Privacy notice
Your information, enquiries and portal access
Effective and last reviewed: 20 October 2026. Joined Systems is owned and operated by Dasher Consulting. This notice covers joined.systems, the Joined Systems demonstration portal and sample subdomains, enquiry correspondence, and the existing Dasher Consulting websites and portal. Customer project information has separate handling arrangements agreed for each engagement.
Who is responsible
Dasher Consulting Ltd is the controller for these activities. David Dasher handles privacy enquiries at hello@dasher.consulting. You can also write to 86–90 Paul Street, London EC2A 4NE, United Kingdom.
What we receive and how we use it
If you contact us, we receive the details you choose to send: your name, reply address, organisation, business challenge and any correspondence. We use them to answer your request, arrange a conversation and prepare a relevant proposal. Making an enquiry does not subscribe you to a marketing list. Please leave out confidential documents, credentials and sensitive personal information.
The website contact link opens your email app. The portal enquiry form prepares a draft in your browser; it does not submit or save the enquiry on our server. You review and send it through your email app. Company and industry are optional. Enquiry details are voluntary, but we need a way to reply and enough context to help.
When you sign in, Microsoft Entra ID supplies your account identifier, name, email address and assigned roles. The portal uses these to establish a session and decide which demonstrations you can open. A protected demonstration receives a short-lived signed launch token containing your account identifier, email and role. Access is assigned; there is no public account registration. We do not use this process to make solely automated decisions with legal or similarly significant effects on you. You can ask David to review an access decision.
Vercel receives technical request information to deliver and protect the sites, including network address, requested URL, time, browser information and response details. Avoid putting personal or confidential information into page URLs. The demonstration content is fictional; live customer connections remain paused.
Our reasons for handling information
We use legitimate interests to respond to business enquiries, discuss a relevant proposal and operate secure, permission-controlled demonstrations. These interests are answering the request you made, managing the business relationship and protecting the service. We limit the information to what those purposes need. Where an individual asks us to take steps towards their own contract, or we perform that contract, we use the contractual basis. Records required by law are handled to meet the relevant legal obligation.
How long we keep it
Unsuccessful enquiries are kept for no more than 12 months after the last substantive contact, and removed earlier when no longer needed. If a contract, legal duty or dispute requires particular records for longer, we retain only those records for that purpose and review the reason and period separately. Removal from active records is distinct from providers’ recovery, backup and legal-hold processes.
We review portal access when a demonstration or business relationship ends and remove access that is no longer needed. Microsoft account, identity and audit records follow the purposes of that account and the service’s security and retention arrangements; ending demonstration access does not necessarily delete a person’s Microsoft account. Vercel runtime logs use a rolling availability window of up to 30 days with the current observability options. Providers retain separate service and security records under their own published purposes and retention criteria. We keep an extracted incident record longer only where a specific investigation or legal requirement needs it.
Cookies, preferences and website statistics
Google Analytics is optional on our two public websites and on selected demonstration portal pages. The consultancy website, Joined Systems website and portal each have their own choice; accepting on one does not accept on the others. It stays off until you choose “Accept analytics”. Rejecting analytics does not affect access to the website, enquiry links or demonstrations. You can change your choice at any time using “Analytics choices” in the relevant website footer, portal navigation or video/guide footer. Withdrawing consent stops collection, removes our Google Analytics cookies and reloads the page to unload the tag. It does not automatically erase information already collected; contact us if you want to exercise your data rights.
With your consent on the relevant public website, we measure approved public page visits and clicks to contact and portal links. We send a standard public page address without query strings or fragments and a generic page title; we do not send names, email addresses, enquiry text, search terms or referring page addresses. Google also receives technical information such as browser/device details, network requests and pseudonymous cookie identifiers. Google states that Analytics does not log or store individual IP addresses from UK users. The separate sample applications have no Google Analytics tag from this setup.
If you separately accept portal analytics, it counts clicks to open an approved demo, video downloads, video playback starts, 25%, 50% and 75% viewing milestones, and completions. Viewing milestones use distinct portions actually played while the page is visible; skipping to the end is not a completed viewing. Completion requires reaching the end after playing at least 95% of the video. Incremental video seconds covered are also measured, without counting the same portion twice within one page visit. These are playback signals, not proof of a person’s attention. Downloading a video does not let us see whether it is watched elsewhere.
Portal analytics sends only a fixed demo identifier, a generic portal surface, a fixed video identifier and bounded viewing figures. It does not send your name, email address, account identifier, role, sign-in or launch tokens, questions, source records or enquiry text. It does not monitor activity inside the individual sample applications. Opening clicks indicate interest, not confirmed application use or customer demand. As with website analytics, Google receives technical request information and pseudonymous browser identifiers after consent. Portal sign-in and demo access work if you reject analytics.
We use consent as the basis for optional analytics. Advertising storage, Google signals and advertising personalisation are disabled in our website and portal tags. Automatic enhanced measurement is disabled in both website and portal streams. We remember an analytics choice in your browser for up to six months; analytics cookies are set for up to 90 days without renewal on each visit. Google Analytics event and user data retention is set to two months; standard aggregate reports can remain longer. Earlier versions used Vercel Web Analytics, and previously collected aggregate reports may remain with Vercel.
Google provides Analytics under its data-processing terms. Analytics data may be processed outside the UK, with applicable contractual transfer safeguards. See Google’s privacy policy and Google’s explanation of Analytics data collection. Our processor and transfer records include this optional website service.
If you choose a light or dark theme, the browser stores that preference on your device until you clear it. The portal uses cookies needed for sign-in and security. Its session normally expires after 30 days of inactivity; protected samples have their own shorter session cookies. Portal and sample sessions expire separately. You can clear site data through your browser, but this may sign you out or reset your preferences.
Who processes it and where
Microsoft provides business email and Entra ID authentication; Vercel hosts the website, portal and demonstrations. Microsoft’s tenant data-location card showed Exchange Online customer data at rest in the United Kingdom on 17 October 2026. Vercel uses a global delivery network; the website and portal function settings currently select the United States. Data at rest in one country does not mean all service, support or security processing stays there. The providers’ data-processing terms include standard contractual clauses and the UK international data transfer addendum for relevant transfers. You can ask us for information about the applicable safeguards.
David and authorised people supporting the relevant service may access the information they need. We may also disclose necessary records to professional advisers or authorities where required to meet legal duties or deal with a claim. We do not sell your personal information.
Provider details: Microsoft data-processing terms, Vercel data-processing terms and Vercel privacy notice. These explain provider responsibilities, subprocessors and transfer safeguards.
Your right to object
You can object to our use of your personal information where we rely on legitimate interests. Email hello@dasher.consulting and explain what you want us to review. We will consider your circumstances and stop that processing unless an applicable reason permits it to continue.
Your other rights and questions
Depending on the circumstances, you can request access, correction, deletion or restriction of your information. Data portability applies to eligible information processed by automated means on the basis of consent or a contract. These rights have limits; we will explain any reason we cannot fulfil a request. Contact David using the details above.
You can complain to the Information Commissioner’s Office. You do not have to contact us first.
Changes and customer projects
We update this notice when these activities change and show the review date above. Before working with real customer sources, we agree the purpose, access, providers, location, retention and responsibilities for that engagement.
Customer data and engagement responsibilities · Contact Dasher Consulting