Privacy Policy

This policy explains what personal data Dolphin Analytics collects when you use this website, why we collect it, who we share it with, and the rights you have. We keep it plain and specific about the tools we actually use.

Who we are

The data controller is Dolphin Analytics Limited, a company registered in England and Wales (company number 12157748), registered office Kemp House, City Road, London, EC1V 2NX. For anything in this policy, contact us at team@dolphinanalytics.co.uk.

What we collect

We collect three kinds of data, and only when there is a reason to:

• What you send us. When you talk to us, you give your name, work email and a message about your problem, plus any optional detail you choose to add. If you book a call, we also get the booking details from our scheduling tool.
• Technical data. Standard information your browser sends, such as IP address, device and browser type, and referring pages. This is used to serve the site securely and to understand usage in aggregate.
• Usage and analytics data. If you consent to analytics, we record how the site is used: pages viewed, clicks, and session replays. Replays mask everything you type, including the free-audit form.

Why we use it, and our legal basis

• To respond to your enquiry and deliver services you ask for. Legal basis: taking steps at your request before a contract, and legitimate interests in running our business.
• To understand and improve the site. Legal basis: your consent, given through the cookie banner. You can withdraw it anytime.
• To keep the site secure and meet legal obligations. Legal basis: legitimate interests and legal compliance.

Cookies and tracking

Nothing that tracks you loads until you choose. When you first visit, a consent banner lets you accept or reject each category. You can change your mind at any time through cookie settings.

• Necessary (always on): needed for the site to work and to remember your consent choice.
• Analytics (off by default): PostHog product analytics and session replay, so we can see how the site is used and where people get stuck. Inputs are masked; the intake widget is never recorded.
• Advertising (off by default): reserved for future advertising and remarketing. Nothing runs here today.

We use Google Consent Mode, so our tag manager holds all analytics and advertising signals in a denied state until you opt in.

Who we share data with

We do not sell your data. We use a small set of processors to run the site and our intake, each bound to handle data only on our instructions:

• Cloudflare — website hosting and content delivery.
• PostHog — product analytics and session replay, on their EU cloud. Active only with your analytics consent.
• Dolphin Ops (our own tool, on Supabase) — stores your free-audit enquiry: your answers, name, email, the page you came from and campaign tags. This is how we handle your enquiry and does not depend on the cookie banner.
• Web3Forms — relays the email notification of your enquiry to us. It does not retain your data beyond delivering that email.
• Cloudflare Turnstile — a spam check that runs when you submit the free-audit form.
• Calendly — handles bookings. Its booking widget loads automatically once the free-audit section scrolls into view, before you book anything, so it can be ready when you are. Its own privacy notice covers what it collects.
• Google (Tag Manager) — loads and governs tags according to your consent choice.

We may also disclose data where the law requires it, or to establish or defend legal claims.

Where your enquiry data goes

When you talk to us, your answers are stored in Dolphin Ops, a tool we built and run on Supabase, and a notification reaches our team by email through Web3Forms so we can respond. If you book a call, Calendly holds the booking details. We use this information to reply to you and, if we work together, to deliver the audit. Our legal basis is legitimate interest in handling your enquiry, which is why this storage does not depend on cookie consent. We keep enquiry data for 24 months, then delete it. You can ask us to delete it sooner by emailing olam@dolphinanalytics.co.uk.

International transfers

Our analytics run on PostHog's EU cloud. Where a provider processes data outside the UK or EEA, transfers rely on UK-approved safeguards such as the International Data Transfer Agreement or Standard Contractual Clauses.

How long we keep data

We keep personal data only as long as we need it for the purpose it was collected, or to meet legal obligations, then delete or anonymise it. Analytics and session-replay data are kept for a limited retention window set in PostHog and then removed.

Your rights

Under UK GDPR you can:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• ask us to delete your data;
• restrict or object to how we use it;
• ask for your data in a portable format;
• withdraw consent for analytics at any time.

To exercise any of these, email team@dolphinanalytics.co.uk. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy as our site or tools change. The latest version always lives on this page with its effective date.

Contact

Dolphin Analytics Limited, Kemp House, City Road, London, EC1V 2NX. team@dolphinanalytics.co.uk.