Privacy policy — Duda

Cited by

Facts read from this source

• Entity Report an error

  “The Duda entity responsible for personal information covered by this Policy is generally Duda, Inc., unless the applicable contract, collection notice, or local law identifies another Duda affiliate as responsible. Duda, Inc. is located at 1025 Cannon Street Louisville Colorado 80027, United States.”

• Dpf Report an error

  “Duda complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), as set forth by the U.S. Department of Commerce.”

• DPA available Report an error

  “That processing is governed by the customer’s instructions, the applicable agreement and Data Processing Addendum, and the customer’s or site owner’s own privacy notice.”

• International transfer safeguards Report an error

  “Where required, we use recognized safeguards for international transfers, such as adequacy decisions, the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, contractual and technical supplementary measures, or the Data Privacy Framework described in Section 17.”

• Processing locations Report an error

  “personal information may be processed in the United States, Israel, the European Economic Area, the United Kingdom, Canada, and other countries where Duda, its affiliates, or service providers operate.”

• AI no training on customer data Report an error

  “Duda does not use personal information submitted to or generated through AI features to train general-purpose or cross-customer AI models and requires relevant model providers acting on Duda’s behalf not to do so, unless the customer expressly authorizes such use.”

• AI features Report an error

  “These may include tools for website creation, content generation, coding, site management, analysis, and customer-configured conversational functionality, including products such as Duda Vibe.”

• White label Report an error

  “Customers may provide access to the Services to their own clients or users, including through white-label environments.”

• No cross customer marketing use Report an error

  “Duda does not use personal information that it processes on behalf of customers through customer marketing automation campaigns or booking features for Duda’s own marketing, cross-customer profiling, or targeted advertising.”

• Calendar API limited use Report an error

  “Duda’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Duda does not use calendar data for advertising or to train general-purpose AI models.”

• Sensitive data no right to limit Report an error

  “Duda does not use or disclose sensitive personal information for purposes that require a right to limit under California law, except as permitted by law”

• No sale for money Report an error

  “Duda does not sell personal information for money.”

• No minors sale Report an error

  “Duda does not knowingly sell or share the personal information of individuals under 16.”

• No automated decisionmaking Report an error

  “Duda does not currently use automated decisionmaking technology in its controller-side activities to make decisions about individuals that produce legal or similarly significant effects.”

• Gpc honored Report an error

  “Where required by applicable U.S. law, Duda processes qualifying opt-out preference signals, including Global Privacy Control, as a request to opt out of sale or sharing for the browser or device through which the signal is received, to the extent technically applicable.”

• Dnt not honored Report an error

  “Because there is no uniform industry standard for Do Not Track signals, we do not generally respond to DNT signals.”

• Retention security logs Report an error

  “Security, diagnostic, and operational logs may be retained for shorter operational periods or, where needed for security and forensic purposes, for up to approximately 12 months.”

• Deletion Report an error

  “When information is no longer required, we delete it, render it inaccessible, or irreversibly anonymize it in accordance with our procedures and applicable law.”

• Privacy contact Report an error

  “To submit a request concerning information for which Duda is controller, contact privacy@duda.co.”

• Dpf dispute resolution Report an error

  “Duda commits to refer unresolved complaints concerning its handling of personal data received in reliance on the applicable Data Privacy Framework to BBB National Programs, an alternative dispute resolution provider based in the United States.”

• Ftc enforcement Report an error

  “With respect to personal data received or transferred pursuant to the Data Privacy Frameworks, Duda is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.”

• EU UK DPA complaint Report an error

  “If you are in the EEA, UK or Switzerland, you may also lodge a complaint with the data protection authority in your country or region.”

• Privacy tools for customers Report an error

  “Duda may provide customers with tools or integrations that support privacy compliance, such as configurable notices, consent options, preference-management features, and deletion functionality.”

• Booking shared numbers optout Report an error

  “Text messages may be sent from telephone numbers shared by multiple customers. An opt-out received through a shared number may stop appointment text messages to that recipient from all customers using that number.”

• Calendar video Report an error

  “If a customer connects a calendar or video conferencing account, such as Google Calendar, Microsoft Outlook, or Zoom, Duda accesses that account only to check availability and to create, update, or delete booking events and meeting links.”

• Payment cards not stored Report an error

  “For payment transactions, full payment-card information is generally handled by the applicable payment provider rather than stored by Duda, except to the extent expressly supported by a particular Service.”

• Security measures Report an error

  “Measures may include access controls, encryption, network and cloud security, monitoring, vulnerability management, personnel confidentiality, incident response, vendor management, and business continuity measures.”

• Backup retention Report an error

  “Backups may retain information until overwritten or deleted through ordinary backup cycles.”

• No financial incentives Report an error

  “Duda does not currently offer financial incentives or price or service differences in exchange for the collection, sale, sharing, or retention of personal information.”

• Shine the light Report an error

  “Duda does not disclose personal information to third parties for their own direct marketing purposes as contemplated by California’s “Shine the Light” law.”

Scores citing this record

• The Data Protection Officer Forms, bookings & business features
• The Data Protection Officer Imprint, privacy & cookie compliance
• The Data Protection Officer European sovereignty
• The Freelance Web Designer Forms, bookings & business features
• The Freelance Web Designer Imprint, privacy & cookie compliance
• The Freelance Web Designer European sovereignty
• The Marketing Lead Forms, bookings & business features
• The Marketing Lead Imprint, privacy & cookie compliance
• The Marketing Lead European sovereignty
• The Practice Owner Forms, bookings & business features
• The Practice Owner Imprint, privacy & cookie compliance
• The Practice Owner European sovereignty
• The Skeptic Forms, bookings & business features
• The Skeptic Imprint, privacy & cookie compliance
• The Skeptic European sovereignty
• The Small-Business Owner Forms, bookings & business features
• The Small-Business Owner Imprint, privacy & cookie compliance
• The Small-Business Owner European sovereignty