[ LEGAL ]
Privacy Policy
This Privacy Policy describes how Ecsper Ltd (“Ecsper”, “we”, “us”) collects, uses, and protects personal information when you use the Ecsper website, platform products (including Ecsper Practice and Ecsper Evidence), and advisory services (together, the “Services”).
1. Who we are
Ecsper Ltd is a company registered in England and Wales. We provide governed AI and evidence management infrastructure for regulated professional services.
Registered office: Unit 100, 281 Kennington Lane, London, England, SE11 5AR
Company number: 16581117
Contact: [email protected]
For the purposes of UK GDPR and the Data Protection Act 2018, Ecsper Ltd is the data controller for account and website administration data, and acts as a data processor for content our clients store in the Services.
2. Information we collect
Account information. When your organisation provisions your access, we hold your name, work email address, organisation, and office assignment.
Authentication data. When you sign in to Ecsper products, we receive identity information from your organisation’s identity provider, limited to your name, email address, and directory identifiers. We do not receive or store your password.
Content. Documents, reports, and related material you create or edit through the Services are stored in the Ecsper platform within your organisation’s designated data residency region.
Usage and audit data. We record access events, save events, version history, and related metadata (timestamps, actor identifiers, request identifiers). This audit trail is a core feature of the Services for regulated professional work.
Technical data. Standard technical information such as IP address, browser version, and diagnostic logs needed to operate and secure the Services.
3. How we use information
We use personal information to: provide and secure the Services; authenticate you; maintain the audit and version records your organisation requires; provide support; and meet our legal obligations. We do not sell personal information. We do not use your content to train AI models.
4. Legal bases
We process personal information on the following bases: performance of a contract with your organisation; our legitimate interests in operating and securing the Services; and compliance with legal obligations.
5. Where data is stored
Client content is stored in the Microsoft Azure region designated for your organisation (for United Kingdom clients, UK South). Authentication and directory data is processed by your organisation’s identity provider in accordance with that configuration.
6. Sharing
We share personal information only with: Microsoft (as our cloud infrastructure provider); service providers under contract who support the operation of the Services; and where required by law. We do not share client content with third parties except at your organisation’s direction.
7. Retention
Content and audit records are retained in accordance with your organisation’s agreement with Ecsper and applicable professional and legal requirements. Account information is retained while your access remains active and for a limited period after deactivation.
8. Security
The Services are hosted on Microsoft Azure with encryption in transit and at rest, tenant isolation, row-level security, and audited access controls. Details of our security programme are available on request.
9. Your rights
Subject to applicable law, you have rights of access, rectification, erasure, restriction, portability, and objection in relation to your personal information. To exercise these rights, contact [email protected]. Where Ecsper processes your information on behalf of your organisation, we may direct your request to your organisation as the controller. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).
10. Changes
We may update this policy from time to time. Material changes will be notified through the Services or by email.
11. Contact
Ecsper Ltd
How we use cookies is described in our Cookie Policy. Our Terms of Use also apply to this website.