:
- European Commission adequacy decisions
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules
- Other legally recognized transfer mechanisms
As a data subject, you have the following rights:
- Right of access: Request copies of your personal data
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data (subject to legal obligations)
- Right to restrict processing: Request limitation of how we process your data
- Right to data portability: Request transfer of your data in a machine-readable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent where processing is based on consent
- Right to lodge a complaint: File a complaint with your local data protection authority
To exercise these rights, please contact us at contact@dillydog.co. We will respond to your request within one month.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Account data: Until you delete your account or request erasure
- Travel data: Until you delete your account or request erasure
- Payment records: For 7 years as required by UK tax law
- Technical logs: For 12 months for security and service improvement purposes
You can delete your account and associated data at any time through our service or by contacting us.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Staff training on data protection
- Incident response procedures
While we implement strong security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.
We use essential cookies and similar technologies to:
- Provide core service functionality
- Remember your preferences and settings
- Analyze service usage (with anonymized data)
- Ensure security and prevent fraud
You can control cookie settings through your browser preferences. Disabling essential cookies may affect service functionality.
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach, as required by GDPR.
Our service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us and we will take steps to remove such information.
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on this page
- Updating the "Last updated" date
- Sending you an email notification for significant changes
Your continued use of our service after changes become effective constitutes acceptance of the updated policy.
If you have any questions about this privacy policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us at:
Email: contact@dillydog.co
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority, if you believe we have not handled your personal data appropriately.