Privacy Policy, version history
Every published version of this notice, newest first. View the current notice.
v1.0
effective 26 Sep 2026Imported verbatim from https://docs.dospay.co.uk/legal/notices-policies/privacy-policy (GitBook); wording pending owner review.
What changed vs v1.3 (24 lines)
⋯## 7. Your rights−7.1. You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise this right at any time by contacting us using the [Contact Form on our website](https://www.dos.co/contact).+7.1. You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise this right at any time by contacting us using the [Contact Form on our website](https://www.dosandco.com/contact).7.2. Our sites may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility to liability for these policies. Please check these policies before you submit any personal data to these websites.⋯## 10. Contact information−10.1. Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed using the [contact form](https://www.dos.co/contact).−−## 11. Using our services with an AI assistant−−11.1. Where we offer it, you can connect an AI assistant (such as Claude, ChatGPT or Microsoft Copilot) to our services through our connector. This section explains what happens to your personal data when you do. Connecting an assistant is optional. Anything you can do through an assistant, you can also do on our website or through your usual channels with us.−−11.2. **Without signing in**, an assistant can only see general, public information about our services. It cannot see any of your records.−−11.3. **Signing in and giving permission.** To reach your records, the assistant must send you to our own sign-in page, where you sign in with a one-time code we email to you and choose whether to allow access. We never share your password or sign-in code with the assistant's provider. Instead, we give the assistant a temporary access key that lets it act only for you, only within our services, and that expires after a short time unless it is renewed.−−11.4. **What we share with the assistant.** When you ask the assistant to do something, we send it only the information it needs for that request. Depending on the service, that may include the name and email address of your connected account and whether your connection is confirmed, your identity verification (KYC) checklist and the status of anything you have submitted, the status of an account opening, and your accounts, their balances and their transactions. We never send full bank details to an assistant. Account numbers and similar details appear only as their last four digits.−−11.5. **What the assistant can send to us.** At your request, the assistant can draft information and send it to us, such as building details, documents, declarations, new members and requests to start an identity check. Anything that forms part of your compliance record, such as a declaration, only takes effect once you approve the exact draft through a link we email to you. Nothing is recorded until you approve it.−−11.6. **The assistant provider's role.** Once we have sent information to an assistant at your request, its provider processes it under its own terms and privacy policy, as an independent controller of that data. We do not control how the provider stores or uses it. Please read the provider's privacy policy before you connect, and check its settings, for example whether your conversations may be used to train its models.−−11.7. **What we record.** We keep a record of every request an assistant makes for you: what was asked, when, and the outcome. We need this record to keep our services secure and to meet our legal obligations, including anti-money laundering record-keeping. We keep it for the same period as the rest of your records with us (see section 6), and if you ask us to erase your data we treat these records in the same way as your other records.−−11.8. **Our lawful basis.** We process this data to provide the service you have asked for (performance of our contract with you). We keep the request records to comply with our legal obligations and for our legitimate interest in keeping our services secure.−−11.9. **Disconnecting.** You can disconnect an assistant at any time, in the assistant's own settings or by contacting us (see section 10) and asking us to revoke its access. Once access is revoked, the assistant can no longer read or send anything for you.+10.1. Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed using the [contact form](https://www.dosandco.com/contact).v1.3current
13 Oct 2026No textual changes vs v1.2.
v1.2
7 Oct 2026Text unchanged. Republished so the Cash Deposit Manager copies link to doscdm.com/contact (per-site contact page, doslabuk/compliance#6489).
No textual changes vs v1.1.
v1.1
6 Oct 2026Clauses 7.1 and 10.1 linked a hard-coded www.dosandco.com/contact, sending a scheme or portal reader to another website. Both now use the contact_url token, which resolves to the /contact page of the brand being read. Owner instruction, 6 Oct 2026. Not publishable until contact_url is activated after PR 6308 deploys. Clause 7.1 also had a repeated phrase removed, on owner instruction. Contact links now resolve to each brand's own contact page (contact_url). New section 11 (7 Oct 2026, owner request): how personal data is handled when a client connects an AI assistant through our connector, needed for the AI assistant directory listings.