Privacy.

1. Who we are

Civation publishes DCA RouteLab. The service is operated by Darwinian Angel Ltd, a company registered in England and Wales under company number 14715407.

References to “we”, “us” and “our” in this policy refer to Darwinian Angel Ltd.

For privacy questions or requests, please use our contact page.

2. About DCA RouteLab

DCA RouteLab is an experimental, deterministic commercial reasoning engine for UK public sector officers.

It is designed to support structured thinking about route, price, risk, affordability and commercial decision-making.

The service is rule-based and does not use generative AI or black-box scoring to produce its core route-lab outputs.

3. What we collect

We collect only what is needed to operate the service, protect it from misuse and respond to users. This may include:

• Contact information — such as your name, email address and organisation, if you choose to contact us, request support, provide feedback or sign up for updates.
• Essential technical data — such as IP address, request headers, browser type, device information, security logs and basic usage events needed to deliver pages, maintain security and protect against abuse.
• Feedback information — any comments, suggestions or issue reports you choose to send to us.

4. Project data

DCA RouteLab is intended to be used with commercial and project information. This may include commercially sensitive project information, such as budget ranges, cost assumptions, risk allowances, affordability pressures, procurement route assumptions, market considerations and governance concerns.

We do not save, host or retain the project data you enter into DCA RouteLab.

Project information entered into the workspace is held locally in your browser. It is not sent to us for storage.

Because project data is not saved by us, you are responsible for keeping your own records of any outputs, notes, reasoning summaries or screenshots you wish to retain for your organisation’s internal review, governance or audit purposes.

Local-browser data may be lost if you clear your browser storage, change device, use a different browser or if local storage is otherwise deleted.

5. Personal data and sensitive information

DCA RouteLab is designed for commercial and project parameters, not personal data.

You should avoid entering personal data, resident data, service-user data, employee data, special-category data, passwords, system credentials, security information or unnecessary identifiable third-party information.

You should only enter project or commercial information that you are authorised to use.

6. How we use information

We use the limited information we collect to:

• provide and maintain DCA RouteLab;
• keep the service secure and protect against misuse;
• respond to questions, support requests and feedback;
• understand and improve the service at a general level;
• maintain basic operational records; and
• comply with legal obligations and enforce our terms.

We do not use project data to profile users, train machine-learning models or create advertising audiences.

We do not sell your data.

7. Lawful bases

Where UK data protection law applies, we rely on one or more of the following lawful bases:

• Legitimate interests — to operate, secure, improve and protect the service, respond to users and understand how the prototype is being used.
• Contract — where processing is necessary to provide the service or respond to a request connected with use of the service.
• Legal obligation — where we need to process information to comply with applicable law.

8. Cookies and local storage

DCA RouteLab uses only cookies and local storage that are necessary for the service to function. This may include technologies used to:

• maintain basic session state;
• preserve your in-browser workspace;
• remember interface choices; and
• protect the service from abuse.

We do not use advertising cookies, third-party marketing pixels or cross-site profiling technologies.

Project data held in local browser storage remains on your device and can be cleared by you through your browser settings.

9. Who processes data for us

We may rely on trusted infrastructure providers for hosting, security, email, analytics limited to service operation, and related technical services.

Those providers process information on our behalf only as needed to provide and protect the service.

10. Retention

We keep personal information only for as long as needed for the purposes described in this policy.

Contact and support messages are retained only as long as needed to respond, maintain appropriate records and improve the service.

Technical and security logs are retained for a limited period needed to operate, secure and diagnose the service.

Project data entered into DCA RouteLab is not saved, hosted or retained by us. Browser-only project data is held locally in your browser and can be cleared by you at any time.

11. Your rights

Under UK data protection law, you may have rights to:

• access personal information we hold about you;
• ask us to correct inaccurate information;
• ask us to delete information;
• restrict or object to certain processing;
• request a copy of information you provided to us; and
• complain to the Information Commissioner’s Office.

These rights depend on the type of information and the lawful basis for processing.

To exercise your rights, please use our contact page.

12. Children

DCA RouteLab is intended for professional use by adults acting in a public-sector, commercial, procurement, governance or related professional capacity.

It is not intended for use by children.

13. Changes to this policy

We may update this policy from time to time.

The latest version will be posted on this page with an updated date.

14. Contact

Questions about this policy or how DCA RouteLab handles information can be sent via our contact page.