Privacy Policy

Last updated: [EFFECTIVE DATE]

This Privacy Policy explains how we collect, use, and protect personal data when you visit and interact with this website. We are committed to handling your personal data lawfully, fairly, and transparently in line with the Republic of Korea Personal Information Protection Act (PIPA), the EU General Data Protection Regulation (GDPR) where it applies to visitors in the EU, the Vietnam Personal Data Protection Decree (PDPD), and other applicable data protection laws.

1. Who we are

This website markets Duall Master, a building security and operations platform produced by Duali. For the purposes of this website, the data controller is:

Duali Inc
1-309, 306 Sinwon-ro, Yeongtong-gu, Suwon-si, Gyeonggi-do 16675, Republic of Korea
Email: sales@duali.com

Duali Inc is headquartered in Suwon, Gyeonggi-do, South Korea, and maintains an office in Hanoi, Vietnam, serving customers across Korea, Vietnam, and Southeast Asia.

2. Scope of this policy

This policy covers personal data of website visitors — for example, people who submit an enquiry through our contact form or whose visit is measured by analytics. For website data, Duali acts as the data controller.

Important — product data is not covered here. Personal data processed inside the Duall Master product on behalf of our customers — including, for example, access-control event logs, visitor records, video footage, and biometric or facial-recognition templates — is not governed by this website policy. For that data, the customer is the data controller and Duali acts as a data processor. The handling of product data is governed by the separate service agreement and Data Processing Agreement (DPA) signed between Duali and each customer, not by this Privacy Policy.

3. What we collect

Contact form submissions. When you contact us through the website, we collect the information you provide: your name, company, work email, phone number, country, the modules you are interested in, and your message.

Analytics data (only with your consent). If you accept the cookie banner, we use privacy-conscious analytics (Google Analytics 4 with IP anonymisation enabled, and/or Plausible) to understand how visitors use the site. Analytics scripts are not loaded unless and until you accept. We do not use advertising cookies or cross-site profile tracking.

Server and security logs. Our hosting and content-delivery provider records technical information such as IP address and request metadata to operate, secure, and protect the website against abuse.

4. Why we use your data and our legal bases

We process personal data for the following purposes:

• To respond to your enquiries and follow up about Duall Master — on the basis of taking steps at your request prior to entering a contract, and our legitimate interest in responding to sales and product enquiries.
• To measure and improve the website through analytics — on the basis of your consent, which you can withdraw at any time.
• To secure and operate the website — on the basis of our legitimate interest in keeping the site available, reliable, and protected against abuse.

5. Cookies

We use a small number of essential cookies for language preference and security, and — only with your consent — analytics cookies. For full details and to manage your choice, see our Cookie Policy.

6. Sharing and processors

We do not sell your personal data. We share it only with service providers that help us run the website, under appropriate data protection terms:

• Web3Forms — processes contact form submissions and delivers them to us.
• Google Analytics 4 and/or Plausible — website analytics, loaded only after you consent.
• Cloudflare Pages — website hosting and content delivery, including security logging.

7. International transfers

Some of our service providers operate outside Korea and Vietnam. Where personal data is transferred internationally, we take reasonable steps to ensure it remains protected through appropriate safeguards consistent with applicable data protection law.

8. Retention

We keep contact-enquiry data only as long as needed to respond to and follow up on your enquiry, and to keep records of our communications, after which it is deleted or anonymised. Analytics and security log data are retained for limited periods consistent with their purpose.

9. Your rights

Subject to applicable law (including the Republic of Korea PIPA, the GDPR where it applies, and the Vietnam PDPD), you have the right to access, correct, and delete your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. Withdrawing consent does not affect processing carried out before withdrawal.

To exercise any of these rights, contact us at sales@duali.com. You may also have the right to lodge a complaint with your local data protection authority.

10. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, but we work to safeguard your data and to respond promptly to any incident.

11. Children

This website is intended for business audiences and is not directed at children. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice.

13. Contact

For any questions about this policy or your personal data, contact us at sales@duali.com.