Privacy & Cookies

Last updated: 17 November 2025

Privacy Policy

1. Who we are

This privacy & cookies policy explains how Due Diligence Design UK Ltd and Due Diligence Design SAS (together, “we”, “our”, or “us”) collect, use and protect your personal data when you use our website and SaaS platform at adaengine.com (“Website” or “Services”).

  • Due Diligence Design UK Ltd – Registered in England & Wales, company no. 11962146. Registered office: Due Diligence Design UK Ltd, 14th Floor, The Plaza, 100 Old Street, Liverpool, L3 9QJRH, UK.
  • Due Diligence Design SAS – SIRET no. 889 505 228 00011. Registered office: 21 Rue du Moulin de Pierre, Issy-les-Moulineaux, 92130, France.
  • For data protection purposes, the two entities act as joint controllers of your data. You can contact us at: [email protected]

2. What data we collect

We collect the following types of data:

  • Information you provide directly
  • Name, email address, phone number, company, job role
  • Login and account details when you create a user profile
  • Payment and billing information (if you subscribe to paid services)
  • Any communications you send us (support requests, enquiries, surveys, feedback)

Information collected automatically:

  • IP address, device type, operating system, browser type and version
  • Usage data: pages visited, features used, clickstream data, page response times
  • Cookies and tracking data (see Section 4).

3. How We Use Your Data (and legal bases)

We process your personal data for the following purposes:

  • To provide our Services (contract)
  • To process payments (contract/legal obligation)
  • To communicate with you (legitimate interests)
  • To send marketing emails (consent)
  • To improve our Website and Services (legitimate interests with consent for cookies/analytics)
  • To keep our Services secure (legitimate interests)
  • To comply with the law (legal obligation)

4. Cookies & tracking

ADA uses cookies and similar tracking technologies:

  • Strictly necessary cookies: These cookies are essential for ADA to function.

  • Analytics cookies (optional): These cookies come from Google Tag Manager or Google Analytics and are used for tracking purposes. They are only activated after you provide clear, informed consent.

See our Cookie Policy below for further information. You can change your preferences at any time by selecting “Manage cookies” in the footer.

5. Sharing your data

If your organisation provides or manages your account, we may share limited account and usage information with your organisation (such as account status, role and access details) to help administer and manage the Services. Individual users will not be able to view the activity of other users.

6. International data transfers

Some service providers are outside the UK/EU. Where this occurs, we apply safeguards such as adequacy decisions, Standard Contractual Clauses (SCCs) with UK Addendum, and technical measures such as encryption.

7. Data retention

We keep your personal data only for as long as necessary for the purposes set out in this policy:

  • Account data: while active up to 6 years
  • Marketing data: until you withdraw consent
  • Analytics data: up to 26 months
  • Support enquiries: up to 3 years
  • Security and system audit logs: up to 12 months (longer if needed for investigation/legal obligations)

After this, data is securely deleted or anonymised.

8. Your rights

You have rights of access, rectification, erasure, restriction, portability, objection, withdraw consent, and not to be subject to automated decisions.

Contact: [email protected]. You can also complain to ICO (UK) or CNIL (France).

9. Security

We use appropriate technical and organisational measures to protect your data, including:

  • Encryption in transit and at rest
  • Access controls and authentication
  • Regular security testing and monitoring
  • Restricted staff access on a need-to-know basis

No system is completely secure, and we cannot guarantee absolute security.

10. Children’s data

Our Services are not directed to children under 16. We do not knowingly collect children’s data. If you believe we have done so, please contact us to request deletion.

11. Layered notices & changes

In certain contexts (such as events, webinars, or pilot programmes), we may provide an additional privacy notice that applies alongside this Policy.

We may update this Policy from time to time. Updates will be posted with a revised ‘last updated’ date.

12. Contact us

If you have questions about this Policy or how we handle your data, please contact us: [email protected].

Cookie Policy

1. Scope

This Cookie Policy applies only to ADA, the SaaS platform operated by Due Diligence Design. It does not apply to Due Diligence Design’s main website or other services.

2. Introduction

When you use ADA, we place and read cookies and similar tracking technologies on your device. This Cookie Policy explains what cookies we use, why we use them, and how you can manage your preferences.

3. What are cookies and trackers?

Cookies and other trackers are small identifiers placed on or read from your device when you use an online service. They may be stored or accessed by us or by third parties (e.g., analytics providers).

4. Cookies we use

a. Strictly necessary cookies
These cookies are essential for ADA to function. We use a PHP $_SESSION which creates a cookie with the session ID number in it to marry a user to a login session on the server.

b. Analytics cookies (optional)
These cookies come from Google Tag Manager or Google Analytics and are used for tracking purposes. They are only activated after you provide clear, informed consent.

5. Managing consent and preferences

  • On your first visit to ADA, you will see a cookie banner allowing you to accept or refuse optional cookies.
  • You may change or withdraw consent at any time via the cookie-preferences link or your browser settings.
  • Refusing optional cookies will not affect your ability to use ADA.

6. Retention and third-party cookies

  • Essential cookies: kept only for your active session.
  • Optional cookies (Google Tag Manager / Google Analytics): data may be retained for up to 26 months, depending on the configuration of our analytics tools.
  • Google Tag Manager itself does not store cookies; however, it may deploy third-party tags (such as Google Analytics) that do.
  • Google Analytics cookies may collect anonymous information about how users interact with ADA to help us improve performance and user experience.
  • You can learn more about Google’s retention and privacy practices at the following links: https://policies.google.com/technologies/cookies and https://support.google.com/analytics/answer/7667196.

7. Updates to this policy

We may update this policy to reflect changes in our cookie use. A revised version will include a new “Last updated” date.

8. Contact us

If you have questions about this Policy or how we handle your data, please contact us: [email protected].