Skip to content

Last Updated: 13 May 2026

Privacy Policy

Welcome to Ductio (“Ductio”, “we”, “our”, or “us”).

We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, engage with our services, or interact with us.

This policy is designed to align with applicable data protection laws including the UK General Data Protection Regulation (“UK GDPR”), the EU General Data Protection Regulation (“EU GDPR”), the Data Protection Act 2018 and other applicable privacy regulations.


1. Who We Are

Ductio is an executive intelligence platform focused on leadership insights, business intelligence and organisational decision support.

For the purposes of applicable data protection laws, Ductio is the “Data Controller” of the personal data described in this Privacy Policy.

For any privacy-related questions, please contact:

Email: support@ductio.com
Website: Ductio


2. Information We Collect

We may collect and process the following categories of information:

Information You Provide Directly

Including when you:

  • submit a contact form
  • request a demo
  • subscribe to updates
  • engage with us through email or LinkedIn
  • apply for opportunities
  • participate in surveys or events

This may include:

  • full name
  • company name
  • job title
  • email address
  • phone number
  • business information
  • communications and correspondence

Information Collected Automatically

When you visit our website, we may automatically collect:

  • IP address
  • browser type and version
  • operating system
  • referral source
  • pages viewed
  • session duration
  • clickstream data
  • device identifiers
  • approximate geographic location
  • cookie and analytics data

Publicly Available Professional Information

As part of our executive intelligence and research activities, we may process publicly available professional information from sources such as:

  • company websites
  • public regulatory filings
  • press releases
  • professional biographies
  • publicly accessible business profiles
  • media publications
  • professional networking platforms where permitted by applicable law and platform terms

We do not intentionally collect or process special category personal data unless legally permitted and strictly necessary.


3. How We Use Personal Data

We may use personal data for the following purposes:

Website and Platform Operations

  • operating and maintaining our website
  • responding to enquiries
  • providing requested services
  • improving website performance and user experience

Business and Commercial Purposes

  • providing executive intelligence services
  • conducting business research and analysis
  • developing products and platform capabilities
  • communicating with prospective clients and partners

Analytics and Improvement

  • monitoring website usage
  • analysing trends and engagement
  • improving our products, services and content

Legal and Regulatory Obligations

  • complying with legal obligations
  • protecting our legal rights
  • fraud prevention and security monitoring

4. Lawful Bases for Processing

Under UK GDPR and EU GDPR, we rely on one or more of the following lawful bases:

  • Legitimate Interests
  • Consent
  • Contractual Necessity
  • Legal Obligation

Where we rely on legitimate interests, we ensure those interests are balanced against individual privacy rights and freedoms.


5. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to:

  • improve website functionality
  • analyse traffic and engagement
  • personalise content
  • support marketing and advertising activities

Cookies may include:

  • essential cookies
  • analytics cookies
  • performance cookies
  • functionality cookies

Users can manage cookie preferences through browser settings and cookie consent tools where applicable.


6. Analytics and Third-Party Services

We may use trusted third-party providers including:

  • website hosting providers
  • CRM systems
  • analytics platforms
  • marketing automation tools
  • cloud infrastructure providers

Examples may include:

  • HubSpot
  • Google
  • Microsoft

These providers may process personal data on our behalf under contractual and security obligations.


7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UK or European Economic Area (“EEA”).

Where international transfers occur, we implement appropriate safeguards including:

  • adequacy decisions
  • Standard Contractual Clauses (“SCCs”)
  • contractual protections
  • security and organisational controls

8. Data Retention

We retain personal data only for as long as reasonably necessary to:

  • fulfil the purposes outlined in this policy
  • comply with legal obligations
  • resolve disputes
  • enforce agreements

Retention periods vary depending on the nature of the data and applicable legal requirements.


9. Your Rights

Subject to applicable law, individuals may have rights to:

  • access personal data
  • correct inaccurate data
  • request deletion
  • restrict processing
  • object to processing
  • request data portability
  • withdraw consent
  • lodge a complaint with a supervisory authority

To exercise these rights, contact:
support@ductio.com

In the UK, complaints may be made to the:
Information Commissioner's Office


10. Security

We implement appropriate technical and organisational measures designed to protect personal data against:

  • unauthorised access
  • accidental loss
  • misuse
  • disclosure
  • alteration
  • destruction

However, no internet-based service can be guaranteed completely secure.


11. Third-Party Links

Our website may contain links to external websites or services. We are not responsible for the privacy practices or content of third-party websites.

Users should review the privacy policies of external sites independently.


12. Children’s Privacy

Our website and services are intended for business and professional audiences and are not directed toward individuals under the age of 18.

We do not knowingly collect personal data from children.


13. Changes to This Policy

We may update this Privacy Policy periodically to reflect:

  • legal changes
  • regulatory updates
  • platform developments
  • operational changes

Updated versions will be published on this page with a revised effective date.


14. Contact Us

For questions, requests or concerns relating to this Privacy Policy or data protection matters, please contact: