Privacy Policy

What data we collect

When you use RegData, we collect and process the following personal data:

Account information: Name, email address, and login credentials that you provide when your account is created. This data is necessary for the performance of our contract with you (UK GDPR Article 6(1)(b)).

Usage data: Server access logs including IP address, browser type, pages visited, and timestamps. This data is processed for our legitimate interests in maintaining security and diagnosing technical issues (UK GDPR Article 6(1)(f)).

We do not collect or process any special category data (as defined under UK GDPR Article 9).

How we use your data

We use your personal data to:

• Provide and maintain the RegData service
• Authenticate your identity and manage your account
• Ensure the security and integrity of the service
• Communicate with you about service-related matters

We do not use your data for marketing, profiling, or automated decision-making.

Data sharing

We do not sell your personal data. We share data only with:

• Microsoft Azure: Our cloud infrastructure provider, which processes data on our behalf under a data processing agreement. Data is stored in Azure’s UK South region.
• OpenAI: Our AI suggestion engine uses the OpenAI API to process regulatory terminology data. No personal user data is sent to OpenAI; only regulatory vocabulary terms are transmitted.

International transfers

Your personal data is stored and processed within the United Kingdom (Azure UK South). Where any sub-processor transfers data outside the UK, appropriate safeguards are in place as required by UK GDPR Chapter V.

Data retention

Account data is retained for the duration of your active account and for a reasonable period afterward to comply with legal obligations. Server logs are retained for 90 days.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate personal data
• Erase your personal data (subject to legal obligations)
• Restrict processing of your personal data
• Data portability
• Object to processing based on legitimate interests
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact us at privacy@digitecture.co.uk.

We will respond to your request within one month, as required by UK GDPR.

Information Commissioner’s Office

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the ICO:
Website: ico.org.uk
Telephone: 0303 123 1113

Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the service. The “Last updated” date at the top reflects the most recent revision.

Contact

Digitecture Ltd
United Kingdom
Email: contact@digitecture.co.uk