Skala Dohodov ← Return to Main Page

Privacy Policy

Last Updated: 14 January 2026 | Effective Date: 14 January 2026

1. Overview and Data Controller

Skala Dohodov ("we", "our", or "us") respects your privacy and is dedicated to safeguarding your personal data. This Privacy Policy informs you how we manage, collect, disclose, and store your personal information when you visit our website, utilize our analytical models, or connect with our customer operations.

For the purposes of the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), the primary data controller is Skala Dohodov, with registered operating premises at Fenchurch Street 135, LS1 5AT Leeds, United Kingdom.

2. Categories of Data Collected

Depending on your interaction with the Platform, we may collect, process, and combine several categories of personal information:

  • Identity and Contact Data: Includes first name, last name, telephone number, residential address, country of residence, and email address supplied during platform inquiries or communications.
  • Technical and Device Data: Includes internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, network identifiers, and hardware specifications.
  • Usage Data: Analytical metrics detailing how you navigate our platform, tool interactions, duration of session visits, calculation scenarios run, and referring referral sources.
  • Communications Data: Records of queries, customer service records, and feedback submitted directly through our digital correspondence channels.

3. Legal Bases for Processing

Under United Kingdom data protection law, we only process personal information where a valid legal basis exists:

  • Contractual Performance: Processing necessary to provide service access, deliver analytical output, and maintain system account operations.
  • Legitimate Interests: Necessary for fraud prevention, server security auditing, platform optimization, market research, and safeguarding our intellectual property.
  • Legal and Regulatory Obligations: Compliance with anti-fraud legislation, taxation standards, and statutory disclosure requirements issued by judicial or governmental bodies.
  • Consent: Where you have granted explicit consent for direct marketing communications or optional web performance monitoring.

4. How Information is Collected

We collect information through direct user interactions (such as emailing our support team or initiating correspondence) and automated tracking systems (such as technical log files and essential cookies). We do not purchase unverified private databases from third-party data brokers.

5. Sharing and Disclosure of Data

We do not sell, rent, or trade your personal information. We may share limited personal data with third parties under controlled conditions:

  • Infrastructure Providers: Cloud hosting facilities, cyber-defense security networks, and server analytics partners bound by strict confidentiality agreements.
  • Auditors & Legal Advisors: Professional legal, accounting, and security counsel operating under statutory secrecy obligations.
  • Regulators & Law Enforcement: Competent public authorities when strictly compelled by subpoena, court order, or national security regulation.

6. International Data Transfers

Where processing requires transferring personal data outside the United Kingdom or the European Economic Area, we implement robust safeguard mechanisms. These include the UK International Data Transfer Addendum (IDTA), standard contractual clauses approved by the European Commission, and rigorous encryption protocols to guarantee equivalent levels of protection.

7. Data Retention & Security Architecture

We preserve personal information only as long as necessary to fulfill the purposes for which it was gathered, including satisfying legal, reporting, or regulatory accounting requirements. Once retention periods expire, data is permanently erased or anonymized.

Our security posture includes TLS 1.3 protocol encryption in transit, AES-256 resting data encryption, role-based access restrictions, and periodic penetration testing to thwart unauthorized access or inadvertent loss.

8. Your Statutory Rights

Under UK data protection law, you enjoy specific enforceable rights regarding your personal records:

  • Right of Access: Request a copy of the personal information we maintain concerning your identity.
  • Right to Rectification: Request correction of inaccurate, incomplete, or outdated information.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of personal records where there is no legal reason for continued processing.
  • Right to Restriction: Request suspension of data processing during verification disputes.
  • Right to Data Portability: Obtain your digital personal information in a structured, machine-readable format.
  • Right to Object: Oppose processing based upon legitimate interest claims or direct marketing purposes.

9. Exercising Rights & Regulatory Complaints

To exercise any of these statutory rights, please send your verified request to [email protected]. If you consider that our processing breaches data protection regulations, you have the right to lodge a formal complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data privacy matters (ico.org.uk).