Privacy policy.

Who is responsible

DAK Projects is a trading name of AdexArk Ltd, registered in England and Wales, company number 13840986. Registered office: 20-22 Wenlock Road, London, England, N1 7GU.

AdexArk Ltd is responsible for personal information used to run the DAK Projects website, respond to enquiries, manage DAK accounts and provide its own services. Contact contact@dakprojects.co.uk for privacy enquiries, requests or complaints.

This notice covers the main website, project management and creative-service enquiries, DAK account sign-in, DAK Invoicer and hosted DAK Gallery services. Browsing this website does not upload photographs stored on your device.

Information handled

Website visits and enquiries

Connection details such as IP address, requested page, browser information, time and response status may appear in operational or security logs. An enquiry includes your email address, name and whatever project, booking or business information you choose to send. Booking and business enquiry forms collect the service or product of interest and the details needed to respond. Depending on the enquiry, this can include an organisation, location, date or timeframe, approximate budget, team size and a project brief, with phone details where supplied. Requests are saved in a private business inbox so they are not lost if email delivery is unavailable.

Accounts and business records

DAK accounts hold sign-in details, a password hash, account permissions and security records. DAK Invoicer stores the business, client, service, invoice, tax, payment and document information entered by authorised account users. It does not process card payments.

Photographs and client galleries

DAK Gallery stores files selected for upload, their filenames and supplied metadata, photographer profiles, gallery settings and delivery files. Client interaction may include a display name, favourites, comments and submitted selections. The photographer can see that feedback. When you allow optional analytics, gallery visits, photograph views and downloads are also recorded against the gallery reviewer linked to your browser session. This may be associated with a display name or feedback identity you supply. The photographer sees aggregated statistics for their gallery. A gallery link or optional password controls access, so share these only with intended recipients.

These analytics consent controls were introduced on 31 October 2026. Earlier gallery statistics may remain in photographer totals and can predate these controls. Contact the privacy address to ask about those records or make a rights request.

Information is received directly from you or from the business, photographer or authorised account user who supplies it. Images can contain personal information about the people shown. For photography and film commissions, the agreed project may also involve images, audio, booking details and delivery correspondence.

Purposes and lawful bases

• Enquiries, bookings and requested services: steps requested before a contract, and performance of a contract where you are the customer.
• Business contact communication and account administration: legitimate interests in responding to business contacts and providing the requested service.
• Security, fault investigation and service operation: legitimate interests in protecting accounts, preventing misuse and keeping services reliable.
• Records required by law: compliance with applicable legal obligations, including accounting and tax duties where relevant.
• Optional activities that require consent: consent would be requested separately before that activity. Optional DAK Gallery analytics use consent. They remain off unless you opt in and can be turned off through Cookie settings. No advertising cookies are used.

No decisions with legal or similarly significant effects are made about you solely by automated processing through these websites. Hosted gallery photographs are not used by the service for advertising or training AI models.

Information is not mandatory simply to browse public pages. Account credentials are needed for sign-in; the information required for a requested service depends on that service. Withholding required information may prevent access or delivery.

Information held for customers

A business using DAK Invoicer or a photographer using DAK Gallery normally decides why and how its clients’ information is used. That business is the controller for those records; DAK Projects provides the hosted service on its behalf.

For an invoice, photograph or gallery supplied by another business, contact that business first about its processing or a correction or deletion request. DAK Projects can help identify the responsible account and assist with requests, subject to verification and the customer’s lawful instructions. Customer records are not repurposed for DAK advertising.

A customer’s own privacy notice and agreed data processing terms also apply. This notice describes the services; it does not replace the customer’s obligations to its clients or people appearing in photographs.

Providers and international handling

Access is limited to authorised users and service administration, and to providers needed to operate the service. Information may also be disclosed where required by law or necessary to establish or defend a legal claim.

• Hosting: netcup provides the server hosting in Germany for the website and hosted applications. Application files, databases and encrypted server backups are held on that infrastructure.
• Email: public correspondence is received through Zoho Mail’s EU service. Your own email provider also processes messages you send.
• Domain services: Cloudflare provides DNS for the domain. The current site is not configured to proxy visitors through Cloudflare’s CDN.

Service administration and authorised recovery copies may be handled in the UK. UK adequacy regulations cover transfers to the EEA, including Germany. Zoho states that its EU-hosted service can involve limited support access from India under EU Standard Contractual Clauses and supplementary measures. See Zoho’s privacy information. Contact the privacy address for details or copies of the transfer arrangements relevant to your information.

The public pages do not embed third-party advertising, social-media widgets, externally hosted fonts or analytics scripts. Following an external link takes you to a service with its own privacy information.

How long information is kept

Retention depends on the purpose, the customer’s instructions, service needs and any legal or dispute-related obligations. There is no single deletion period for all DAK information.

• Enquiries and project correspondence: kept for the enquiry, follow-up and any resulting work, and where needed for accounting, a complaint or a legal claim.
• Accounts and business records: kept while needed to provide the account and maintain required records. Issued invoices, payments and audit history are retained in the service; they do not disappear when an invoice is marked paid. Customers remain responsible for their own statutory retention decisions.
• Galleries and feedback: kept until the account owner removes them or a verified deletion request is actioned. DAK Gallery expiry closes access and does not itself delete photographs or feedback. Changes to feedback may leave an audit history.
• Optional gallery statistics: daily reviewer-linked visits and photograph statistics remain with the gallery unless the owner deletes it or a verified request is actioned. Retry identifiers become eligible for cleanup after seven days. Withdrawing cookie consent stops future optional recording; it does not automatically erase past statistics. Contact the privacy address about earlier records.
• Replaced gallery files: retained revisions become eligible for scheduled cleanup after 30 days. This is not a 30-day deletion promise for current galleries.
• Backups: routine encrypted server backups rotate on a 14-day retention setting; a daily archive can remain until the next cleanup. Separately retained recovery copies and records needed for a legal hold are managed as part of the relevant request.
• Operational logs: rotate by size, so their retention varies with activity. Security records are kept as needed to investigate misuse and manage access.

Deletion from a live service may precede expiry of a protected backup. Retained backup data is restricted to recovery, and a deletion request must be reapplied if a backup is restored. Email the privacy contact to ask about retention or request removal.

Your rights

Depending on the processing and circumstances, you may request access, correction, erasure, restriction or a portable copy of your personal information. These rights have conditions and are not absolute. Where consent is the basis, it can be withdrawn without affecting earlier lawful use. Use Cookie settings to withdraw optional gallery analytics at any time. Browsing, downloads, favourites, comments and sign-in remain available after rejection or withdrawal.

Send a request to contact@dakprojects.co.uk. Include enough detail to identify the information and service concerned. Proportionate identity verification may be needed. Requests are normally answered within one month; a lawful extension or clarification may be necessary, and the reason will be explained.

Questions and complaints

Privacy complaints will be acknowledged within 30 days, investigated without undue delay, and followed by an explanation of the outcome. You will be kept informed where more time is needed.

You also have the right to complain to the UK supervisory authority through the ICO complaint service. You do not lose that right by contacting DAK Projects first.

Changes to this notice

This notice reflects the services and technologies reviewed on 1 November 2026. Material changes will be reflected here with a new review date. Optional tracking will require a separate assessment and any necessary controls before activation.

See the cookie policy for the browser storage inventory and website terms for use of the site.