This policy explains what personal data DICITY collects through di-city.com, why we collect it, how long we keep it and what rights you have over it.
This document is a working draft prepared for the DICITY website. Registered company details appear as placeholders in square brackets, and the text should be reviewed by a qualified adviser before publication.
01
Who we are
DICITY operates a network of digital out-of-home advertising displays in street-facing retail and commercial locations in London. For the purposes of UK data protection law, the data controller is [REGISTERED COMPANY NAME], company number [COMPANY NUMBER], registered at [REGISTERED ADDRESS].
Data protection enquiries can be sent to the contact address published on our contact page. If we are registered with the Information Commissioner’s Office, our registration number is [ICO REGISTRATION NUMBER].
02
What we collect
We only collect what you send us. Across the three forms on this site that means:
- Advertiser enquiries: name, company or agency, work email, telephone, campaign name, preferred London areas, estimated dates, estimated budget, number of locations required, creative format and any additional details you provide.
- Location submissions: name, company, email, telephone, location address, postcode, type of location, approximate window dimensions, power availability, a description of pedestrian visibility, any photographs you upload, additional information, and your confirmation that you are authorised to discuss the location.
- General enquiries: name, company, email, telephone, the subject of your enquiry, any location reference and your message.
- Technical data generated by our hosting provider when a page is served, such as your IP address and request headers, retained in server logs for security and abuse prevention.
03
Why we use it and on what basis
- To respond to your enquiry and to prepare a media proposal or location assessment — our legitimate interest in responding to a request you have made, and the steps necessary to enter into a contract.
- To assess whether a submitted location is suitable for the network, including reviewing photographs and frontage details you send us — the steps necessary to enter into a contract.
- To keep records of correspondence and agreements — our legitimate interest in running the business and our legal obligations.
- To keep the site secure and available — our legitimate interest in protecting our systems.
- To measure aggregate site usage, if and only if you accept analytics cookies — your consent, which you can withdraw at any time.
04
Who else sees it
We do not sell personal data, and we do not share enquiry details with advertisers, landlords or other third parties for their own marketing.
We do rely on service providers who process data on our behalf. This site is hosted by Netlify, whose form handling receives and stores submissions before they reach us. Email is handled by our mail provider. Where a provider processes personal data outside the UK, we rely on the transfer safeguards in that provider’s data processing terms.
05
How long we keep it
Enquiries that do not lead to a commercial relationship are kept for no longer than 24 months from your last contact with us, then deleted.
Where an enquiry becomes a campaign or a location partnership, we keep the records for the duration of the relationship and for six years afterwards, in line with normal UK accounting and contractual record-keeping.
Photographs submitted with a location that we do not proceed with are deleted when the enquiry is closed.
06
Your rights
We respond to requests within one month. If you are not satisfied with our response you can complain to the Information Commissioner’s Office at ico.org.uk.
Under UK data protection law you can ask us to:
- Confirm what personal data we hold about you and give you a copy of it.
- Correct anything that is inaccurate or incomplete.
- Delete data we no longer have a reason to keep.
- Restrict or object to how we use it, including any processing based on our legitimate interests.
- Transfer data you gave us to another provider in a portable format.
- Withdraw consent for analytics cookies, which you can do at any time by clearing this site’s stored preference in your browser.
07
Security
The site is served over HTTPS only. Form submissions are transmitted over an encrypted connection and stored in our hosting provider’s form dashboard with access restricted to the people who need it. We keep the number of systems holding enquiry data deliberately small.
08
Children
This is a business-to-business website. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
09
Changes to this policy
When this policy changes we update the date at the top of the page. Material changes affecting how we use data you have already sent us will be notified directly where we hold contact details for you.