Privacy Policy
Last updated: 2 July 2026 · Draft template — pending review
1. Who we are
[COMPANY LEGAL NAME] of [REGISTERED ADDRESS] is the data controller for this website. Contact: [CONTACT EMAIL]. ICO registration: [ICO REGISTRATION NUMBER].
2. What we collect and why
When you order we collect your email address, company name, site address and the job details you enter. We use this information to generate your document, deliver it by email, keep an audit copy, and provide support. The lawful basis is performance of a contract (UK GDPR Article 6(1)(b)), and legitimate interests for audit records and fraud prevention (Article 6(1)(f)). We do not use your data for marketing unless you separately opt in, and we do not sell it.
3. Payments
Payments are processed by Stripe. Your card details are entered on Stripe's secure checkout and never touch our servers. Stripe acts as an independent controller for payment data — see Stripe's privacy policy.
4. AI processing
The job details you supply are sent to Anthropic's Claude API to generate your document. Under Anthropic's commercial API terms this data is not used to train their models. We recommend you do not include personal data about identifiable individuals (such as operatives' names) in the job description — it is not needed to produce the document.
5. Who we share data with
Our processors: Stripe (payments), Anthropic (document generation), Resend (email delivery) and Vercel (hosting). Some processors are based in the United States; transfers are safeguarded by the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses, as applicable. We do not share your data with anyone else unless required by law.
6. Retention
Order records and audit copies of issued documents are kept for six years (limitation and tax purposes), then deleted. You can ask us to delete your data sooner where we have no legal need to keep it.
7. Your rights
You have the right to access, correct, delete and port your personal data, to object to or restrict processing, and to withdraw consent where processing is based on consent. To exercise any right, email [CONTACT EMAIL]. You can complain to the Information Commissioner's Office at ico.org.uk if you are unhappy with how we handle your data.
8. Cookies
This site uses only essential cookies (set by Stripe during checkout for fraud prevention). We do not use advertising or analytics cookies. If analytics are added later, this policy and a consent banner will be updated first.