Privacy Policy

/ 01 Introduction

This Privacy Policy explains how Frame Two Limited (trading as DNSK WORK – "we", "us", "our") collects and uses your personal data when you visit our website at www.dnsk.work or get in touch with us. We are the data controller for the personal data described here, and we handle it in line with the UK GDPR and the Data Protection Act 2018.

/ 02 Who we are

Frame Two Limited is a company registered in England and Wales under company number 13011529.

Registered office: Custom House, 11 Cundy Road, London E16.
Data enquiries: of••ce@dnsk.work

/ 03 What we collect

We keep data collection to a minimum. Depending on how you use the website, this may include:

• Details you give us – when you submit our contact form: your name, email address and message, and any other details you choose to add (company, role, company size, the service you're interested in, timeline and budget). When you book a call through Cal.com: your name, email address, company and role, and a phone number, notes or guests if you add them.
• Usage & analytics data – pseudonymised information about how the website is used, collected through analytics cookies (see Cookies below).
• Ad click data – if you arrive from one of our ads or a tagged link: the click identifier Google adds to the link (gclid, gbraid or wbraid) and the campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content). We keep them for 90 days in a cookie of our own (dnsk_ad_click) and save them with your enquiry or booking, so we know which ad or campaign brought it, even if you come back on a later visit.
• Technical data – your IP address, browser type and similar information recorded in server logs and by our spam-protection service. If you arrive from one of our ads, we also keep your IP address, browser details and the page you landed on, together with the click identifier, for 90 days, so we can spot clicks that were not real visits (bots and click farms) and claim them back from Google.
• Client advertising data – when a client authorises us to manage their Google Ads account, we read campaign settings and performance figures from that account through Google’s API.

We do not knowingly collect special category data, and we do not collect data from children.

/ 04 How we use it

We use your data only for clear purposes, each with a lawful basis under the UK GDPR:

• To respond to your enquiry and discuss working together – taking steps at your request to enter into a contract, and our legitimate interests in answering enquiries.
• To understand and improve the website, and to see which ads and campaigns bring enquiries – our legitimate interests in running and improving our website and marketing. You can opt out of analytics at any time (see section 05).
• To keep the website secure and prevent spam and abuse – our legitimate interests.
• To plan, run and report on advertising for clients who have asked us to – performance of a contract with that client. We store this data on our own systems, use it for no other purpose, and never sell or share it. A client can end our access at any time from their Google account’s third-party access page or by asking us.

We do not use your data for automated decision-making or profiling, and we never sell it.

/ 05 Cookies, analytics & embeds

We use a small number of cookies and measurement tools:

• Essential – cookies needed for the website and the contact form to work, including Cloudflare Turnstile, which protects the form from spam and bots.
• Ad click – if you arrive from one of our ads or a tagged link, a cookie of our own (dnsk_ad_click) keeps the click identifier and campaign tags for 90 days, so an enquiry or booking you make on a later visit is still recorded with the ad that brought you. Deleting or blocking cookies for dnsk.work removes it.
• Analytics – we use two tools: Umami, a privacy-focused service that does not use cookies or collect personal data; and Google Analytics 4, which Google Tag Manager loads a few seconds after a page opens, or as soon as you scroll, click or type. Google Analytics sets its own cookies and runs for every visitor: our cookie banner is a notice, and "Got it" only closes it – it doesn't turn anything on or off. Google Analytics is linked to our Google Ads account, so Google Ads can measure which ads lead to enquiries and bookings; ad personalisation is switched off. When you book a review or send the form, we also pass Google Ads a scrambled (hashed) version of the email address you entered, so the enquiry can be matched to the ad that brought you even after Google’s cookie has expired; Google calls this enhanced conversions. The hash cannot be turned back into your address, and the address itself is not sent.
• Opting out – you can stop Google Analytics by blocking cookies for dnsk.work in your browser settings, with Google's Analytics opt-out add-on, or with a content blocker. The website works the same without it.
• Third-party embeds – some pages include embedded tools such as Cal.com (when you book a call) and Vimeo (for video). These providers may set their own cookies when you interact with them.

/ 06 Who we share it with

We don't sell your data or share it for marketing. We use a small number of trusted providers who process data on our behalf under contract:

• netcup – the server that hosts the website and its database;
• our email provider – to receive and reply to enquiries;
• Google – Analytics, Tag Manager, Google Ads and the Google Ads API;
• Umami – privacy-focused analytics;
• Cloudflare – spam protection, content delivery, file storage and backups;
• Cal.com – scheduling, if you book a call with us;
• Vimeo – video hosting.

We may also disclose data where the law requires it.

/ 07 International transfers

Some of our providers process data outside the UK – for example, Google, and netcup, whose server for this website is in the United States. Where that happens, we rely on appropriate safeguards, such as UK adequacy regulations or the International Data Transfer Agreement, to keep your data protected.

/ 08 How long we keep it

We keep enquiry data only for as long as we need it to deal with your enquiry and for a reasonable period afterwards in case you get back in touch, then delete it. Analytics data is held according to the retention settings in Google Analytics, and the ad click cookie expires after 90 days, as do the records of ad landings (IP address, browser details and the click identifier). We do not keep personal data for longer than necessary.

/ 09 Your rights

Under the UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected, or incomplete data completed;
• have your data erased;
• restrict or object to how we use it;
• ask us to transfer your data (data portability);
• withdraw your consent at any time, where we rely on consent.

To exercise any of these, email of••ce@dnsk.work. We'll respond within one month. Exercising your rights is free and will not put you at any disadvantage.

/ 10 Complaints

If you're concerned about how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

/ 11 Changes

We may update this Privacy Policy from time to time to reflect changes in the law or in how we operate. The version published here always applies, and the date of the most recent update is shown at the top.

/ 12 Contact

For anything relating to this policy or your personal data, contact us at of••ce@dnsk.work or through our contact page.

Frame Two Limited · Custom House, 11 Cundy Road, London E16