Privacy Policy: Data Handling in IP Enforcement

1. Introduction and Scope

Dudespin Global Brand Protection Unit ("Dudespin", "We", "Us", "Our") is committed to protecting the privacy and security of personal data. This Privacy Policy ("Policy") describes Our practices regarding the collection, use, and disclosure of information, including personal data, obtained through the Dudespin Brand Defense & Risk Mitigation Portal ("Portal") and during Our intellectual property (IP) enforcement activities. By accessing or using the Portal, or by providing Us with information, You consent to the data practices described in this Policy. This Policy applies to all data subjects whose personal data We process in connection with Our mission to safeguard Dudespin's intellectual property and digital assets.

2. Data Collection in IP Enforcement

In the course of Our IP enforcement and brand defense operations, Dudespin may collect various types of information, which may include personal data. This collection is essential for identifying, investigating, and neutralizing threats to Our IP. The types of data collected may include:

• Contact Information: Names, email addresses, postal addresses, and telephone numbers of individuals or entities involved in alleged infringement activities, or those reporting such activities.
• Technical Data: IP addresses, domain registration details (WHOIS data), SSL certificate information, server logs, website content, and other digital footprints associated with infringing websites or content.
• Correspondence: Records of communications with alleged infringers, hosting providers, domain registrars, legal counsel, and law enforcement agencies.
• Publicly Available Information: Data gathered from public sources, social media platforms, and open-source intelligence (OSINT) tools relevant to IP infringement investigations.
• Reporting Data: Information provided by users through the Portal's Submission Engine, including details of alleged infringements, suspect URLs, and any contact information voluntarily provided by the reporter.

3. Legal Basis for Processing

Dudespin processes personal data based on several legal grounds, including:

• Legitimate Interests: Processing is necessary for the legitimate interests pursued by Dudespin in protecting its intellectual property, brand reputation, and business operations from infringement and fraud.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which Dudespin is subject, such as responding to legal requests or court orders.
• Contractual Necessity: Where applicable, processing is necessary for the performance of a contract with the data subject or to take steps at the data subject's request prior to entering into a contract.
• Consent: In certain situations, Dudespin may rely on the explicit consent of the data subject for specific processing activities, particularly when data is voluntarily submitted through the Portal.

4. Use of Collected Information

The information, including personal data, collected by Dudespin is used exclusively for the following purposes:

• IP Infringement Investigation: To identify, investigate, and analyze instances of alleged intellectual property infringement, including trademark, copyright, and patent violations.
• Enforcement Actions: To initiate and pursue legal and administrative enforcement actions, such as sending cease and desist letters, filing UDRP complaints, issuing DMCA takedown notices, and pursuing litigation.
• Brand Defense: To monitor and protect the Dudespin brand from dilution, counterfeiting, domain squatting, phishing, and other forms of digital misuse.
• Communication: To communicate with data subjects, including alleged infringers, reporters, legal representatives, and relevant authorities, regarding ongoing investigations and enforcement actions.
• Reporting and Analytics: To generate internal reports, analyze threat landscapes, and improve Our brand protection strategies.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

5. Data Sharing and Disclosure

Dudespin may share personal data with third parties under strict conditions and only when necessary for the purposes outlined in this Policy:

• Legal Counsel: With external legal advisors and law firms engaged to assist in IP enforcement actions.
• Service Providers: With third-party service providers who perform functions on Our behalf, such as hosting providers, domain registrars, and digital forensics experts, under appropriate data processing agreements.
• Authorities: With governmental, regulatory, and law enforcement authorities when required by law or to protect Our rights, property, or safety, or the safety of others.
• Acquirers: In connection with a merger, acquisition, or sale of all or a portion of Our assets, subject to the acquirer agreeing to adhere to this Policy.
• Public Disclosure: Certain information related to IP enforcement, such as domain takedown notices or court filings, may become publicly accessible as part of legal proceedings.

Dudespin ensures that any third party receiving personal data is bound by confidentiality obligations and implements appropriate security measures.

6. Data Security

Dudespin implements robust technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, and destruction. These measures include encryption, access controls, secure networks, and regular security audits. While We strive to protect Your personal data, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, We cannot guarantee its absolute security.

7. Data Retention

Dudespin retains personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period is determined based on the nature of the data, the purpose of processing, and legal or regulatory obligations.

8. Your Data Protection Rights

Depending on Your jurisdiction, You may have the following rights concerning Your personal data:

• Right to Access: To request access to the personal data We hold about You.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure: To request the deletion of Your personal data, subject to certain legal exceptions.
• Right to Restriction of Processing: To request the restriction of processing of Your personal data under certain conditions.
• Right to Object to Processing: To object to the processing of Your personal data, particularly when based on legitimate interests.
• Right to Data Portability: To request the transfer of Your personal data to another organization or directly to You.
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw consent at any time.

To exercise any of these rights, please contact Us using the details provided in Section 9. We may require specific information from You to help Us confirm Your identity and process Your request.

9. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or Our data protection practices, please contact Our Data Protection Officer at:

Email: compliance@dudespin-support.site

10. Changes to This Privacy Policy

Dudespin reserves the right to update this Privacy Policy at any time. We will notify You of any significant changes by posting the new Policy on this page and updating the "Last Updated" date. We encourage You to review this Policy periodically for any changes.

Last Updated: April 28, 2026