Privacy Policy

• Account & contact: name, email, phone, company/customer details.
• Billing: billing name/address, tax number, transaction history. Damga does not store card details: payments are processed by Stripe; we only see limited transaction data (e.g. last 4 digits, status).
• Usage & technical: login records, IP address, device/browser info, in-panel actions, security/audit logs.
• Content: project files, messages, support tickets, contract/e-signature records.
• Cookies: cookies necessary for session and security (see Cookies).

• Account creation, authentication, providing the Service: Performance of a contract
• Billing, payment, accounting/tax records: Contract / Legal obligation
• Security, fraud prevention, audit logging: Legitimate interests
• Service improvement, basic analytics: Legitimate interests
• Mandatory notification emails (invoices, security): Performance of a contract
• Marketing emails (if any): Consent (withdrawable at any time)

We do not sell data. To provide the Service we share it, on a limited basis, with suppliers in these categories:

• Payments: Stripe Payments Europe, Ltd.
• Hosting/infrastructure: our cloud server provider (EU/UK region).
• CDN/security: Cloudflare, Inc.
• Email delivery: Resend (transactional email).
• And with authorities where legally required.

Data is primarily processed in the UK/EU. Where a transfer outside the UK is required, we protect it using mechanisms approved under UK GDPR (adequacy decision or standard contractual clauses: SCCs/UK Addendum).

We keep data for as long as needed for the relevant purpose and/or statutory retention periods (e.g. 6 years for accounting records); after that we delete or anonymise it. Invoices and audit records may be kept longer for legal reasons.

You have rights of access, rectification, erasure, restriction, objection, data portability and to withdraw consent. Contact [email protected]. You also have the right to complain to the UK data protection authority, the ICO (ico.org.uk).

We use cookies necessary for session and security. If we use optional/analytics cookies, we provide a separate cookie notice/consent. You can manage cookies in your browser; the panel may not work without necessary cookies.

We take reasonable technical and organisational measures to protect data (encryption, access control, audit logging). No system is 100% secure; in the event of a breach we will comply with our legal notification duties.

We may update this policy; we will give reasonable notice of material changes. The current version is published on this page.

Contact: [email protected] · DAMGA LTD, Suite 11227, 5 Brayford Square, London E1 0SG, United Kingdom.