Privacy Policy

This Privacy Policy explains what information Dalinplug ("Dalinplug", "we", "us" or "our") collects across dalinplug.com and all of its associated subdomains (together, the "Services"), why we collect it, and how it is handled. We collect information when you visit dalinplug.com itself as well as on any subdomain we operate. Where you hold an account on a subdomain, data collected there may be combined with your account information to secure your account, operate the Services, and improve your experience across them.

1. Information we collect

Depending on which part of the Services you use, we collect:

• Contact form information: the name, email address and message you type in when you submit a contact form.
• Account information: where a subdomain offers account creation, the name, email address, phone number and password (stored as a salted hash, never in plain text) you register with.
• Usage and device data: device identifiers, app or browser version, and security-relevant events such as sign-ins and session activity, used to secure your account and operate the Services.
• Support data: information you provide when you contact support or submit a dispute.

We also automatically receive your IP address when you submit a contact form. It is used only to apply a short-lived rate limit that blocks automated spam (at most 5 submissions per 10 minutes from the same address); it is not stored alongside your submission and is not linked to your name or email.

See Payments, money movement and identity verification below for the additional information collected where a subdomain provides those features.

2. How we use it

We use the information described above to:

• Respond to enquiries submitted through a contact form, including an automatic confirmation email with a reference ticket number;
• Create and secure accounts on subdomains that offer them, including biometric or device-based sign-in where supported;
• Operate, maintain and improve the Services, and detect, investigate and prevent fraud, unauthorized access and abuse;
• Respond to support requests and disputes;
• Comply with applicable law and lawful requests from regulators or law enforcement.

We do not use this information for advertising, do not sell it, and do not use it to build marketing profiles.

3. Legal basis for processing

Where applicable data protection law requires a legal basis, we rely on your consent (given by submitting a form or creating an account), our legitimate interest in responding to enquiries and operating and securing the Services, and, where applicable, the performance of a contract with you.

4. Who we share information with

We do not sell or rent your information. We share it only with the service providers that help us operate the Services, specifically:

See Sharing with licensed partners below for how information is additionally shared where a subdomain provides payment or money-movement features. We may also disclose information if required to do so by law, or to protect the rights, property or safety of Dalinplug, our users, or others.

5. How long we keep it

We keep contact form submissions for as long as needed to respond to your enquiry and for a reasonable period afterward for our records. We keep account information for as long as your account is active and thereafter for a reasonable period required for our records, after which we may delete or anonymize it. You can ask us to delete your information earlier - see Your rights below.

Administrative and security audit logs across all Dalinplug products are retained for 12 months from the date they are created and then deleted, unless a longer retention period is required by applicable law.

6. Cookies and tracking

dalinplug.com does not set cookies and does not use analytics or advertising trackers. It only loads its own stylesheets and scripts, needed to render the page and its navigation. A subdomain that requires sign-in may use strictly necessary session cookies to keep you signed in; those are covered by this policy's security and retention sections above.

7. Security

We apply reasonable technical safeguards to protect information across the Services, including transport encryption (HTTPS), standard security response headers, and a honeypot and rate limit on contact forms to reduce automated abuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have the right to request access to, correction of, or deletion of the information we hold about you, or to object to how we use it. To exercise any of these rights, contact us using the details below and we will respond within a reasonable time.

9. Deleting your account and data

Deleting your account

On any subdomain where you hold a personal login, you can permanently delete it at any time from that subdomain's account or security settings, or by contacting support. When you request deletion, your name and photo are removed from live systems and sign-in is disabled. Your email address remains reserved and cannot be used to create another account during the 30-day grace period, so support can restore your account if you cancel deletion. At the end of that period, the address is anonymized and the separately encrypted recovery copy is destroyed, subject to records we are legally required to retain.

Deleting your data

Data associated with your login (name, phone, photo) and authentication credentials are removed from live systems immediately when you request deletion. Your email remains reserved, but cannot be used to sign in or create another account, until the same 30-day deadline. An encrypted recovery copy, which support can use only to cancel deletion, is retained until then and destroyed afterward. Two kinds of records are not affected by deleting your own login:

• Records we are legally required to keep. Transaction, identity-verification, audit and other records that applicable financial-services, tax, or record-keeping law requires us to retain are kept but are no longer linked to your identifying details once your login is purged.
• Records owned by an organization or account you belong to. Where a subdomain is organized around a customer, organization, school or team account rather than an individual one (see Accounts and subscriptions in our Terms of Service), the substantive records that account manages - such as student, staff, order, catalogue, or financial records - remain under that account's control and are governed by its own retention decisions and applicable law, regardless of your personal login status. If that account is itself deleted or exports its data, its records may be transferred or preserved as part of that process.

10. Payments, money movement and identity verification

Some subdomains provide payment, money-movement, or credit-related features, such as card processing, transfers, withdrawals, bill payment, savings, or deferred-payment credit. This section explains, in addition to the rest of this policy, how personal data is collected, used, shared, and protected where a subdomain provides those features.

Information we collect

• Identity verification data: the government identity credentials recognized in your jurisdiction (for example, a national identity number or equivalent), collected only to complete identity verification through a licensed identity verification partner. Identifiers are shown to you in masked form after verification.
• Payment data: card linking uses provider-hosted tokenization; we do not store full card numbers, expiry dates, or CVV.
• Transaction data: payments, transfers, withdrawals, bill payments, savings contributions, and deferred-payment credit activity you initiate.

How we use it

• To process payments, withdrawals, transfers, bill payments, savings, and deferred-payment credit requests through our licensed partners.
• To complete legally required identity verification and meet anti-fraud, anti-money-laundering, and regulatory obligations.
• To detect, investigate, and prevent fraud, unauthorized access, and abuse.
• To send transaction and security notifications relating to these features.

Sharing with licensed partners

We share the minimum data necessary with contracted, licensed partners that provide regulated services through a subdomain - identity verification, card/payment processing, withdrawal switching, savings custody, and deferred-payment lending - so those partners can deliver the specific service you requested. We do not sell this data, and we do not share it with third parties for their own independent marketing purposes.

Data retention

We retain payment-related account, transaction, and identity-verification records for as long as the related account is active and thereafter for the period required by applicable financial-services and tax record-keeping obligations, after which data is deleted or anonymized unless a longer retention period is legally required.

Your rights and international transfers

Where applicable data protection law gives you rights to access, correct, delete, or export this data, or to withdraw consent for optional processing, those rights apply in addition to the general rights described above, and you may also lodge a complaint with your local data protection authority. Some licensed partners or infrastructure providers we use may process data outside your home jurisdiction; where this occurs, we require contractual safeguards consistent with applicable cross-border transfer requirements. You can request a data export or submit a privacy request from your account's privacy settings, or by emailing [email protected]. We verify your identity before fulfilling a request.

11. Children's privacy

The Services are intended for business and general audiences and are not directed at children. We do not knowingly collect information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be reflected here before they take effect.

13. Contact us

Questions about this Privacy Policy, or requests relating to your information, can be sent to [email protected] or via the contact form.