Privacy notice
Your information, enquiries and portal access
Effective and last reviewed: 17 October 2026. This notice covers our public website, enquiry correspondence and the demonstration portal. Customer project information has separate handling arrangements agreed for each engagement.
Who is responsible
Dasher Consulting Ltd is the controller for these activities. David Dasher handles privacy enquiries at hello@dasher.consulting. You can also write to 86–90 Paul Street, London EC2A 4NE, United Kingdom.
What we receive and how we use it
If you contact us, we receive the details you choose to send: your name, reply address, organisation, business challenge and any correspondence. We use them to answer your request, arrange a conversation and prepare a relevant proposal. Making an enquiry does not subscribe you to a marketing list. Please leave out confidential documents, credentials and sensitive personal information.
The website contact link opens your email app. The portal enquiry form prepares a draft in your browser; it does not submit or save the enquiry on our server. You review and send it through your email app. Company and industry are optional. Enquiry details are voluntary, but we need a way to reply and enough context to help.
When you sign in, Microsoft Entra ID supplies your account identifier, name, email address and assigned roles. The portal uses these to establish a session and decide which demonstrations you can open. A protected demonstration receives a short-lived signed launch token containing your account identifier, email and role. Access is assigned; there is no public account registration. We do not use this process to make solely automated decisions with legal or similarly significant effects on you. You can ask David to review an access decision.
Vercel receives technical request information to deliver and protect the sites, including network address, requested URL, time, browser information and response details. Avoid putting personal or confidential information into page URLs. The demonstration content is fictional; live customer connections remain paused.
Our reasons for handling information
We use legitimate interests to respond to business enquiries, discuss a relevant proposal and operate secure, permission-controlled demonstrations. These interests are answering the request you made, managing the business relationship and protecting the service. We limit the information to what those purposes need. Where an individual asks us to take steps towards their own contract, or we perform that contract, we use the contractual basis. Records required by law are handled to meet the relevant legal obligation.
How long we keep it
Unsuccessful enquiries are kept for no more than 12 months after the last substantive contact, and removed earlier when no longer needed. If a contract, legal duty or dispute requires particular records for longer, we retain only those records for that purpose and review the reason and period separately. Removal from active records is distinct from providers’ recovery, backup and legal-hold processes.
We review portal access when a demonstration or business relationship ends and remove access that is no longer needed. Microsoft account, identity and audit records follow the purposes of that account and the service’s security and retention arrangements; ending demonstration access does not necessarily delete a person’s Microsoft account. Vercel runtime logs use a rolling availability window of up to 30 days with the current observability options. Providers retain separate service and security records under their own published purposes and retention criteria. We keep an extracted incident record longer only where a specific investigation or legal requirement needs it.
Cookies, preferences and website statistics
This website release does not load optional page-view analytics or advertising trackers. Earlier versions used Vercel Web Analytics; previously collected aggregate reports may remain with Vercel. Vercel describes its analytics visitor-session identifier as discarded after 24 hours; that is different from the lifetime of aggregate reports or security logs.
If you choose a light or dark theme, the browser stores that preference on your device until you clear it. The portal uses cookies needed for sign-in and security. Its session normally expires after 30 days of inactivity; protected samples have their own shorter session cookies. Portal and sample sessions expire separately. You can clear site data through your browser, but this may sign you out or reset your preferences.
Who processes it and where
Microsoft provides business email and Entra ID authentication; Vercel hosts the website, portal and demonstrations. Microsoft’s tenant data-location card showed Exchange Online customer data at rest in the United Kingdom on 17 October 2026. Vercel uses a global delivery network; the website and portal function settings currently select the United States. Data at rest in one country does not mean all service, support or security processing stays there. The providers’ data-processing terms include standard contractual clauses and the UK international data transfer addendum for relevant transfers. You can ask us for information about the applicable safeguards.
David and authorised people supporting the relevant service may access the information they need. We may also disclose necessary records to professional advisers or authorities where required to meet legal duties or deal with a claim. We do not sell your personal information.
Provider details: Microsoft data-processing terms, Vercel data-processing terms and Vercel privacy notice. These explain provider responsibilities, subprocessors and transfer safeguards.
Your right to object
You can object to our use of your personal information where we rely on legitimate interests. Email hello@dasher.consulting and explain what you want us to review. We will consider your circumstances and stop that processing unless an applicable reason permits it to continue.
Your other rights and questions
Depending on the circumstances, you can request access, correction, deletion or restriction of your information. Data portability applies to eligible information processed by automated means on the basis of consent or a contract. These rights have limits; we will explain any reason we cannot fulfil a request. Contact David using the details above.
You can complain to the Information Commissioner’s Office. You do not have to contact us first.
Changes and customer projects
We update this notice when these activities change and show the review date above. Before working with real customer sources, we agree the purpose, access, providers, location, retention and responsibilities for that engagement.
Customer data and engagement responsibilities · Contact Dasher Consulting