Privacy Policy
Privacy and Cookie Policy
Last updated: 21 August 2026
This policy explains what personal data Dual2 Ltd collects through this website, why we collect it, how long we keep it, and what rights you have. It also explains the cookies this site uses.
1. Who we are
Dual2 Ltd is the data controller for the personal data described in this policy.
- Registered office: 11–13 Hockerill Street, Bishop’s Stortford, CM23 2DH
- Trading address: 1 Link Road, Bishop’s Stortford, CM23 2ES
- Registered in England and Wales, company number: 07927828
- VAT number: 129 4515 10
- Email: admin@dual2.co.uk
- Telephone: 07792 844314
If you have a question about this policy or want to exercise any of your rights, email admin@dual2.co.uk or write to us at the trading address above.
2. What this policy covers
This policy covers dual2.co.uk, including our CAD design enquiry forms and our online shop.
The eBook edition of The Engineer’s Pro-State of Mind is sold through Amazon, not through this website. If you buy the eBook, Amazon handles your data under its own privacy policy and we receive no personal data about you from that sale.
3. What we collect and why
| What we collect | Why | Our lawful basis | How long we keep it |
|---|---|---|---|
| Enquiries. Your name, email address, message, and any files you upload through our contact form. | To answer your enquiry and prepare a quotation. | Legitimate interests — responding to people who contact us. Where the enquiry leads to a quotation, taking steps to enter into a contract. | 12 months, unless the enquiry becomes a project. |
| Project files and correspondence. Drawings, specifications and other material you send us in the course of a CAD project, together with your contact details. | To carry out the work you have asked us to do. | Performance of our contract with you or your employer. | For the period set out in the relevant contract or non-disclosure agreement. Where nothing is agreed, we keep project files for 6 years after the work ends and then delete them. |
| Orders. Your name, billing and delivery address, email address, telephone number, order details and delivery method. | To take payment, dispatch your order and deal with any query, return or refund. | Performance of our contract with you. | 6 years from the end of the financial year in which the order was placed, to meet HMRC and Companies Act record-keeping requirements. |
| Payment details. Card details are entered directly into our payment provider’s systems. We do not see or store full card numbers. | To take payment and process refunds. | Performance of our contract with you. | We hold only the last four digits and the transaction reference, for the same 6-year period as the order record. |
| Customer accounts (if you choose to create one). Your name, email address, password and saved addresses. | To let you sign in, see your order history and check out more quickly. | Performance of our contract with you. | Until you ask us to close the account. |
| Product reviews. The name you give, your email address, your review, your rating and your IP address. | To publish your review on the product page and to check that reviews are genuine. | Consent, which you give by submitting the review. You can withdraw it at any time. | Published until you ask us to remove it. |
| Marketing emails (if you sign up). Your name and email address. | To send you the updates you have asked for. | Consent. | Until you unsubscribe. |
| Website usage. Your IP address, browser and device type, pages viewed, and how you arrived at the site. | To keep the site secure and to understand how it is used. | Legitimate interests for security. Consent for analytics — see the cookie section below. | Server security logs are kept for a short period and then deleted. Analytics data is kept for up to 14 months. |
Your name is the only thing we publish. Everything else stays private to us and the suppliers listed in section 5.
Buying the book
We understand that buying a book about a cancer diagnosis may say something personal about you or someone close to you. We do not use your purchase for advertising, we do not share it with advertising networks, and we do not add you to any marketing list because you bought it. We do not run advertising or retargeting tracking on our product, cart or checkout pages.
What we do not do
We do not sell your personal data. We do not pass it to third parties for their own marketing. We do not make any decisions about you by automated means, and we do not use your data for profiling.
4. Where your data comes from
Almost everything we hold comes directly from you. We may also receive your contact details from your employer or colleague where they arrange work with us on your behalf, and we receive limited order and delivery information from the suppliers listed below.
5. Who we share it with
We share personal data only where it is needed to run the site and fulfil orders. Each of these suppliers acts on our instructions and is not permitted to use your data for its own purposes.
| Supplier | What they do | What they receive |
|---|---|---|
| Our website hosting provider | Hosts this website and our databases. | Everything submitted through the site. |
| Our payment provider | Processes card payments and refunds. | Your name, email address, billing address, card details and the amount. |
| Our printing and fulfilment supplier | Prints and dispatches paperback orders. | Your name, delivery address and order details. |
| Royal Mail and other delivery couriers | Delivers your order. | Your name, delivery address and, where you provide it, your telephone number or email for delivery notifications. |
| Our email provider | Sends order confirmations and handles our email. | Your name, email address and the content of the message. |
| Google (Google Analytics) | Provides website analytics, if you accept analytics cookies. | Your IP address and information about your visit. |
| Automattic (Gravatar) | Displays a profile image next to published reviews. | A one-way encrypted version of your email address, and your IP address. |
| Our accountant and professional advisers | Bookkeeping, tax and legal advice. | Transaction records. |
We will also disclose personal data where we are required to by law, or where it is necessary to establish, exercise or defend a legal claim.
6. Sending data outside the UK
Our website and order records are held in the United Kingdom.
Google and Automattic process some data in the United States. Where personal data leaves the UK, it is protected by one of the safeguards permitted under UK data protection law — either an adequacy decision made by the UK government, or the International Data Transfer Agreement or UK Addendum issued by the Information Commissioner’s Office.
7. How we keep it safe
This site runs over an encrypted HTTPS connection. Access to order records and project files is restricted to people who need it, and accounts are protected by strong passwords. Card details are handled entirely by our payment provider and never reach our servers. No system is completely secure, but we review these measures regularly and will notify you and the Information Commissioner’s Office if a breach is likely to put your rights at risk.
8. Children
This website and shop are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- ask us to delete your data, where we no longer need it;
- ask us to restrict how we use it while a query is resolved;
- object to us using it on the basis of our legitimate interests;
- object at any time to direct marketing;
- receive data you gave us in a portable, machine-readable format; and
- withdraw your consent at any time, where consent is our basis for using it. Withdrawing consent does not affect anything we did before you withdrew it.
To use any of these rights, email admin@dual2.co.uk. We will respond within one month. There is no charge, and we will not ask you to give a reason.
Some of these rights do not apply in every situation. For example, we cannot delete transaction records we are required by law to keep for six years.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at any time:
- Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Telephone: 0303 123 1113
- Website: ico.org.uk/make-a-complaint
10. Cookies
A cookie is a small file that a website stores on your device. Some cookies are needed to make the site work. Others are optional and only set if you agree.
When you first visit this site you are asked whether you want to accept optional cookies. Nothing optional is set until you choose. You can change your choice at any time using the cookie settings link in the footer of every page, and you can delete cookies through your browser settings at any point.
Strictly necessary cookies
These make the site function. They cannot be switched off, and we do not need your consent to set them.
| Cookie | Purpose | Expires |
|---|---|---|
| woocommerce_cart_hash | Records that your basket has changed. | When you close your browser |
| woocommerce_items_in_cart | Records what is in your basket. | When you close your browser |
| wp_woocommerce_session_* | Links your browser to your basket and order data on our server. | 2 days |
| wordpress_logged_in_*, wordpress_sec_* | Keeps you signed in if you have a customer account. | When you close your browser, or 14 days if you choose “remember me” |
| wp-settings-* | Remembers your display preferences if you have an account. | 1 year |
| comment_author_*, comment_author_email_* | Remembers your name and email for reviews, if you tick the box to save them. | 1 year |
| Cookie consent preference | Remembers your cookie choices so we do not ask again on every page. | 6 months |
Our payment provider also sets its own cookies when you reach the checkout, to process your payment securely and to detect fraud. These are set only during a purchase.
Analytics cookies — optional
These help us understand which pages people use. They are only set if you accept them.
| Cookie | Purpose | Expires |
|---|---|---|
| _ga | Google Analytics — tells apart one visitor from another. | 2 years |
| _ga_* | Google Analytics — keeps track of the current visit. | 2 years |
Google’s privacy policy is at policies.google.com/privacy.
Embedded content — optional
Our contact page includes a Google map. Our product page shows profile images supplied by Gravatar alongside reviews. These services can set their own cookies and can see your IP address. They are only loaded if you accept optional cookies.
Turning cookies off
You can block or delete cookies through your browser settings. Blocking strictly necessary cookies will stop the basket and checkout working.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. If we make a significant change to how we use your personal data, we will tell you by email where we hold your address.