Privacy policy

Who we are

PractiSign is operated by [Company Name], registered in England and Wales. When we refer to “PractiSign”, “we”, “us” or “our”, we mean this company.

Information we collect

• Account information: Name, email address, practice name, and role when you create an account.
• Document data: Documents you upload for signing, recipient details, and signing activity.
• Usage data: How you interact with PractiSign, including pages visited, features used and device information.
• Signing evidence: IP addresses, timestamps, user agent strings and email verification records collected as part of the evidence trail.

How we use your information

• To provide and operate the PractiSign service.
• To send signing requests, reminders and notifications on your behalf.
• To generate evidence records that document the signing process.
• To communicate with you about your account and service updates.
• To improve the service based on aggregated, anonymised usage patterns.

Data storage & security

Your data is stored on servers within the United Kingdom or European Economic Area. We use encryption in transit (TLS 1.2+) and at rest. Access to production systems is restricted to authorised personnel with appropriate access controls.

We implement tenant isolation between practice accounts, meaning one practice cannot access another practice’s data.

Third parties

We may share data with third-party service providers who help us operate PractiSign, including hosting, email delivery and payment processing. These providers are contractually required to protect your data and use it only for the services they provide to us.

We do not sell your personal data or document contents to third parties. We do not use third-party tracking scripts on signing routes.

Cookies

We use cookies to operate the service and understand how it is used. For full details, see our cookie policy.

Your rights (GDPR)

Under the UK General Data Protection Regulation, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data, subject to legal retention requirements.
• Object to or restrict processing in certain circumstances.
• Request a portable copy of your data.
• Lodge a complaint with the Information Commissioner’s Office (ICO).

Data retention

We retain your account data for as long as your account is active. Document data and evidence records are retained for a period consistent with professional and legal requirements. When you close your account, we will delete your data within a reasonable period, except where retention is required by law.

Changes to this policy

We may update this policy from time to time. We will notify account holders of material changes by email or through the service. The “last updated” date at the top of this page reflects the most recent revision.

Contact

For questions about this privacy policy or how we handle your data, contact us at privacy@pracsign.com.