Privacy Policy

This Privacy Policy explains how Deir Group Ltd (trading as Turbo Duck Studio) collects, uses, and protects any information about you when you use our website and services.

Who we are

Data controller: Deir Group Ltd, trading as Turbo Duck Studio, registered in England and Wales (Company No. 17111762).

Registered address: 128, City Road, London, EC1V 2NX, United Kingdom.

Contact: If you have questions about this policy or wish to exercise any of your data rights, email us at privacy@deirgroup.com.

ICO registration: Our data processing activities are currently being registered with the Information Commissioner's Office (ICO). As a small business processing limited personal data, our registration is in progress.

What data we collect

Information you provide directly: When you book a call via Cal.com or submit a contact form, we collect your name, email address, and any other information you choose to share with us.

Website usage data: We use Fathom Analytics, a privacy-focused analytics tool that does not use cookies and does not collect personal data. Fathom collects only aggregate, anonymised page view data — no IP addresses are stored, no personal information is gathered, and you are not tracked across websites.

Payment information: We do not collect payment card data on our website. Invoices are sent via Monzo Business and payments are made by bank transfer directly to our business account.

We do not collect special category data (such as health, race, religion, or political opinions).

How we collect it

Directly from you: When you fill in our contact form, book a call via Cal.com, or communicate with us in any way.

Automatically: When you browse our website, Fathom Analytics automatically collects anonymised, aggregate page view data. Because Fathom does not use cookies and does not collect personal data, it operates without requiring your consent under UK GDPR.

We do not use any other tracking technologies, cookies, or third-party analytics tools.

Why we collect it (lawful basis)

Contact form and booking data: We process this data under the lawful basis of legitimate interest — to respond to your enquiry, provide our services, and take pre-contractual steps at your request.

Analytics data: We process aggregate, anonymised website usage data under the lawful basis of legitimate interest — to understand how visitors use our site and improve it.

If we ever introduce marketing communications, we will only do so with your explicit consent, which you can withdraw at any time.

Who we share it with

We do not sell, rent, or trade your personal data. The only third parties who may process your data are:

• Cal.com — our booking platform. When you book a call, Cal.com processes your name, email address, and any information you provide in the booking form. Their privacy policy applies.
• Fathom Analytics — receives only anonymised, aggregate page view data. No personal data is shared. Their privacy policy applies.
• Monzo Business — payments are processed by Monzo Business. Their privacy policy applies.
• Tally — our form provider. When you submit a contact form or audit request, Tally processes your name, email address, and any information you provide. Their privacy policy applies.
• Stripe — powers card payment processing through our invoicing platform. Their privacy policy applies.
• Netlify — our website hosting provider. Their privacy policy applies.

We will not share your data with any other third party without your consent, unless required to do so by law.

How long we keep it

Contact and booking data: We retain personal data for the duration of our business relationship plus a period of 6 years afterwards, in line with UK statutory limitation periods.

Analytics data: Fathom Analytics does not store personal data. Aggregate statistics are retained indefinitely but contain no personally identifiable information.

We review our data holdings annually and delete data that is no longer needed.

Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate personal data
• Right to erasure — to request deletion of your personal data
• Right to restrict processing — to request that we limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interest
• Right to withdraw consent — where consent is the lawful basis for processing

To exercise any of these rights, email us at privacy@deirgroup.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We do not use cookies on this website for analytics, advertising, or tracking. Fathom Analytics is a privacy-focused, cookieless analytics tool.

Our website hosting provider (Netlify) may use essential cookies for basic site functionality. These are not used for analytics or tracking purposes.

Because we do not use non-essential cookies, no cookie consent banner is required under UK GDPR or PECR.

International transfers

Fathom Analytics: Processes data within the EU. GDPR-compliant.

Cal.com: May process booking data outside the UK. Appropriate safeguards are in place.

Netlify: May process server logs in the US. Standard Contractual Clauses (SCCs) apply.

Children's data

Our services are not directed at individuals under 18. We do not knowingly collect data from children. If you believe we have inadvertently collected data from a child, please email us at privacy@deirgroup.com.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.

This policy was last updated on 5 April 2026. While we've made every effort to ensure accuracy, this document does not constitute legal advice. If you have questions, email privacy@deirgroup.com.