Effective: 1 January 2026
This notice explains how Documents Platform Ltd handles personal data collected through our website and provided to us under customer agreements. We act as a controller for personal data we collect directly through this website, and as a processor under our customers' instructions for personal data they upload to the platform.
Consent (marketing, where required), contract performance, legitimate interest (security, fraud prevention, product analytics), legal obligation. Legitimate-interest assessments are available to customers under NDA.
We don't sell personal data. Shared only with sub-processors under contract — published as our Sub-Processor Schedule — professional advisors, and competent authorities where legally required. International transfers governed by SCCs.
Marketing-form data: 24 months unless you opt out earlier. Customer platform data: per the customer's contractual schedule and applicable law. Audit logs: 7 years minimum.
You may have rights of access, rectification, erasure, restriction, portability, and objection. Contact privacy@documents-platform.com. UK residents can complain to the ICO; EU residents to their supervisory authority.
SOC 2 Type II and ISO 27001 controls. Suspected compromise: security@documents-platform.com.
Documents Platform Ltd · 30 Crown Place, London EC2A 4EB · privacy@documents-platform.com