Dillydogdillydog
🔒 Privacy & Security

Privacy Policy

How we protect and handle your personal information

Last updated: 17 June 2025

Data Controller Information

Dillydog ("we", "us", "our") is the data controller for the personal data we process. You can contact us at contact@dillydog.co for any data protection queries.

Personal Data We Collect

Travel Data

We collect and process the travel information you provide, including departure and arrival dates, destinations, and trip purposes. This personal data is necessary to provide our ILR calculation services.

Account Information

We collect your email address and account credentials to provide access to our service and communicate with you.

Payment Information

Payment processing is handled by our third-party processor Stripe. We do not store your payment card details on our servers. Stripe processes payment data in accordance with their privacy policy and PCI DSS standards.

Technical Data

We automatically collect technical information including IP addresses, browser type, device information, and usage analytics to improve our service and ensure security.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract performance: To provide our ILR calculation services as agreed
  • Legitimate interests: To improve our service, prevent fraud, and ensure security
  • Legal obligation: To comply with applicable laws and regulations
  • Consent: Where you have given specific consent for certain processing activities
How We Use Your Personal Data
  • To provide ILR compliance calculations and travel tracking services
  • To maintain your account and save your travel history
  • To process payments and manage subscriptions
  • To respond to your support requests and communications
  • To improve our service and develop new features
  • To comply with legal obligations and prevent fraud
  • To send service-related communications (you can opt out of marketing communications)
Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to third parties. We may share your data only in the following circumstances:

  • Service providers: With trusted third parties who assist in operating our service under strict data processing agreements
  • Legal requirements: When required by law, court order, or to protect our legal rights
  • Business transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
  • Consent: With your explicit consent for specific purposes

All third-party processors are required to provide adequate data protection safeguards equivalent to those under GDPR.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

  • European Commission adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • Binding Corporate Rules
  • Other legally recognized transfer mechanisms
Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of access: Request copies of your personal data
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data (subject to legal obligations)
  • Right to restrict processing: Request limitation of how we process your data
  • Right to data portability: Request transfer of your data in a machine-readable format
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Withdraw consent where processing is based on consent
  • Right to lodge a complaint: File a complaint with your local data protection authority

To exercise these rights, please contact us at contact@dillydog.co. We will respond to your request within one month.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Account data: Until you delete your account or request erasure
  • Travel data: Until you delete your account or request erasure
  • Payment records: For 7 years as required by UK tax law
  • Technical logs: For 12 months for security and service improvement purposes

You can delete your account and associated data at any time through our service or by contacting us.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication measures
  • Staff training on data protection
  • Incident response procedures

While we implement strong security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.

Cookies and Tracking Technologies

We use essential cookies and similar technologies to:

  • Provide core service functionality
  • Remember your preferences and settings
  • Analyze service usage (with anonymized data)
  • Ensure security and prevent fraud

You can control cookie settings through your browser preferences. Disabling essential cookies may affect service functionality.

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach, as required by GDPR.

Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us and we will take steps to remove such information.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

  • Posting the updated policy on this page
  • Updating the "Last updated" date
  • Sending you an email notification for significant changes

Your continued use of our service after changes become effective constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this privacy policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us at:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority, if you believe we have not handled your personal data appropriately.