Legal
Privacy notice
How DOJA GROUP LIMITED ("doja", "we") collects and uses personal information when you visit this site, send us an enquiry, apply through Careers or use our client portal. Written to meet UK GDPR and the Data Protection Act 2018.
01
Who we are
DOJA GROUP LIMITED is the data controller for the information described here. Registered in England and Wales, company number 14560571.
Registered office: 61 International House, Mosley Street, Manchester, England, M2 3HZ
Data protection contact: subscriptions@doja.ai
02
What we collect and why
| Information | Why we hold it | Lawful basis |
|---|---|---|
| Name, email, company, phone and the message you send in an enquiry form | To reply to you and discuss working together | Legitimate interests, and steps taken at your request before entering a contract |
| Careers and Afternoon Session applications: your name, contact details, background, availability and the personal story you write | To assess your application and arrange a session | Legitimate interests, and steps taken at your request before entering a contract |
| Client portal accounts: name, work email, organisation, role and sign-in records | To give you secure access to your programme | Performance of our contract with you or your organisation |
| Files, comments, tasks and evidence you add in the client portal | To deliver and record the work we do together | Performance of contract |
| Technical request data held briefly by our hosting provider, such as IP address | To serve the site securely and prevent abuse | Legitimate interests |
| Analytics data, only if you accept optional cookies | To understand how the site is used and improve it | Consent, which you can withdraw at any time |
We do not sell your information or share it for third-party marketing. We do not send marketing email unless you ask us to. We do not make decisions about you using only automated means.
04
Who processes it for us
We use a small number of service providers who process data on our instructions: our website hosting and database provider, our email delivery provider, Google (for staff sign-in), and any analytics provider you have agreed to. They act as processors under contract. Some may store data outside the UK. When they do, transfers are protected by a UK adequacy decision or the UK International Data Transfer Addendum. We can provide the current list on request.
05
How long we keep it
- Enquiries: 24 months from your last contact with us, then deleted.
- Careers applications: 24 months from the date you apply, then deleted.
- Client portal accounts and programme records: for the length of our contract, then six years to meet legal, tax and accounting duties.
06
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, ask for it in a portable format, and withdraw consent at any time. Email subscriptions@doja.ai and we will respond within one month.
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
07
Changes to this notice
We update this notice when our practices change. The date at the top shows the current version.