This Privacy Policy explains how Dune ("Dune", "we", "us", or "our") collects, uses, and protects your personal information when you visit our website, request a demo, chat with us, or use our services.
Dune, operating the website at dunesites.com, is the controller of the personal information described in this policy. Our full business identity and registered details are set out at the end of this policy, and our contact details are in section 12.
We do not use your information for automated decision-making that produces legal effects for you, and we do not sell your personal information.
We do not sell your personal information. We share it only with trusted service providers who help us operate, and only as far as they need it:
These providers process data on our behalf under contract, or under their own privacy terms where they act as their own controller. We may also disclose information where required by law, or to protect our rights, our clients, or the security of our services.
Payments are processed by our third-party payment provider on secure, encrypted infrastructure. Dune never sees or stores your full card number, expiry date, or security code. We retain only the record of the transaction — amount, date, currency, status, and the invoice it relates to — which we need to run our accounts, issue receipts, and handle refunds. Your payment provider processes your card data under its own privacy policy.
Our website uses essential cookies and similar technologies needed for the site to function and to keep it secure. Where we use any non-essential cookies, including for analytics or advertising measurement, we do so in line with applicable law and, where required, with your consent, which you can withdraw at any time. You can also block or delete cookies in your browser settings, though parts of the site may then not work as intended.
We operate internationally, and our service providers may store or process data in countries other than your own, including outside the European Economic Area. Where we transfer personal information across borders, we do so using an appropriate legal safeguard — such as the European Commission's standard contractual clauses, or a transfer to a country recognised as providing adequate protection.
We keep personal information only for as long as needed for the purpose it was collected for:
When information is no longer needed, we delete or anonymise it.
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy in a portable format, object to or restrict certain processing, and withdraw consent where processing is based on consent. To make a request, email [email protected]. We respond within one month, or sooner where the law requires it, and we do not charge for making a request. You also have the right to complain to your local data protection authority.
We use reasonable technical and organisational measures to protect your information, including encryption in transit (HTTPS across our website), access controls, and limiting access to those who need it. No method of transmission or storage is completely secure, but we work to safeguard the data we hold, and we will notify you and the relevant authority where the law requires it in the event of a breach affecting your data.
Our services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
Questions or requests about your privacy? Contact us:
We may update this Privacy Policy from time to time. The latest version is always available on this page, with the "last updated" date reflecting the most recent change. Where a change is significant, we will tell you.