Cookie & Privacy Policy

Effective Date: 25^th June 2025
Version: 1.0

1. Policy at a Glance

This policy explains how DOWO Group collects, uses, shares, and protects your personal data across all of our websites, services, platforms, and trading brands.

2. Who We Are

This privacy policy applies to all services, websites, and platforms operated as part of the DOWO Group.

DOWO Digital Limited (Company No. 09462593) is the data controller for your personal information, and is registered with the UK Information Commissioner’s Office (ICO) under Registration Number ZA840393.

DOWO Digital Ltd is part of the DOWO Group (Company No. 15685669). Other entities within the group include DOWO Cloud Ltd (Company No. 16282882), and trading names such as Qudow and NavAura360.

All companies are registered at: Hyde Park House, Cartwright Street, Newton, Hyde, SK14 4EH, UK.

3. What Personal Data We Collect

Account Data: name, email, organisation, and address
Billing Data: invoices and payment history (handled securely via third-party providers)
Technical Data: IP address, browser, device, and usage logs
Support Data: tickets, emails, and chat transcripts
Cookie & Tracking Data: see section 9

4. How We Use Your Data

DOWO Group Companies will use your data to:

Provide services, subscriptions, and support
Process billing and manage transactions
Respond to enquiries and technical issues
Send updates (if you opt in)
Analyse website performance and usage

5. Legal Bases for Processing

We process personal data under one or more of the following legal bases:

Contractual necessity
Your consent (e.g., marketing)
Our legitimate interests
Legal obligations

6. Sharing Your Data

We may share your data with:

Trusted service providers and subprocessors
Legal authorities, if required
Credit or fraud prevention agencies, where appropriate

We do not sell your personal data.

7. International Transfers

Your data may be processed outside the UK or EEA. We ensure adequate safeguards are in place, including standard contractual clauses or certified frameworks.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, contractual, regulatory, or operational requirements. This includes:

Customer and billing data: retained while your account is active and as needed for compliance with financial and legal obligations
Support data: retained for operational reference and customer history, alongside relevant billing records
Job applications: retained only as long as necessary for recruitment and talent management purposes

Some data (such as billing or support records) may be retained beyond account closure where required by law or needed to establish, exercise, or defend legal claims. Requests for data erasure (“right to be forgotten”) will be assessed on a case-by-case basis. Please note that we may be unable to delete data that is required for legal or contractual obligations.

9. Cookies & Tracking

We use cookies to enhance your experience, secure your session, and gather insights into usage. To see what cookies we use, please refer to the table below

Cookie ID	Purpose	Duration
comment_author_email	Used to track the user across multiple sessions.	Session
comment_author_url	Used to track the user across multiple sessions.	Session
comment_author	Used to track the user across multiple sessions.	Session

Learn more

Cookie ID	Purpose	Duration
_gac_	Contains information related to marketing campaigns of the user. These are shared with Google AdWords / Google Ads when the Google Ads and Google Analytics accounts are linked together.	90 days
__utma	ID used to identify users and sessions	2 years after last activity
__utmt	Used to monitor number of Google Analytics server requests	10 minutes
__utmb	Used to distinguish new sessions and visits. This cookie is set when the GA.js javascript library is loaded and there is no existing __utmb cookie. The cookie is updated every time data is sent to the Google Analytics server.	30 minutes after last activity
__utmc	Used only with old Urchin versions of Google Analytics and not with GA.js. Was used to distinguish between new sessions and visits at the end of a session.	End of session (browser)
__utmz	Contains information about the traffic source or campaign that directed user to the website. The cookie is set when the GA.js javascript is loaded and updated when data is sent to the Google Anaytics server	6 months after last activity
__utmv	Contains custom information set by the web developer via the _setCustomVar method in Google Analytics. This cookie is updated every time new data is sent to the Google Analytics server.	2 years after last activity
__utmx	Used to determine whether a user is included in an A / B or Multivariate test.	18 months
_ga	ID used to identify users	2 years
_gali	Used by Google Analytics to determine which links on a page are being clicked	30 seconds
_ga_	ID used to identify users	2 years
_gid	ID used to identify users for 24 hours after last activity	24 hours
_gat	Used to monitor number of Google Analytics server requests when using Google Tag Manager	1 minute

Cookie ID	Purpose	Duration
sbjs_session	The number of page views in this session and the current page path	30 minutes
sbjs_udata	Information about the visitor’s user agent, such as IP, the browser, and the device type	session
sbjs_first	Traffic origin information for the visitor’s first visit to your store (only applicable if the visitor returns before the session expires)	session
sbjs_current	Traffic origin information for the visitor’s current visit to your store	session
sbjs_first_add	Timestamp, referring URL, and entry page for your visitor’s first visit to your store (only applicable if the visitor returns before the session expires)	session
sbjs_current_add	Timestamp, referring URL, and entry page for your visitor’s current visit to your store	session
sbjs_migrations	Technical data to help with migrations between different versions of the tracking feature	session

10. Data Security

We apply industry-standard measures such as HTTPS, encryption, secure infrastructure, access control, and regular monitoring to protect your data.

11. Your Rights

You have the right to:

Access your personal data
Request correction or deletion
Withdraw consent
Object to certain processing activities
Lodge a complaint with the Information Commissioner’s Office: https://ico.org.uk/

12. Children’s Data

Our services are not intended for children under 18. We do not knowingly collect personal data from minors.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with an updated effective date. We will notify you of material changes where required.

14. Contact & Complaints

For questions, concerns or to exercise your data rights:

Email: privacy@dowo.group
Post: DOWO Group, Hyde Park House, Cartwright Street, Hyde, SK14 4EH, United Kingdom