Privacy Policy

Last updated: April 28, 2026

This policy explains how ZNTH Limited ("we", "us") collects, uses and protects your personal data when you visit dustmagic.io or use the Dust Magic software. It is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Dust Magic is a software product owned and operated by ZNTH Limited, a company registered in England and Wales. ZNTH Limited is the data controller responsible for your personal data.

2. What data we collect

We collect different categories of data depending on how you interact with us.

Website analytics data

When you visit dustmagic.io and consent to analytics cookies, we collect pseudonymous information about your visit, including pages viewed, links and buttons clicked, approximate geographic location (country/city, derived from IP address), device and browser type, referring URL, and time on page. This is collected via Google Analytics 4.

Purchase and licensing data

When you buy a Dust Magic licence, our payment provider PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A. for customers in the UK/EEA, PayPal, Inc. elsewhere) collects the information needed to process your order: your name, billing address, email address, country, VAT information where applicable, and payment details. We receive a subset of this data (name, email, country, order ID, licence key, purchase amount) to issue and manage your licence. We do not see or store your full payment card number.

Licence and activation data

When you activate your Dust Magic licence, the desktop application sends us the licence key, a device identifier, the application version, and your operating system so we can validate the licence, enforce activation limits, and prevent unauthorised use. Crash diagnostics may also be sent to help us fix bugs.

Product usage analytics (desktop app)

To help us improve Dust Magic, the desktop application sends pseudonymous usage data tied to a randomly generated install identifier - not to your name or email. This may include which features and settings you use, batch sizes and processing times, session duration, workflow patterns, and basic environment information (OS, app version, approximate locale). It does not include your images, scans or file contents.

This data is processed on our own servers operated by ZNTH Limited. We do not share it with any third-party analytics provider. If this changes in the future we will update this policy and notify users.

Product usage analytics are enabled by default, but you can turn them off at any time in Settings → Privacy within the Dust Magic desktop app. Turning them off will not affect any feature of the product.

Support correspondence

If you email support@dustmagic.io, we store your email address, name and the contents of your message so we can respond and keep a record of the conversation.

Data we do not collect

Dust Magic is a desktop application that processes your image files locally on your computer. Your photos, scans, and image files are never uploaded to our servers, ever. The only data that leaves your machine is what is described in this policy.

3. How we use your data

• To operate and provide the Dust Magic software and its licensing system
• To process purchases, issue licence keys, and handle refunds
• To respond to support requests and pre-sales questions
• To understand how visitors use the website and improve it (only with consent)
• To detect, prevent and investigate fraud, licence abuse and security incidents
• To comply with our legal and tax obligations

We do not sell your personal data to third parties, and we do not use it to profile you for advertising purposes.

4. Lawful basis for processing

Under UK GDPR we must have a lawful basis for each processing activity:

5. Cookies and Google Consent Mode

The website uses a small number of cookies and similar technologies. On your first visit you will see a cookie banner where you can accept all, reject all, or choose your preferences. No analytics or advertising cookies are set until you make a choice.

We implement Google Consent Mode v2. Until you consent, Google Analytics receives only anonymous, cookieless pings which do not identify you or store anything on your device beyond what is strictly necessary.

Types of cookies

• Strictly necessary: required for the site to function (for example, remembering your cookie choice). Always on.
• Analytics: Google Analytics 4 (cookies starting with _ga). Helps us understand anonymised site usage.
• Advertising: we do not currently run advertising. This category is reserved for future use and is off by default.

You can change your choice at any time by clicking the Cookie settings link or the "Cookie settings" pill on the homepage.

6. Third-party processors

We use trusted third parties to run our business. Each is contractually bound to protect your data.

Desktop app usage analytics are not processed by any third party. They are received and stored on infrastructure operated by ZNTH Limited (hosted with Hostinger in the EU). We reserve the right to bring in a specialist analytics processor in future; if we do, we will update this policy and the list below before making the change.

7. International data transfers

Some of our processors are located outside the UK, including in the United States. When we transfer personal data outside the UK, we rely on one of the following safeguards recognised under UK GDPR:

• UK adequacy regulations, where the country has been deemed to provide an adequate level of protection;
• The UK Extension to the EU-US Data Privacy Framework for US recipients that are certified;
• Standard Contractual Clauses together with the UK International Data Transfer Addendum, where neither of the above applies.

8. How long we keep your data

• Analytics data: up to 14 months in Google Analytics (the default retention setting).
• Purchase and licence records: 6 years after the end of the relevant tax year (UK HMRC requirement).
• Desktop app usage analytics: up to 24 months on our servers in raw form; after that, either deleted or aggregated into non-identifiable statistics.
• Support correspondence: up to 3 years after the last message, unless tied to an ongoing customer relationship.
• Cookie consent preference: stored in your browser until you clear it or change it.

9. Your rights

Your rights depend on where you live. We will honour the rights described below, and any other rights you have under the privacy law of your country or region. To exercise any of these rights, contact us at support@dustmagic.io. We will respond within 30 days, or sooner where local law requires.

9.1 If you are in the UK or the European Economic Area (UK GDPR / EU GDPR)

You have the right to:

• Access a copy of the personal data we hold about you;
• Ask us to correct data that is inaccurate;
• Ask us to delete your data ("right to erasure");
• Restrict or object to certain processing;
• Receive your data in a portable, machine-readable format;
• Withdraw consent at any time where we rely on consent;
• Lodge a complaint with a supervisory authority.

Because we rely on legitimate interests for desktop app usage analytics, you also have the right to opt out. You can do this at any time from Settings → Privacy inside the Dust Magic desktop app - no email or request to us is needed.

If you are unhappy with how we have handled your data, you can complain to your national data protection authority. In the UK, this is the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113. Customers in EEA member states can complain to their local DPA - a list is available at edpb.europa.eu.

9.2 If you are in California (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what categories of personal information we collect about you and how we use and disclose it (this is set out in Sections 2 and 3 above);
• Access a copy of the personal information we hold about you;
• Request deletion of your personal information;
• Request correction of inaccurate personal information;
• Opt out of any "sale" or "sharing" of your personal information for cross-context behavioural advertising;
• Limit the use of sensitive personal information;
• Not be discriminated against for exercising these rights.

We do not sell personal information for money, and we do not share it for cross-context behavioural advertising. To exercise any of your California rights, email support@dustmagic.io with the subject line "California privacy request" and tell us which right you wish to exercise. We may need to verify your identity before responding. You can also designate an authorised agent to make a request on your behalf.

9.3 If you are in another US state

Several US states (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others) have privacy laws giving consumers rights similar to those described in 9.1 and 9.2 - for example, rights to access, correct, delete, and opt out of targeted advertising or sale of personal information. Where you have such rights under your state's law, we will honour them. Email support@dustmagic.io and tell us which state you reside in.

9.4 If you are elsewhere

Consumers in Australia (Privacy Act), Canada (PIPEDA), Brazil (LGPD), and other jurisdictions with comprehensive privacy laws may have rights similar to those described above. Where local law gives you such rights, we will honour them. Email support@dustmagic.io and tell us which jurisdiction you are claiming under.

9.5 Common to all regions

We will not charge you for exercising your privacy rights, except where local law allows a reasonable fee for excessive or repeated requests. We will not retaliate against you for making a request. If we cannot verify your identity or if your request is manifestly unfounded, we may decline it and will explain why.

10. Security

We use HTTPS across dustmagic.io, apply the principle of least privilege to our systems, and choose processors with recognised security certifications. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify you and the ICO within 72 hours as required by UK GDPR.

11. Children

Dust Magic is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time to reflect changes to our practices or to comply with new legal requirements. The "Last updated" date at the top of this page shows when it was last revised. If changes are material we will draw them to your attention, for example through a notice on the homepage.

13. Contact us

For any question about this policy, your data, or to exercise your rights, contact us at: