DASH Privacy Policy & Cookie Notice

DASH Privacy Policy

Last updated: 1st Jan 2026

Demystifying AI for Social Housing (“DASH”, “we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This notice explains what personal information we collect, how we use it, and your rights under the UK GDPR and the Data Protection Act 2018.

1. Who we are

DASH is a not-for-profit initiative providing guidance, research and practical tools to help social-housing boards and executives use artificial intelligence safely and responsibly.

Data Controller:
DASH – Demystifying AI for Social Housing
Email: peter@dashai.co.uk

DASH is registered with the Information Commissioner’s Office (ICO) as a data controller. Registration Number: ZB750359

2. Personal data we collect

Data you provide directly:

• Name
• Email address
• Job title and organisation (if provided)
• Enquiry messages
• Newsletter sign-up details
• Account registration details (if you create a DASH account)

Data collected automatically:

• IP address
• Browser type and version
• Device identifiers
• Pages viewed and interactions
• Referring website
• Approximate geographic region
• Log files and security data
• Usage data collected via Google Analytics (only after consent)

Data from third-party services:

If you register via a newsletter form, pop-up or embedded form, the information is processed by MailerLite.
MailerLite Privacy Policy: www.mailerlite.com/legal/privacy-policy

We do not buy data from external sources.

3. How we use your personal data

We use your information to:

• Respond to enquiries
• Manage newsletter subscriptions
• Provide access to member-only resources
• Maintain site security and performance
• Improve our content, tools and services
• Understand engagement trends across the housing sector
• Meet legal and regulatory obligations

We do not sell your personal data or use it for automated decision-making.

4. Lawful basis for processing

• Consent: for newsletters and optional updates
• Legitimate interests: for responding to enquiries, improving our website, ensuring security and providing sector insights
• Contract: where you have asked us to provide a service or resource requiring your details
• Legal obligation: where required (e.g., accounting or compliance)

5. Retention periods

• Enquiry data: 24 months
• Newsletter subscriptions: until you unsubscribe
• Website analytics: up to 14 months
• Account data: while active and for 12 months thereafter

We securely delete or anonymise data when no longer needed.

6. Sharing your data

We may share data with trusted processors that support our services:

• Website hosting provider (Krystal.io)
• MailerLite (email marketing)
• Analytics providers (Google Analytics)
• Security and performance tools (e.g., CDN and firewall services)
• Google LLC (Google Analytics – only if cookies are accepted)

Krystal Hosting Privacy Policy: www.krystalhosting.com/legal/privacy-policy

These providers act on our instructions and are bound by data-processing agreements. We do not share information with advertisers or social-media platforms.

7. International transfers

Some processors (e.g., MailerLite) may store data outside the UK. Where this occurs, we ensure appropriate safeguards:

• UK International Data Transfer Agreement (IDTA)
• Standard Contractual Clauses (SCCs)
• Adequacy decisions

8. Cookies and tracking technologies

Our website uses essential cookies to function and may use analytics cookies to help us understand site usage. Analytics cookies, including Google Analytics, load only after consent.

A full cookie explanation is available in our Cookie Notice.

9. Your rights

Under the UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate information
• Erase your data (“right to be forgotten”)
• Restrict or object to processing
• Request data portability
• Withdraw consent (for newsletters)
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To make a request, contact: privacy@dashai.co.uk. We respond within one month.

10. Children

Our services are designed for adults working in the social-housing sector. We do not knowingly collect data relating to children.

11. Updates to this notice

We review this notice regularly. Updates will be posted on this page.