Privacy policy

UK GDPR · signwise.uk

This policy describes how Ditra (established in Spain), which operates SignWise at https://signwise.uk, processes personal data when you use the Site. Contact [email protected].

Who we are

SignWise is a trading name used by Ditra for the document preparation service on this Site. Ditra is the data controller for personal data described here. SignWise is not a law firm and does not provide legal advice.

What we collect

• Account email (for sign-in links, receipts, and support).
• Encrypted questionnaire answers and generated document metadata tied to your case.
• Order and payment status (amount, product, whether a final file was downloaded). Card details are processed by Stripe; we do not store card numbers.
• Technical and security data (for example IP address and browser data via our hosts, Turnstile, and error reporting).
• Product analytics if you accept cookies (see cookies).

Why we use your data

We process data to provide the service you request (contract), to meet legal obligations (for example tax records), and, where you consent, for analytics. We do not sell your personal data.

How long we keep data

Questionnaire answers and drafts are deleted about 24 months after the last activity on a case. Sign-in link tokens expire quickly. Payment records may be kept longer for accounting and tax. A scheduled cleanup job removes stale case data as described in our terms.

Processors

• PostHog (EU cloud) for product analytics when you accept cookies. Events do not include your answers, name, address, or email. Replay, if enabled, masks inputs.
• Stripe for card payments.
• Resend for transactional email (sign-in link, receipt, download notice).
• Sentry for error reports.
• Cloudflare Turnstile to reduce abuse on the email-link form and checkout.

SignWise uses privacy-friendly analytics to see which questions people abandon. Before you choose, we run cookieless analytics in memory only, with no session replay. If you accept, we store a cookie and turn on heatmaps and replay. Inputs are always masked. We never send your answers, name, address, or email.

International transfers

Ditra is established in Spain (European Economic Area). Transfers of personal data from the UK to Ditra in Spain are covered by UK adequacy regulations for transfers to the EEA. Some sub-processors (for example in the United States) rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as published by the Information Commissioner's Office. Stripe, Resend, Sentry, and Cloudflare publish their own transfer documentation.

Your rights

Under UK GDPR you may have rights of access, rectification, erasure, restriction, objection, and data portability, and the right to complain to the ICO. Email [email protected] to exercise these rights.