Privacy notice
Your information should move with less friction, too.
Effective 2 August 2026 · Version 1.0
The initial Dotum site does not ask for personal details to show the diagnostic preview, does not use advertising trackers, and does not sell personal information.
Who is responsible
Dotum is currently a project operated by Aaron Koshy. For data protection purposes, Aaron Koshy trading as Dotum is the controller of personal information collected through this site.
Contact: hello@joindotum.com.
What we collect
- Information you choose to send by email, such as your name, work email, company, role and message.
- Limited technical and security logs generated by our hosting provider, such as request time, page requested, browser or device information and IP address.
- If the diagnostic is enabled later, the answers, assumptions and results you choose to submit. The initial preview does not collect or store these inputs.
Please do not send personal data about other people or information that is not needed for your enquiry.
Why we use it
- To respond to enquiries and early-access requests. We rely on our legitimate interests in communicating about the service and, where relevant, steps you ask us to take before working together.
- To operate, secure and improve the site. We rely on our legitimate interests in maintaining a safe, reliable service.
- To send optional marketing only when you have actively consented. You can withdraw that consent at any time.
- To meet legal obligations or establish, exercise or defend legal claims where necessary.
The diagnostic may create an indicative suitability category, but it is not used to make a solely automated decision with legal or similarly significant effects.
Analytics and cookies
At this initial launch, Dotum does not set non-essential analytics or advertising cookies. We recommend Plausible for the next release because it provides aggregate, cookie-free site measurement and is hosted in the EU. It will be added only after the account and data processing terms are reviewed.
Essential hosting or security technologies may still be used to deliver and protect the site. We will update this notice before introducing any materially different tracking.
Who receives it
We may use vetted providers for hosting, security, email delivery, customer relationship management, booking and report delivery. Providers may act only on our instructions and only for the stated purpose. We do not sell personal information or share it for cross-context behavioural advertising.
Some providers may process information outside the UK. Where required, we use an adequacy decision or appropriate contractual safeguards and assess the protection available.
How long we keep it
- Routine security and access logs: normally 30 days.
- Enquiries and early-access correspondence: up to 24 months after the last meaningful interaction.
- Future diagnostic submissions and generated reports: proposed maximum of 24 months after the last interaction, unless you ask for earlier deletion or a longer period is needed for a live engagement.
- Marketing preferences: until you withdraw consent or after 24 months of inactivity. A minimal suppression record may be kept so that we continue to respect an opt-out.
- Backups: deleted or overwritten on their normal cycle, targeted at no more than 35 days.
We review retention at least annually and delete or anonymise information that is no longer needed.
Your choices and rights
Depending on where you live and the reason we use your information, you may have rights to access, correct, delete, restrict or obtain a copy of your information, and to object to some uses. You may withdraw consent at any time.
We do not sell personal information. Based on the project's current scale and activities, we do not believe Dotum meets the California Consumer Privacy Act business thresholds. We nevertheless aim to honour reasonable access, correction and deletion requests from US users as the service develops.
Email hello@joindotum.com to make a request. UK users may also complain to the Information Commissioner's Office at ico.org.uk.
If you object to direct marketing, we will stop using your information for that purpose.
Security and changes
We use proportionate technical and organisational measures, including encrypted connections, access controls, data minimisation and restricted access to commercially sensitive submissions. No internet service can promise absolute security.
We will update this notice as the diagnostic, analytics, CRM, booking or report-delivery services are introduced. Material changes will be highlighted before the new use begins.