Politique de confidentialite

Ceci est une traduction de reference. La version anglaise disponible sur dusa.studio/privacy-policy est la version juridiquement contraignante.

1. Overview

DUSA . studio ("DUSA," "we," "us," and "our") respects your privacy and is committed to protecting it through compliance with this Privacy Policy. This Privacy Policy describes how we collect and use your Personal Information when you visit our website at https://dusa.studio, communicate with us, or we otherwise process your Personal Information (collectively, the "Platform").

This Privacy Policy does not apply to data subjects of our customers whose Personal Information we may receive pursuant to DUSA services we provide to our customers. Our customers use our platform to store and process their own customers' Personal Information, such as to create their own websites and applications, offer or provide their own products and services, send electronic communications, and otherwise collect, use, share or process Personal Information. In these cases, we act as a processor and service provider when providing these services to our customers. When you give your data to one of our customers or when we collect your Personal Information on their behalf, our customer's privacy notice, rather than this Privacy Policy, will apply to our processing of your Personal Information.

DUSA . studio is operated from Sydney, Australia. We provide marketing automation, CRM, website building, and AI tools for small to medium businesses.

2. Information we collect

Directly from you when you provide it to us. When you subscribe to a newsletter, create an account, make a purchase, or request information from DUSA, we will ask for things like your name, contact information (including email address and phone number), billing and shipping information, and account credentials in order to fulfil your request.

From third parties. We obtain information through marketing partners, vendors, and suppliers and other third parties. This information can include your name, contact information, professional information, and content that is publicly available.

Automatically when you use our Platform. We collect information about how you interact with the Platform including information about your device (such as IP address and other technical information), the actions you take on our Platform, and through the use of cookies, pixel tags, and similar technologies.

3. How we use your information

We use Personal Information that we collect about you or that you provide to us for the following purposes: providing and improving the Platform, providing AI features to enhance performance capabilities, providing customer support, operating our business (accounting, billing, reconciliation, and collection), communicating with you about the Platform and your account, protecting and securing the Platform, advertising and marketing (in accordance with your communication preferences), compiling statistics to improve the Platform, and complying with legal and regulatory obligations.

4. Legal basis for our use

Certain data protection laws (such as those in the European Economic Area, the United Kingdom, Brazil, and other jurisdictions) require us to identify a valid legal basis before we collect, use, share or otherwise process your Personal Information. Our legal basis for collecting and using the Personal Information described above will depend on the Personal Information concerned and the specific context in which we collect it.

We will collect Personal Information from you only where we have your consent to do so, where we need the Personal Information to perform a contract with you, where we have a legal obligation to do so, or where the processing is in our legitimate interests (such as processing for administrative purposes, direct marketing, product development or improvement, preventing fraud or criminal acts and in support of information security) and not overridden by your data protection interests or fundamental rights and freedoms.

If we ask you to provide Personal Information to comply with a legal requirement or to perform a contract with you, we will make this clear at the time of collection. We will also tell you whether the requirement for that information is mandatory and explain any consequences to you if you do not provide the information.

DUSA is the Data Controller of all Personal Information collected through the Platform in the EEA and the United Kingdom, except with respect to Processor Services (where DUSA is the Data Processor). If you have questions about or need further information concerning the legal basis on which we collect and use your Personal Information, please contact us using the details provided in the "How to Contact Us" section below.

5. How we protect your information

We design our Platform to provide reasonable and appropriate administrative, technical and organisational security measures to protect your Personal Information against risks such as temporary or permanent loss, destruction, and unauthorised or unlawful access, alteration, use or disclosure. We require our suppliers and vendors to apply similar protections when they access or use Personal Information that we share with them.

We implement industry-standard security measures including encryption in transit (TLS/SSL), access controls, and regular security reviews. However, no technology, data transmission or system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us at contact@dusa.studio.

6. When we share your information

We will not sell, rent, or trade your personal information. We may disclose Personal Information with the following categories of third parties:

With service providers. We may share information with our authorised vendors and suppliers to provide services we have contracted for, such as website hosting, data analysis, IT services, auditing, or customer service. Our contracts with suppliers and vendors include provisions to protect your Personal Information and limit its use.

With partners. We work with third parties for purposes such as marketing and similar promotions, or to enable joint products or facilitate services on the Platform.

For legal, regulatory, or related purposes. We may disclose your information to the extent required by law or if we have a good-faith belief that such disclosure is necessary to comply with official investigations or legal proceedings.

Sales, mergers and acquisitions. We may disclose Personal Information as part of a contemplated or actual corporate transaction such as a reorganisation, merger, sale, joint venture, or other disposition of all or any portion of our business or assets.

At your direction or with your consent. DUSA may disclose your Personal Information to any other person or entity where you consent to the disclosure or otherwise direct us to disclose the information.

7. Data retention

We will only retain your Personal Information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your Personal Information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for Personal Information, we consider the amount, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. In some circumstances you can ask us to delete your data: see the relevant rights section below for further information.

8. Cookies and tracking

Our website uses cookies and similar technologies to analyse website traffic and usage patterns, remember your preferences, and improve your browsing experience. We use analytics tools (such as Google Analytics) that may collect anonymous usage data.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our website. For users in the European Economic Area and United Kingdom, we obtain consent before setting non-essential cookies in accordance with applicable law.

9. Automated decision-making

Our platform may use automation and AI to personalise communications, score leads, and recommend actions within your account. We do not use your Personal Information to train generalised, public AI models. Where automated decisions significantly affect you, you have the right to request a review of that decision by a human. Contact us at contact@dusa.studio to request a review.

10. Children's privacy

We do not knowingly collect, use, disclose, sell, or share Personal Information from children under 16. If we learn that we have collected the Personal Information of a child under 16, we will take steps to delete the information as soon as possible. If you become aware that Personal Information of a child under 16 years of age has been provided, please let us know at contact@dusa.studio.

11. Links to other websites and services

We are not responsible for the practices employed by websites or services linked to or from the Platform, including the information or content contained therein. This Privacy Policy does not address, and we are not responsible for, the policies and practices of third parties or other organisations that are not operating on DUSA's behalf.

12. Your legal rights

DUSA respects your rights related to your Personal Information. Depending on where you live, you may have rights to request access to, corrections of, or deletion of your personal data, and to make additional choices such as the kinds of marketing materials you receive (or choose not to receive marketing from DUSA at all). See below for more information, depending on your location.

13. European privacy rights

If you are in Europe, you may have the following rights under the GDPR or the UK GDPR:

Rights to access, portability, correction, or deletion. If you would like to correct or update your Personal Information, or to request access to or deletion of your Personal Information, you may contact us at contact@dusa.studio. If you request a change to or deletion of your Personal Information, please note that we may still need to retain certain information for recordkeeping purposes, and/or to complete any transactions that you began prior to requesting such change or deletion.

Right to object. You can object to processing of your Personal Information or ask us to restrict processing of your Personal Information.

Right to withdraw consent. If we have collected your Personal Information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, or processing your Personal Information under other legal bases.

Right to complain. If you believe we are using your Personal Information in a way that is inconsistent with this Privacy Policy, you can contact your local data protection supervisory authority. The UK supervisory authority is the Information Commissioner's Office (ICO). You can visit their website at www.ico.org.uk. If you are in the EU, you can find your local data protection authority at the European Commission website. For Spain, this is the AEPD (www.aepd.es). For France, this is the CNIL (www.cnil.fr). For Germany, this is the BfDI (www.bfdi.bund.de).

Marketing choices. To exercise your choices regarding our use and disclosure of your Personal Information for advertising and marketing purposes, you may contact us at contact@dusa.studio. Every marketing email includes an unsubscribe link. Please note that if you choose not to receive marketing communications from us, we may still send you communications related to your products or the Platform, such as information about a security update, service issue or product delivery.

14. U.S. privacy rights

Residents of certain US states, such as California, Colorado, Connecticut, and other states with applicable privacy laws, may have additional rights.

Right to opt out of sale/share/targeted advertising. DUSA does not sell your Personal Information for money. If you wish to exercise your right to opt out of DUSA using your Personal Information for targeted advertising purposes, you may do so by contacting us at contact@dusa.studio.

Rights to access, correction, and deletion. You can request access to, correction of or deletion of your Personal Information by contacting us at contact@dusa.studio.

Right to non-discrimination. We will not discriminate against you for exercising any of your privacy rights.

15. Australian privacy rights

This section provides more information about your rights under the Australian Privacy Act 1988.

Data subject rights. You can request correction of your Personal Information by contacting us at contact@dusa.studio. You may also have a legal right to obtain a copy of your Personal Information. We will respond to your request within 30 days. We may charge a processing fee for this service where permitted by law. DUSA will provide reasons to you if we are unable to provide access or only provide limited access to your Personal Information.

Complaints. If you have any complaints regarding our handling of your Personal Information, our response to your request, or our compliance with the Privacy Act, please contact us at contact@dusa.studio. If you are dissatisfied with our response, you may raise a complaint with the Office of the Australian Information Commissioner by contacting them at: https://www.oaic.gov.au/about-us/contact-us.

16. Brazilian privacy rights (LGPD)

If you are in Brazil, you may have the following rights under the Lei Geral de Protecao de Dados (LGPD):

Data subject rights. You have the right to confirmation of whether your data is being processed, access to your data, correction of incomplete, inaccurate, or outdated data, anonymisation, blocking, or deletion of unnecessary or excessive data, data portability to another service provider, deletion of personal data processed with your consent, information about public and private entities with which your data has been shared, information about the possibility of denying consent and the consequences thereof, and revocation of consent.

Complaints. If you believe we are processing your Personal Information in violation of the LGPD, you may contact the Autoridade Nacional de Protecao de Dados (ANPD) at www.gov.br/anpd.

17. Mexican privacy rights (LFPDPPP)

If you are in Mexico, you may exercise your ARCO rights (access, rectification, cancellation, and objection) under the Ley Federal de Proteccion de Datos Personales en Posesion de los Particulares (LFPDPPP) by contacting us at contact@dusa.studio. We will respond to your request within 20 business days. The responsible party for the processing of your personal data is DUSA . studio, contactable at the address provided in the "How to Contact Us" section below.

18. International data transfers

DUSA is a company with its headquarters in Australia. As such, we may transfer your Personal Information to our affiliates and service providers in other countries, including the United States. We may also transfer your Personal Information to third-party service providers who may be located in a different country to you.

DUSA transfers information internationally in order to operate efficiently, to improve performance, and to create redundancies to protect information in the event of an outage or other problem. In so doing, we will process your Personal Information in a way that meets the commitments of this Privacy Policy and complies with the law wherever we transfer it.

Whenever DUSA transfers Personal Information beyond the country of origin, we will do so in accordance with applicable laws. For Personal Information originating in the European Economic Area (EEA) or the United Kingdom (UK), we rely on standard contractual clauses or other appropriate safeguards as required under the GDPR or UK GDPR. For Personal Information originating in Brazil, we comply with the transfer mechanisms specified under the LGPD.

19. Changes to this policy

DUSA may change this Privacy Policy at any time, at its discretion. We will notify you of changes if required by law. Your continued use of the Platform after we make changes is deemed to be acceptance of and consent to those changes, so please check the Privacy Policy periodically for updates.

20. How to contact us

To ask questions about this Privacy Policy and our privacy practices, contact us at:

DUSA . studio
Sydney, NSW, Australia
contact@dusa.studio