Privacy
Privacy Notice
This draft notice explains how EquiClause handles personal information when you use the storefront, buyer account, template library, contact form and Document Review service.
Last reviewed: 15 September 2026
Who is responsible and how to contact us
EquiClause Limited operates EquiClause. For privacy requests or questions, contact team@equiclause.madethis.app.
Operational details about the controller contact address, any data-protection lead and the handling timetable for requests are pending confirmation. This notice will be updated when those details are confirmed.
Information we collect
Depending on how you use the site, this can include your name, email address, password account details, order or purchase information, library access records, messages sent to EquiClause, and technical information needed to operate the site.
For Document Review, the intake form may collect your contact details, an agreement document and the explanation you choose to provide. Please only provide information that is necessary for the review request.
Why we use information and the lawful basis
We use account, purchase and download information to provide the customer library, deliver purchases, secure access and respond to account-support requests. We use contact details and messages to respond to enquiries. We use Document Review intake information to administer the purchased review service.
The precise lawful-basis mapping for each activity is being finalised with EquiClause's operational information. Where relevant, processing may be necessary to provide requested services, meet legal obligations, pursue legitimate operational interests, or rely on consent for optional analytics. This wording is not a statement that every activity has been confirmed under a particular basis.
Accounts, orders and download delivery
Buyer accounts are used to associate eligible purchases with the email address used at checkout and to protect access to purchased downloads. Payment card details are handled in the checkout flow rather than requested through EquiClause contact or Document Review forms.
EquiClause uses the MadeThis platform for the storefront checkout integration and related service infrastructure. Stripe is involved in payment checkout where it is presented to you. The exact controller/processor roles, contract terms and data flows are operational details pending confirmation.
Contact enquiries and Document Review uploads
Contact form details are sent using a server-side notification route so the message content is not placed in the page URL. Do not send payment card details, health information, criminal-offence information or other sensitive personal data through the contact form.
Document Review uploads are restricted to authenticated purchasers with the required entitlement. The private intake route stores the submitted document for the review process. Do not upload special-category data or unnecessary third-party personal data. The detailed handling, review access and deletion procedure are operational details pending confirmation.
Recipients, processors and international transfers
Information may be processed by EquiClause and by service providers used to run the storefront, provide hosting and application infrastructure, process checkout payments, and—only if you opt in—provide analytics. The providers evidenced by the storefront are MadeThis, Stripe in the checkout flow, and PostHog for optional analytics.
Supplier lists, processor terms, locations and any international-transfer safeguards are being finalised. You can ask for the current confirmed information by emailing the privacy contact above.
Retention and security
EquiClause aims to keep personal information only for as long as needed for the relevant service, recordkeeping or legal purpose, then delete or anonymise it where appropriate. Specific retention periods are operational details pending confirmation and are available on request once confirmed.
The storefront uses authentication and purchase-entitlement checks to limit access to buyer-library downloads and Document Review intake. No security measure can be guaranteed to be absolute; technical and organisational measures, incident procedures and supplier assurances require ongoing operational review.
Your rights and complaints
Subject to applicable law, you may have rights to request access, correction, deletion, restriction, portability or objection, and to withdraw consent where processing relies on it. To make a request, email team@equiclause.madethis.app. Cookie choices can also be changed at any time via Cookies & Tracking.
You may complain to the UK Information Commissioner's Office (ICO). The ICO's current contact route is available from its official website. EquiClause's internal complaint and identity-verification process is pending confirmation.
Children, automated decisions and changes
The storefront is not designed to collect personal information from children. Please contact us if you believe a child has provided personal information without appropriate authority.
No automated decision-making practice is described in this notice. Any use of automated decisions or profiling that has a legal or similarly significant effect requires operational confirmation before it can be described here.
We may update this notice as the service or its operational arrangements change. The date at the top will show when it was last reviewed.