eProof Ltd ("we", "us", "our") is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This privacy notice explains how we collect, use, and protect your personal information when you use our services or interact with our website.


Information We Collect

We may collect and process several categories of personal data. This includes Identity Data, such as your name, username, or similar identifier. We collect this information to personalise your experience and communicate with you effectively. We also gather Contact Data, which encompasses your email address, telephone number, and postal address. This information is crucial for us to provide our services and keep you informed about important updates. Additionally, we may collect Technical Data, which includes information about your device, such as your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform. This helps us ensure our services are compatible with your devices and helps us improve our offerings. Lastly, we collect Usage Data, which includes information about how you use our website and services. We use this data to analyse trends, administer the site, track users' movements around the site, and gather demographic information about our user base as a whole.

How We Use Your Information

We process your personal data for several purposes. Primarily, we use it to provide our services to you, which allows us to deliver the services you've requested and fulfil our contractual obligations to you. We also use your data to improve our website and services. By analysing how our services are used, we can make improvements that benefit all our users. In some cases, we may be required by law to process your personal data to comply with legal obligations. The legal bases for processing your data are performance of a contract, legitimate interests, legal obligation, and consent. We process data when necessary to fulfil our contractual obligations to you or when processing is necessary for our legitimate interests or those of a third party, provided your fundamental rights do not override these interests. In some cases, we process data to comply with a legal requirement. In specific situations, we may collect and process your data with your consent, which you can withdraw at any time.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, typically for the duration of any contractual relationship and for a period of up to 6 years afterward, unless a longer retention period is required or permitted by law. Specific retention periods may vary depending on the type of data and applicable legal, regulatory, or operational requirements. For example, account information may be kept for the duration of your account plus up to 6 years, transaction data may be kept for 6 years from the transaction date for tax purposes, and communication records may be kept for 3 years from the last interaction.

Your Rights

Under the UK GDPR, you have several important rights. These include the right to access your personal data, rectify inaccurate data, erase your data in certain circumstances, restrict processing, data portability, object to processing, and rights related to automated decision-making and profiling. To exercise any of these rights, please contact us using the details provided below. We will respond to your request within the timeframes required by law.

Data Sharing

We may share your personal data with service providers acting as processors, professional advisers, and HM Revenue and Customs, regulators and other authorities. Service providers are third parties who provide services to us, such as hosting, IT support, or payment processing. They are obligated to handle your data securely and only as we instruct. Professional advisers include lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services. We may need to share data with HM Revenue and Customs, regulators and other authorities when required by law or as part of our regulatory compliance. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

Data Security

We have implemented appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These include encryption of data, regular security assessments, access controls and authentication procedures, and staff training on data protection. However, while we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Changes to This Privacy Notice

We may update this privacy notice from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The latest version will always be available on our website. We encourage you to review this notice periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions about this privacy notice or our data practices, please don't hesitate to contact us. We will be happy to address any queries or concerns you may have. You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). However, we would appreciate the chance to deal with your concerns before you approach the ICO, so please feel free to contact us first.

  • Please use our contact form here: Contact Form
  • Postal address: 86-90 Paul Street, Shoreditch, London EC2A 4NH

Response Times

We aim to respond to all data-related queries within one month, as required by the UK GDPR. For complex requests or when we receive a high volume of requests, we may extend this period by up to two additional months. If we need to use this extension, we will inform you within the first month and explain the reasons for the delay. This privacy notice is designed to provide you with clear and comprehensive information about how we handle your personal data. If you need any clarification or have any questions about our privacy practices, please don't hesitate to get in touch.

Last updated: 24 August 2024