We Design · We Produce · We Network @dpnmediaworks
Legal

Data Privacy

Last updated 5 August 2026

1. Who we are

This Privacy Policy explains how DPN Media Works ("we", "us", "our"), a media, technology and communications business registered in the Commonwealth of Dominica and operating from Roseau, collects, uses, shares and protects personal data.

It applies when you visit our websites (including dpnmediaworks.com and this Client Portal), contact us or request a consultation, engage our services, or purchase our software licenses, digital downloads or subscriptions. It covers clients, prospective clients and enquirers alike.

We act as the data controller for the personal data described here. Where we build, host or manage systems on behalf of a client, we may act as a data processor for that client and process personal data only on their documented instructions; the client's own privacy notice governs that data.

2. Information we collect

  1. Account data — name, email address, password (stored hashed), company name, phone and country when you register on the portal.
  2. Enquiry and consultation data — the details you share when you send a message through our contact form, email us or book a consultation.
  3. Order and billing data — products purchased, order history, invoices, the domain(s) or forum URL tied to your licenses, and billing address where provided. We do not store full card numbers; payments are handled by our payment providers.
  4. Project data — content, assets, credentials and business information you provide so we can carry out agreed work.
  5. Support data — the contents of tickets, contact-form messages and correspondence with us.
  6. Technical data — IP address, browser and device information, and log data generated when you use our websites or when a licensed product checks in with our license service (including domain or forum URL and seat activation checks).
  7. Usage data — how you interact with our websites and products, used for security, troubleshooting and improvement.
  8. Testimonials — with your permission, we may publish client testimonials including your name and role.

We do not sell or share your personal data, and we do not run advertising or third party behavioural tracking on our websites.

3. How we use your data

  1. To respond to enquiries and provide consultations and quotations.
  2. To create and manage your account and deliver the products and services you purchase or engage us for.
  3. To process payments, issue invoices and manage subscriptions and renewals.
  4. To activate, validate and enforce software licenses, including domain, forum and seat activation checks.
  5. To provide support and send service-related communications such as order confirmations, project updates, receipts, and renewal and expiry notices.
  6. To maintain the security, integrity and performance of our websites, products and systems, and to prevent fraud and abuse.
  7. To meet legal, tax, accounting and regulatory obligations.

Where the EU General Data Protection Regulation or UK GDPR applies, we rely on: performance of a contract with you; your consent (which you may withdraw at any time); our legitimate interests in operating, securing and improving our business, balanced against your rights; and compliance with a legal obligation.

5. Payment processing

Payments are processed by PayPal. When you pay, your payment details are collected and processed directly by PayPal under its own privacy policy. We receive confirmation of payment and limited transaction details such as a transaction ID and payer email, but never your full card details.

6. When we share information

We share personal data only where necessary, and never for sale. Recipients may include:

  1. Payment processors (PayPal), to take payment and manage billing.
  2. Service providers and sub-processors that help us operate, such as cloud infrastructure and hosting providers, content delivery networks, email delivery, appointment scheduling (Google Calendar for consultations) and workflow automation. These parties act on our instructions under appropriate contracts.
  3. Professional advisers such as accountants or legal counsel, where required.
  4. Authorities where we are legally required to disclose, or to protect our rights, users or the public.
  5. A successor entity in connection with a merger, acquisition or reorganisation.

7. Cookies and similar technologies

We use cookies and local storage for essential functions such as keeping you signed in, remembering your cart and theme preference, and protecting against cross-site request forgery. See our Cookie Policy at /legal/cookies for details. Where we use any non-essential cookies, we will seek your consent as required by law.

8. International transfers

We operate from the Caribbean and work with clients and service providers worldwide, so your data may be processed in countries other than your own, including Dominica, the United States and the European Economic Area. Where we transfer personal data internationally, we use lawful transfer mechanisms such as Standard Contractual Clauses or an adequacy decision, and we take steps to ensure your information receives an equivalent level of protection.

9. Data retention

We keep personal data for as long as your account is active and as needed to provide products and services, then for as long as necessary to meet legal, tax, accounting and dispute-resolution obligations. Enquiry data we no longer need is deleted or anonymised. Logs and telemetry are retained for a limited period and then deleted or anonymised.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, to withdraw consent at any time without affecting prior processing, and to lodge a complaint with a supervisory authority. You can update account details from your account, or contact us to exercise other rights. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights.

EU and UK — you have the rights above and may complain to your local Data Protection Authority (in the UK, the ICO). If we rely on legitimate interests, you may object to that processing.

California (CCPA/CPRA) — you may request the categories and specific pieces of personal information we have collected, request deletion or correction, and are entitled to non-discrimination. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.

Canada (PIPEDA) — we handle personal information in line with PIPEDA, including meaningful consent, limiting use to identified purposes, and access on request.

Caribbean and Dominica — we handle personal information in line with applicable Commonwealth of Dominica data-protection principles and any regional frameworks that apply. Where we process data for clients elsewhere in the Caribbean, we do so under our agreements with them.

11. Security

We apply appropriate technical and organisational measures, including encryption in transit (HTTPS), hashed passwords, access controls, rate limiting of sensitive actions, monitoring, backups and least-privilege practices. No method of transmission or storage is completely secure, but we work to keep our safeguards current and to respond appropriately to incidents.

12. Children

Our websites, products and services are directed to businesses and organisations and are not intended for children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date on this page reflects the latest revision. Material changes will be communicated where appropriate.

14. Contact

To ask about this policy or exercise your data rights, contact us at [email protected] or through the contact form on this portal.