Privacy Policy

At a glance

• What we collectWhat you type in our contact, demo and risk assessment forms, emails you send us, and technical data about your visit.
• Why we use itTo answer your requests, protect our forms from spam, keep the website fast and secure, and understand how it is used.
• Who receives itGoogle (Analytics, reCAPTCHA, Fonts), our hosting provider and our email services. A visitor script only with your consent.
• CookiesNecessary cookies always. Statistics and third-party cookies only after you accept them where the law requires it.
• How long we keep itOnly as long as we need it for the purpose we collected it for. Then we delete it.
• Your rightsAccess, correction, deletion, objection and more. Email info@dictalabs.com to use them.

Who we are

This website is run by DictaLabs LLC (“DictaLabs”, “we”, “us” or “our”). DictaLabs LLC is the data controller responsible for the personal data collected through this website.

If you have a question about this policy or about your personal data, email us at info@dictalabs.com.

What data we collect

Forms on our website

We collect the information you enter in our forms:

• Contact form (on the Contact Us page): your name, email address, phone number, company name (optional), the topics you are interested in, and your project details.
• Demo request forms (for Certinium CLM and vScrawl): your name, email address, phone number, company name, company size and project details. Only the email address and phone number are required.
• PKI risk assessment form (on the PKI Risk Assessment page): your name, work email address, phone number (optional), company (optional) and your main challenge with certificates.

When you send a form, your message is emailed to our team. A copy of the message is also saved in our website’s database.

You do not have to fill in our forms. If you leave out a required field, the form cannot be sent and we may not be able to reply to your request.

Spam protection (Google reCAPTCHA)

Our forms use Google reCAPTCHA to check that a form is sent by a person and not by an automated program. To do this, reCAPTCHA collects information about your device, your browser and how you use the page, including your IP address, and sends it to Google. Google may also set cookies for this purpose.

Website statistics (Google Analytics)

We use Google Analytics 4, added to our website through the Site Kit by Google plugin, to understand how visitors use our website. Google Analytics collects information such as the pages you visit, how long you stay, the type of device and browser you use, your approximate location (worked out from your IP address) and the website that sent you to us.

When you send one of our forms, Google Analytics also records that a form was sent. It does not record the details you typed into the form.

Where the law requires your consent, we only use Google Analytics cookies after you accept them in our cookie banner.

Third-party visitor script

Our website can also load a script from a third-party provider. This script may identify the companies whose employees visit our website. When it loads, the provider receives information about your visit, such as your IP address, your browser details and the page you are viewing.

This script loads only after you give your consent in our cookie banner.

Hosting, server logs and page caching

Our website runs on servers provided by a web hosting company. Like most web servers, our server automatically records technical information about each visit in log files, such as your IP address, the date and time, the page you asked for, the website that sent you to us and your browser type.

We use LiteSpeed Cache to keep ready-made copies of our pages so that they load faster. It does not build profiles of visitors.

Fonts

Our website loads a font (Inter) from Google Fonts. When a page loads the font, your browser connects to Google’s servers, which receive your IP address and browser details.

Emails you send us

If you email us at info@dictalabs.com, we receive your email address, your name if you include it, and anything you write in your message.

Why we use your data and our legal reasons

Privacy laws such as the EU GDPR and the UK GDPR require a legal reason (a “legal basis”) for each use of personal data. This is what we use your data for, and the legal reason for each use:

• To reply to your enquiry, demo request or risk assessment request, and to arrange the calls, demos or proposals you ask for. Legal reason: to take the steps you asked for before a possible contract, and our legitimate interest in answering business enquiries.
• To protect our forms against spam and abuse (Google reCAPTCHA). Legal reason: our legitimate interest in keeping our website and forms safe. Where the law requires consent for this, we ask for it first in our cookie banner.
• To understand how our website is used and to improve it (Google Analytics). Legal reason: your consent, where the law requires it. Where consent is not required, our legitimate interest in improving our website.
• To learn which companies visit our website (third-party visitor script). Legal reason: your consent.
• To deliver our website and keep it fast, working and secure (hosting, server logs, page caching and fonts). Legal reason: our legitimate interest in running a reliable and secure website.

“Legitimate interest” means we have a genuine business reason to use your data, and we have weighed that reason against your rights. You can object to this use at any time (see “Your rights” below).

Where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect what we did before you withdrew it.

Cookies

Cookies are small text files that a website stores in your browser. Our website uses:

• Necessary cookies, which the website needs to work, including a cookie that remembers your cookie choices.
• Statistics cookies from Google Analytics (their names start with “_ga”). Where the law requires consent, these are only set after you accept them.
• Cookies and similar technologies used by third-party services, such as Google reCAPTCHA on our forms and the third-party visitor script, which only loads after you give consent.

Our cookie banner, provided by the Complianz consent tool, lets you accept or refuse cookies that are not necessary. You can change your choice at any time in our cookie settings. You can also delete cookies in your browser settings.

The full list of cookies, with what each one does and how long it lasts, is shown in our cookie policy. That list is produced and kept up to date by our consent tool.

How long we keep your data

We keep personal data only as long as we need it for the purpose we collected it for. After that, we delete it.

• Form messages and emails: as long as needed to deal with your request and any follow-up, then deleted.
• Google Analytics data: as long as needed for our website statistics, then deleted.
• Server logs: as long as needed to run and protect our website, then deleted.
• Cookies: for the time shown in our cookie policy, unless you delete them sooner.

Who we share your data with

These service providers receive personal data through our website:

• Google, for Google Analytics (website statistics), Google reCAPTCHA (spam protection) and Google Fonts (fonts). To learn how Google handles data, see Google’s Privacy Policy.
• Our website hosting provider, which stores our website, its database (including copies of form messages) and our server logs.
• The services we use to send and receive email, which deliver and store form messages and emails sent to info@dictalabs.com.
• The provider of the third-party visitor script, only if you give your consent.

International transfers

Google may process data in the United States and in other countries where Google or its service providers operate. Our other service providers may also process data outside your country. These countries may not have the same data protection laws as your country.

Google states that it relies on legal safeguards for these transfers, such as the European Commission’s standard contractual clauses and the EU-U.S. Data Privacy Framework. You can read more in Google’s Privacy Policy.

Your rights

Depending on where you live, you may have the following rights over your personal data.

EU, EEA and UK (GDPR and UK GDPR)

• Access: ask for a copy of the personal data we hold about you.
• Correction: ask us to correct data that is wrong or incomplete.
• Deletion: ask us to delete your data.
• Restriction: ask us to limit how we use your data.
• Objection: object to our use of your data when we rely on legitimate interests.
• Portability: ask us to give you the data you provided to us in a common electronic format, or to send it to another organization.
• Withdraw consent: at any time, for example in our cookie settings.
• Complaint: complain to the data protection authority in your country. In the UK, this is the Information Commissioner’s Office (ICO).

California (CCPA, as amended by the CPRA)

If California privacy law applies to you, you may have the right to:

• know what personal information we collect, use and disclose, and get a copy of it;
• ask us to correct or delete it;
• opt out of the “sale” or “sharing” of your personal information. You can refuse the third-party visitor script and Google Analytics cookies in our cookie settings;
• not be treated differently because you used these rights.

Privacy laws in other US states may give you similar rights.

How to use your rights

Email us at info@dictalabs.com. We may need to confirm your identity before we act on your request. We will reply within the time the law requires.

How to contact us

If you have a question about this policy or about how we use your personal data, email us at info@dictalabs.com.

Changes to this policy

We may update this policy when our website or the services we use change. When we do, we will post the new version on this page and change the “Last updated” date at the top.