1. Introduction
Dutypoint Ltd ("we", "us", "our") is the data controller for personal data collected through the Dutypoint Pump Selection Tool ("the Service"). The software powering this Service is developed and operated by digirom GmbH (Drensteinfurt, Germany).
We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.
2. Information We Collect
We collect the following categories of data when you use the Service:
Account Data
When you register for an account, we collect:
- Name and display name
- Email address
- Company name
- Password (stored in encrypted form)
Project Data
When you use the Service, we store:
- Pump selections and configurations
- Hydraulic parameters (flow, head, duty points)
- Project names, notes, and documentation
- Generated datasheets and technical specifications
Usage Data
We automatically collect:
- Pages visited and features used
- Session duration and interaction patterns
- Search queries within the Service
Technical Data
We automatically collect:
- IP address
- Browser type and version
- Device type and operating system
- Referring website
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process and store your pump selections and project data
- Manage your user account and authentication
- Send technical notices, updates, and support messages
- Analyse usage patterns to improve the Service
- Ensure the security and integrity of the Service
- Comply with legal obligations
4. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR:
- Contract performance — Processing necessary to provide your account and project management services (Article 6(1)(b))
- Legitimate interests — Analytics, service improvement, and security monitoring (Article 6(1)(f))
- Consent — Where we send marketing communications or use non-essential cookies (Article 6(1)(a))
- Legal obligation — Where required to comply with applicable laws and regulations (Article 6(1)(c))
5. Data Sharing
We do not sell your personal data. We may share your information with:
- Service providers — Hosting providers and technical partners who assist in operating the Service, acting as data processors under our instructions
- Analytics providers — We use Google Analytics and Microsoft Clarity to understand how the Service is used. These providers may collect anonymised usage data
- Legal requirements — Where required by law, court order, or regulatory authority
- Project sharing — When you choose to share a project with other users, the shared data is accessible to those users
6. Data Retention
- Account data is retained for as long as your account remains active
- Guest account data is temporary and may be deleted after a period of inactivity
- Project data is retained for as long as needed to provide the Service
- Usage and technical data is retained in anonymised form for analytics purposes
You may request deletion of your account and associated data at any time by contacting us.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encrypted connections (HTTPS/TLS) for all data transmission
- Secure password storage using industry-standard hashing
- Access controls and authentication mechanisms
- Regular security reviews and updates
While we take reasonable steps to protect your data, no method of electronic transmission or storage is completely secure.
8. Your Rights
Under the UK GDPR, you have the following rights:
- Right of access — Request a copy of the personal data we hold about you
- Right to rectification — Request correction of inaccurate or incomplete data
- Right to erasure — Request deletion of your personal data
- Right to restriction — Request restriction of processing in certain circumstances
- Right to data portability — Request your data in a structured, machine-readable format
- Right to object — Object to processing based on legitimate interests
- Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us using the details in Section 12 below.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: ico.org.uk
9. Cookies
The Service uses cookies to ensure proper functionality:
- Essential cookies — Session cookies required for authentication and Service operation. These are strictly necessary and do not require consent
- Analytics cookies — Used by Google Analytics and Microsoft Clarity to understand usage patterns and improve the Service
For more information about cookies used across Dutypoint services, please refer to the Dutypoint Cookie Policy.
10. International Data Transfers
Your data is primarily processed within the United Kingdom and the European Economic Area (EEA). Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting to this page. We encourage you to review this policy periodically.
12. Contact
For questions about this Privacy Policy or to exercise your data protection rights, please contact:
Dutypoint Ltd
Unit A, Quedgeley West Business Park
Gloucester, GL2 4PA
United Kingdom
Email: enquiries@dutypoint.com
Tel: 01452 300 110
See also: Terms of Use |
Dutypoint Main Privacy Policy |
Cookie Policy
Last updated: February 2026
© Dutypoint Ltd 2026