Privacy Notice
This notice explains how we handle personal data as a controller: when you visit this website, make an enquiry, ask for a quote, or become a client. When we work inside your business's systems under a plan, a project or a remote session, we act as your processor, and that processing is governed by our Data Processing Agreement, not by this notice.
Who we are
Dacros is a trading name of TicketWave HQ Ltd (company no. 17143167), registered in England & Wales at Radley House, Richardshaw Road, Pudsey, LS28 6LE. We are the data controller for the personal data described here. Contact: hello@dacros.com.
What we collect
- Enquiry details you submit via our contact form: your name, business name, email, phone (optional) and message.
- Messages you send us directly by email.
- Quote, client and billing details, if we quote for or carry out work for you: your business name and address, the people we deal with, what was quoted and agreed, invoices and payments, and the note we keep of each remote session.
- Technical & usage data collected by cookieless analytics that we run on our own server (Plausible Community Edition): aggregate page views, with no personal profiles and no cross-site tracking. See website analytics below.
Why we use it (lawful basis)
- To respond to your enquiry and provide the services you ask about: our legitimate interests, and steps to enter a contract.
- To quote, deliver and invoice the work you ask for, and to keep accounting records: performance of a contract with you, and our legal obligations on tax and accounting.
- To keep our website secure and understand aggregate usage: our legitimate interests.
Website analytics
Our website analytics run on our own Plausible Community Edition server, on hardware rented from OVHcloud (OVH Limited) in Gravelines, France. It is cookieless: it sets no cookies, builds no personal profiles and does not track you across other websites. It gives us aggregate figures, such as page views. Analytics records are kept for 24 months, then deleted. No analytics data goes to Plausible Insights OÜ, the company behind Plausible's paid cloud service.
Remote support sessions
When you ask us to connect to a computer remotely, you run the RustDesk program and give us a one-time code. During the session we can see that screen and use its keyboard and mouse. The person at the computer watches throughout and can end it at any moment. We do not record sessions, copy what is on screen, or move files unless you ask.
For your business's personal data that is visible during a session, we act as your processor and follow your instructions for that session only, as set out in our Data Processing Agreement. For the connection itself we are the controller: our own relay server, which we run on hardware rented from OVHcloud in Gravelines, France, keeps the device's support ID, its IP address and when it connected. We delete those device records after 90 days, and the relay's connection logs after 7 days. Sessions are encrypted end to end, so the relay cannot read them. We never use a session to watch staff.
Enquiries, quotes, invoices and client records
Each enquiry you send through our contact form is emailed to us and also recorded in our business system, Odoo, so that we can follow it up. The system belongs to TicketWave HQ Ltd. We run it ourselves on our own server, on hardware rented from OVHcloud (OVH Limited) in Gravelines, France, with encrypted backups held by Scaleway SAS in Paris. Odoo S.A., the company that publishes the software, receives no enquiry data. An enquiry that does not lead to work is deleted after 12 months.
Quotes, invoices and client records are kept in the same business system. The quotes and invoices we email you are sent from billing@ticketwavehq.com through Proton Mail (Proton AG, Switzerland): Dacros is a trading name of TicketWave HQ Ltd, and that is the address its invoices come from.
Who we share it with (sub-processors)
We use a small number of vetted providers, chosen for their UK/EU data residency where possible. The canonical list, with each provider's role, residency and transfer safeguard, is at /sub-processors. In summary:
- Vercel: website hosting, pinned to the London (lhr1) region.
- Scaleway: transactional email delivery (EU, France). It sends each contact-form enquiry on to our inbox, and holds the encrypted off-site copies of our business-system backups.
- Proton (Proton AG, Switzerland): our business email. Contact-form enquiries and anything you email us are received and kept in our Proton mailbox, and the quotes and invoices we send come from
billing@ticketwavehq.comthrough Proton Mail. - Cloudflare: DNS/CDN/security (global edge; no personal data persisted at the edge).
- OVHcloud (OVH Limited): hardware in Gravelines, France, for services we run ourselves. Our remote-support relay passes encrypted sessions on and holds only the connection records described above. Our website analytics server holds the cookieless analytics records described above. Our business system, Odoo, holds the enquiries, quotes, invoices and client records described above.
We do not sell your personal data.
How long we keep it
Enquiries that do not lead to work: up to 12 months from the date of the enquiry, then deleted. Client records, quotes and invoices: for the life of the engagement and then 6 years, to meet accounting requirements and in case of a dispute. Remote-support device records are deleted after 90 days and relay logs after 7 days; the note of each session stays with your client record for the same 6 years. Website analytics records are kept for 24 months, then deleted.
Your rights
Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your data, and to data portability. To exercise any right, email hello@dacros.com. You may also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Changes
We may update this notice. The version line at the top shows the current version, and the changelog below records what changed and when.
Changelog
- Version 1.3, 20 October 2026. Each enquiry sent through the contact form is now also recorded in our business system, Odoo, which TicketWave HQ Ltd runs on its own server at OVHcloud in Gravelines, France. Odoo S.A., which publishes the software, receives no enquiry data. Enquiries that do not lead to work are still deleted after 12 months. No new provider.
- Version 1.2, 19 October 2026. Removed the phone and WhatsApp contact routes: we are reached by email and the contact form. WhatsApp is no longer a provider.
- Version 1.1, 15 October 2026. Added the version line and this changelog. Stated the retention periods precisely: 12 months for enquiries that do not lead to work, the life of the engagement plus 6 years for client records. Named our business system (on OVHcloud hardware in Gravelines, with encrypted backups at Scaleway in Paris) and the address, billing@ticketwavehq.com through Proton Mail, from which quotes and invoices are sent. Pointed work on your systems to the Data Processing Agreement. Removed the line that described this notice as a template.
- Version 1.0, 30 August to 11 October 2026. The notice as first published with the site, then amended on 10 October (remote support sessions, the relay's connection records and their retention) and on 11 October (website analytics on our own server rather than Plausible's cloud).