What information we collect and hold
We will collect “metadata”, comprising your name and email address at time of registration. We will use your credit card details to process your payment but will not retain those details. We will not record your password or encryption key to use our service.
How and why we will collect, hold and use personal information
Registration and user-generated data will be stored in encrypted form in Dekko’s database. The registration data will be managed by the Dekko administrator and user data will be encrypted using the user’s private key which is not available to anybody else. Dekko’s audit log will store metadata for all user transactions such as logon, messages sent/received and document upload/download. A user’s registration data will be subject to verification on login and we may inform a user if unusual activity is detected.
How long we keep your information
We will retain all your data and personal information while you are subscribed to our service. If the administrator of your Dekko “circle of users” cancels your subscription service, we will immediately delete all retained information relating to all users in that circle.
Your data will be encrypted by you before upload to the System and we do not and cannot access that data unless we are provided with the decryption key. You may give third parties access to your data by providing them with a link and your logon credentials and you shall be responsible for their compliance with this Policy.
If we think it is necessary or are required by law to do so, we are entitled to give your information to the authorities. We reserve the right to assist any law enforcement agency with investigations, including and limited to by way of disclosure of information to them or their agents. We also reserve the right to comply with any proper legal processes, including -but not limited to -subpoenas, search warrants and court orders. If necessary, we may disclose your information to enforce our Terms or any other agreement we have with you or to protect the rights, property, or safety of other users or the operation of our services and the website.
We will not sell or otherwise provide your personal information to a third party or make any other use of personal information for any purpose which is not specifically allowed under this Policy or our Terms or is not incidental to the normal use of our services.
We strongly urge you to use robust anti- virus and firewall protection for your own system as we cannot guarantee that other software may be present on your device and be used to capture your logon credentials and then can access to your dekko account. If you lose, forget or allow third party access to your logon credentials, you will lose the security of your data. At this point you may be able to reset your password by asking your nominated dekko user to assist with password reset but if this was not setup then we have no ability to recover your data and only option would be for the circle administrator to disable your account.
We may send bills, service updates and various other notices to you by email or using any internal messaging system we may provide as part of our service. If appropriate, those notices will contain an ‘unsubscribe’ facility and we will abide by any ‘unsubscribe’ request (other than in relation to messages that we must send you for billing, security or other service provider purposes).
How you may access your personal information.
Users can change their full name and external email address within the Dekko System, but a user’s identifier cannot be changed following the registration process.
Questions and comments regarding this policy should be addressed to the Privacy Officer at firstname.lastname@example.org
Changes to our Policy
We may make necessary changes to this Policy to comply with any changes to the law or our procedures, all of which will be posted on this website.