Privacy policy
Last updated 23 August 2026This policy explains what personal data DUVA LTD collects, why we collect it, and what you can do about it. We are the data controller for the information described here.
Who we are
DUVA LTD, registered in England & Wales, company no. 00000000. Registered office: [registered office address]. You can reach us at team@duva.london.
What we collect
- Enquiry details. When you use the form on this site or email us: your name, business name, business type, area or postcode, email address, optional phone number and whatever you write in the message.
- Client data. If you become a client: the business information needed to run the process, such as sales and stock reports from your own systems, and access to accounts you ask us to manage.
- Correspondence. Emails, messages and meeting notes exchanged with you.
This website does not use advertising or analytics cookies. Fonts are loaded from Google Fonts, which receives your IP address as part of that request.
Why we use it
- To reply to your enquiry and arrange a meeting — our legitimate interest in responding to people who contact us.
- To deliver the process you have signed up for — performance of our contract with you.
- To keep accounting and tax records — our legal obligations.
Who we share it with
We do not sell your data and we do not pass it to anyone for their own marketing. We use a small number of service providers to run the business — email hosting, cloud storage, accounting software, and the advertising and delivery platforms you ask us to work on. Each of them processes data only on our instructions.
How long we keep it
Enquiries that do not become work are deleted after 12 months. Client records are kept for the length of the engagement and then for six years, which is the period we are required to keep financial records for.
Where it is held
Data is held in the UK and the European Economic Area wherever possible. Where a provider stores data elsewhere, we rely on the UK's approved transfer mechanisms.
Your rights
Under UK GDPR you can ask us for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to restrict its use. Email team@duva.london and we will respond within one month.
If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
If we change this policy we will update the date at the top of this page. Material changes will be sent to current clients directly.