Privacy Policy

1. Introduction

Dupliy Ltd ("Dupliy", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered form management platform and related services.

We are registered in England and Wales (Company Registration Number: [Pending]) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly to us, including:

• Contact information (name, email address, phone number)
• Account credentials
• Family member information you choose to store
• Form data and documents you upload
• Payment information (processed securely by our payment provider)

2.2 Automatically Collected Information

When you use our services, we automatically collect:

• Device information (type, operating system, browser)
• Log data (IP address, access times, pages viewed)
• Usage information (features used, interactions)
• Cookies and similar technologies

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services
• Process and complete transactions
• Send transactional communications
• Respond to your enquiries and provide customer support
• Train and improve our AI models to better serve you
• Analyse usage patterns to improve our platform
• Detect and prevent fraud and abuse
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service providers who assist in operating our platform
• Professional advisers (lawyers, accountants)
• Law enforcement when required by law
• Business partners with your consent

5. Data Security

We implement robust security measures including 256-bit encryption, secure servers, regular security audits, and strict access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

7. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. When you delete your account, we will delete or anonymise your data within 30 days, except where retention is required by law.

8. Children's Privacy

Our services are intended for parents and guardians managing family paperwork. We do not knowingly collect information directly from children under 13. Parents may store their children's information as part of their family profile.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through our platform. Your continued use of our services after such modifications constitutes acceptance of the updated policy.

10. Information Commissioner's Office

If you are not satisfied with our response to your complaint, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.