Privacy statement

Data controller

Dull Boy Customs is run by David Hook as a sole proprietorship. I am the data controller for any personal information collected through this website.

• Email: david@dullboy.no
• Website: dullboy.no

What data I collect

I only collect the personal data you choose to give me:

• Contact form: name, email address, enquiry type, location and the message you write. This is sent directly to me so I can reply to your enquiry.
• Workshop updates signup: email address. The signup appears on the contact page footer and elsewhere on the site, and I use it to send occasional updates about new builds and paint projects.

I do not collect sensitive personal data, and I do not knowingly collect information from anyone under 16 years of age.

Legal basis

I process your data on one of the following legal grounds under the GDPR:

• Consent — when you sign up for workshop updates you are asked to confirm your email address (double opt-in). You can withdraw consent at any time.
• Legitimate interest — when you use the contact form, processing is necessary to respond to your request.

How I use your data

Your personal data is used only for the purpose it was provided:

• Replying to messages sent through the contact form.
• Sending workshop updates to subscribers.
• Maintaining a record of enquiries and commissions.

I will never sell your data or use it for unrelated marketing.

Third-party services

I use a small number of trusted service providers to run the site and handle email:

• Lovable — website hosting and infrastructure.
• Brevo — workshop updates subscription management and double opt-in emails.

These processors handle data only on my behalf and under appropriate data-processing agreements.

Cookies

This website does not use tracking or advertising cookies. Essential cookies may be set by the hosting platform to keep the site secure and functioning.

Data retention

I keep contact form messages for as long as necessary to handle your enquiry and any follow-up work. Workshop updates subscriber data is kept until you unsubscribe or I stop sending updates.

Your rights

Under the GDPR you have the right to:

• Access the personal data I hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data (the “right to be forgotten”).
• Object to or restrict certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time.

To exercise any of these rights, email me at david@dullboy.no.

Changes to this statement

I may update this privacy statement as the site or legal requirements change. The latest version will always be available at this page.

Contact

If you have any questions about this privacy statement or how your data is handled, please get in touch.