Clausely Privacy Policy

1. Who we are

Clausely is a trading name of Priscilla Folarin, operating as a sole trader in the United Kingdom. For the purposes of UK GDPR, the data controller is Priscilla Folarin trading as Clausely. Contact for data matters: hello@clausely.co.uk.

2. What personal data we collect

When you use Clausely, we collect: your name, work email address, business name and address, job title of the person accountable for AI use in your business, and details about your organisation’s AI use (sector, headcount, AI tools declared, high-risk categories declared). We also collect payment information via Stripe — we never see or store your card details; Stripe handles this directly.

3. Lawful bases for processing

We process your personal data under two lawful bases: performance of a contract (to deliver the pack you purchased) and legitimate interest (to communicate with you about your order and improve our service).

4. How we use your data

We use your data solely to: generate the compliance documents you purchased, deliver the documents to you, communicate with you about your order, send you the optional annual update notification (if you have not opted out), and comply with our legal and accounting obligations.

5. Who we share your data with

We share your data only with the third-party processors required to deliver the service: Stripe (payment processing), Anthropic (AI document generation; data is not used by Anthropic for model training under our API terms), Resend (transactional email delivery), and Supabase (secure data storage, EU-hosted). We do not sell, rent, or share your data for marketing purposes with any third party.

6. International transfers

Some of our processors are based outside the UK or EU. Where this is the case, we rely on UK-approved transfer mechanisms including adequacy decisions and standard contractual clauses.

7. Retention

We retain your order data and generated documents for 30 days after delivery on our live systems. After 30 days, download links expire. We retain records of your transaction for 6 years as required by UK tax law. You can request deletion of your personal data at any time, subject to our legal retention obligations.

8. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict processing of, object to processing of, and port your personal data. To exercise any of these rights, email hello@clausely.co.uk. We will respond within one calendar month. If you are unhappy with our response, you can complain to the Information Commissioner’s Office at ico.org.uk.

9. Cookies

See our Cookies Policy.

10. Changes to this policy

We may update this policy from time to time. Changes take effect when published on this page.