Privacy notice

What you choose to send

If you email us, we receive your email address, any name or signature you provide, your message, any attachments and associated email metadata. Contact is voluntary. We need a return address to reply, but you do not need to identify your employer or share confidential details.

Please do not send real payroll files, employee details, bank records, passwords or other confidential information. The fictional demonstration accepts no uploads and does not run a comparison on visitor data. If unnecessary personal information reaches us, we will limit its use and remove it when identified, unless retention is required by law.

Why we use it

We use correspondence to answer enquiries, assess whether we can help, and evaluate whether our experiments address useful operational problems. For ordinary enquiries and voluntary practitioner feedback, our basis is our legitimate interests in responding and learning, balanced against your privacy and reasonable expectations. If an enquiry progresses toward services you request, necessary pre-contract or contractual processing may also apply.

We do not sell correspondence, add you to marketing lists because you contacted us, or publish feedback with your identity without separate permission. We do not use enquiries for automated decisions producing legal or similarly significant effects. Our default is to use only genuinely anonymised feedback summaries in AI-assisted analysis, rather than uploading identifiable correspondence.

Email, hosting and overseas processing

DGT email is hosted by Fastmail. This domain is configured to use Fastmail’s US mail servers, so email content and metadata are processed outside Barbados. Fastmail and its service providers may also process information in other locations described in its privacy policy. Its published Data Protection Agreement describes contractual terms and safeguards; copies are available through that link. These links describe the provider’s arrangements and do not constitute a claim that Barbados has made an adequacy determination.

The website is hosted through ChatGPT Sites. DGT has added no enquiry form, advertising trackers or analytics scripts. The hosting platform and its infrastructure providers may process technical information such as IP addresses, requests, logs and essential cookies to operate and protect the site. Where ChatGPT sign-in is required, authentication is handled by the platform. See OpenAI’s privacy policy. The hosting arrangement does not promise that technical information stays in Barbados.

Correspondence is accessed by the operator and the providers needed to deliver and secure the service. Information may also be disclosed where legally required or necessary for legal claims. We do not publish identifiable enquiry records on the website.

How long we keep it

We delete ordinary enquiry and feedback correspondence from active DGT records within 12 months after the last substantive exchange, and sooner when no longer needed. This includes identifiable research notes and attachments. Genuinely anonymised findings may be retained; removing a name alone does not make a distinctive message anonymous.

If correspondence becomes part of an active service engagement, a dispute or a legally required record, we retain only what is necessary for that purpose under a separate appropriate schedule and explain any applicable exception. Provider backups and security records follow the provider’s retention arrangements; deleting an active message does not promise immediate deletion from every backup.

Your choices and rights

You can ask to access or correct your personal information, request deletion or restriction, or object to processing based on legitimate interests. Portability and withdrawal of consent apply where the relevant legal conditions are met. These rights are subject to applicable law; genuinely anonymous findings cannot ordinarily be linked back to fulfil an individual request.

Email info@digitalgreasetrap.com. We may ask for proportionate information to verify a request and will ordinarily respond within one month. You may also complain to Barbados’s Data Protection Commission.

This notice will be updated if our services or handling practices change.