Legal

Privacy Policy

How DPLens Ltd handles personal data on this website and in the course of providing our software.

Last updated 2 September 2026 UK GDPR & Data Protection Act 2018 PECR (cookies)

This policy covers dplens.com, our email correspondence, and the personal data we handle when you evaluate or license the DPLens agent. It does not cover the log data your own DPLens deployment processes — that stays on your infrastructure and never reaches us. See Data in the DPLens agent.

Who we are

DPLens Ltd is the data controller for the personal data described in this policy. We are incorporated in England and Wales, company number 17427626, registered office 1 Blackbird Close, Thrapston, Kettering, NN14 4SD. For any privacy question, write to contactus@dplens.com.

What we collect

Information you send us

Your name, work email address, employer, job title and the content of your message when you email us, submit an enquiry, demo, evaluation or partner form on this website, or ask a technical question. If you apply to become a partner, we also hold the details you give us about your business. If you become a customer, we also hold contract, billing and support-contact details.

Website usage data

Pages viewed, referring page, approximate location derived from IP address, device and browser type, and interaction events such as which pipeline stage you opened. This is collected through Google Analytics and only after you accept analytics cookies.

Server logs

Our hosting provider records request logs, including IP address and user agent, for availability, abuse prevention and security monitoring. These are kept separately from analytics and are not used for marketing.

We do not ask for special category data, we do not buy contact lists, and we do not run advertising or cross-site tracking on this website.

How we use it, and our lawful bases

Purpose
Lawful basis
Replying to your enquiry, running a demo or evaluation, and assessing a partner application
Legitimate interests, or steps prior to entering a contract
Providing, supporting and invoicing a licensed deployment
Performance of a contract
Measuring how the website is used so we can improve it
Consent, given through the cookie banner
Keeping the site available and secure
Legitimate interests
Meeting tax, accounting and other statutory obligations
Legal obligation

Cookies

Cookies are small files stored by your browser. Under PECR we may only set non-essential cookies — which includes every analytics cookie listed below — after you have given consent. Until you accept, no Google Analytics script is loaded and no analytics cookie is written. Declining costs you nothing on this site: there is no gated content and no feature that depends on analytics.

Strictly necessary

Set without consent. Only used to remember your cookie choice and to keep the site working.

Analytics — consent

Google Analytics 4 only. Aggregate measurement of how visitors find and use the site.

Advertising — none

We set no advertising, remarketing or social-media tracking cookies, and share no data for ad purposes.

Cookies this site can set

Name
Purpose
Expiry
Set by
dplens_consent
Stores whether you accepted or declined analytics cookies, so we stop asking. Strictly necessary.
6 months
DPLens
_ga
Google Analytics. Assigns a randomly generated client ID so returning visits can be counted as one visitor rather than several.
2 years
Google (first-party)
_ga_F99V16T23Y
Google Analytics 4 session cookie for our measurement ID G-F99V16T23Y. Keeps session state and campaign attribution.
2 years
Google (first-party)
_gid
Google Analytics. Distinguishes visitors within a rolling 24-hour window for day-level reporting.
24 hours
Google (first-party)
_gat_gtag_*
Google Analytics. Throttles the request rate to Google's collection endpoint on busy pages. Contains no identifier.
1 minute
Google (first-party)

Cookie names and lifetimes are set by Google and may change; we review this table when we change our analytics configuration.

Google Analytics in detail

We use Google Analytics 4, provided by Google Ireland Limited, as our processor for website measurement. It is configured deliberately narrowly:

Analytics loads only after consent; declining, or ignoring the banner, means no measurement at all.
IP addresses are truncated by Google before storage and are not available to us in reports.
Google Signals, advertising features, ad personalisation and data sharing with other Google products are switched off.
We never send names, email addresses or any other identifier to Analytics, and we do not attempt to identify individual visitors.
Event-level data retention is set to the shortest option Google offers, 2 months, after which it is deleted automatically.

Google processes this data under the Google Ads Data Processing Terms. Where processing involves a transfer outside the UK, it relies on the UK extension to the EU Standard Contractual Clauses. Google's own explanation of how it handles Analytics data is published at policies.google.com/technologies/partner-sites.

Managing your cookie choice

On this site

Use the Cookie settings link in the footer to change or withdraw consent at any time. Withdrawing stops further collection immediately and deletes the analytics cookies from your browser.

In your browser

Every major browser can block or delete cookies for a site, and can send a Global Privacy Control signal. Blocking the dplens_consent cookie means the banner will reappear on each visit.

Opt out of Google Analytics everywhere

Google publishes a browser add-on that opts you out of Analytics on all sites: tools.google.com/dlpage/gaoptout.

Data in the DPLens agent

The agent runs on infrastructure you control. It has no vendor control plane and makes no call-home connection, so the log data it collects — including any personal data inside it — is never transmitted to DPLens Ltd. For that data you are the controller and we are not a processor of it.

If you choose to send us a diagnostic bundle, configuration file or log sample as part of a support case, we process it only to resolve that case, keep it for no longer than 90 days, and ask that you mask sensitive fields first — the agent's masking stage exists precisely for this. Licensing checks are offline; we do not receive telemetry from your deployment.

Who we share data with

We do not sell personal data. We share it only with service providers acting on our instructions, and only as far as each needs:

Google Ireland Limited — website analytics, where you have consented.
Our website hosting and email providers — delivering the site, our correspondence and the forms you submit on it.
Our accountants and professional advisers — invoicing and statutory records.
Law enforcement or regulators, where we are legally required to disclose.

International transfers

Where a provider processes data outside the UK, we rely on UK adequacy regulations or on the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment. You can ask us for the mechanism that applies to a specific provider.

How long we keep it

Enquiries that do not become customers
24 months
Customer contract and support records
Term of contract, then 6 years
Support diagnostic bundles you send us
90 days
Google Analytics event data
2 months
Web server request logs
30 days

Security

Access to personal data is limited to the people who need it, protected by access controls, and encrypted in transit. We keep audit records of administrative access, review our providers, and will notify you and the ICO of a reportable breach within the statutory deadlines.

Your rights

Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or transfer it to another provider. Where we rely on consent you can withdraw it at any time. Where we rely on legitimate interests you can object, and we will stop unless we have a compelling reason not to.

Email privacy@dplens.com and we will respond within one month. There is no charge. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, though we would appreciate the chance to put it right first.

Changes and contact

When this policy changes we update the date at the top of the page. If a change materially affects how we use your data we will say so prominently on the site and, where we hold your address, by email.

Data protection contact

DPLens Ltd
1 Blackbird Close, Thrapston
Kettering, NN14 4SD
United Kingdom

Email

contactus@dplens.com