Privacy Policy

1. Introduction

DFA GREY ("DFA GREY CONSULTING", "D-G Consulting", "we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, contact us, or use our consulting services.

We act as the Data Controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Website Data We Collect

When you visit our website, we may automatically collect certain technical and usage information, including:

• Your IP address, browser type, and operating system.
• Pages visited, time spent on the site, and referring websites.
• Data collected through cookies and similar technologies (see Section 7 below).

This information helps us understand how visitors use our site and allows us to improve performance, usability, and content relevance.

3. How We Use Your Information

We may use your personal data for the following purposes:

• To respond to your enquiries and provide consulting services.
• To send proposals, invoices, or other contractual documents.
• To improve our website, services, and user experience.
• To comply with legal or regulatory obligations.
• To send updates, newsletters, or marketing communications (only with your consent).

4. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR:

• Contractual necessity -- to perform a contract with you or take steps at your request.
• Legitimate interests -- to manage our business and improve services.
• Consent -- for marketing communications and cookies.
• Legal obligation -- to comply with applicable UK laws and regulations.

5. Data Sharing and Transfers

We do not sell your personal data.

We may share your information with:

• Service providers or subcontractors who help us operate our business (e.g., IT, accounting, CRM).
• Professional advisors (e.g., legal, financial, or compliance).
• Regulatory or law enforcement authorities, if required by law.

If your data is transferred outside the UK, we ensure it is protected by appropriate safeguards (such as the UK's approved standard contractual clauses).

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.

7. Cookies

Our website uses cookies to enhance your browsing experience and collect anonymous analytics. You can adjust your browser settings to refuse cookies.

8. Your Data Protection Rights

Under UK GDPR, you have the following rights:

• Access -- request a copy of your personal data.
• Rectification -- correct inaccurate or incomplete data.
• Erasure -- request deletion of your data ("right to be forgotten").
• Restriction -- limit processing under certain conditions.
• Objection -- object to processing based on legitimate interests or marketing.
• Data portability -- receive your data in a structured, machine-readable format.

9. Data Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of online transmission or storage is completely secure.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with an updated "Last updated" date.