Privacy notice

Last updated 6 October 2026.

Who is responsible for your data

The data controller is [LEGAL ENTITY NAME] of [REGISTERED ADDRESS]. For any privacy question or request, email [PRIVACY EMAIL].

What we collect, and when

When you ask for a questionnaire link we send an email to the address you give us. Nothing is stored against your address at that point — no order exists until you open the link, so an address typed by mistake leaves no record beyond a rate-limiting counter held as a one-way hash.

Once you open the link we store your email address and your questionnaire answers so you can come back and finish, and so we can build your document. At submission we also record the name and role you type into the attestation, because the document states who attested to it.

We do not ask for, and have no use for, your clients' personal information. Please do not put any into the questionnaire.

Why we are allowed to hold it

We hold and use your data to perform the contract you entered into when you bought the document — that is the lawful basis. We do not use it for marketing, we do not sell it, and we do not share it for anyone else's advertising.

Why your answers are sensitive, and how we treat them

Your answers describe your firm's security posture. We treat them accordingly:

• Your full document is generated only after payment — it does not exist before then.
• Download links check your order's live status every time they are used, so access ends the moment an order is refunded or expires.
• Our operational logs record order references, states and error types. They never contain your answers, and we test for that.
• Emails we send you contain links, never your answers.

How long we keep it

• Unsubmitted questionnaires: 7 days. Your email address and answers are erased, not merely marked inactive.
• Completed orders: 90 days from the moment your document is generated. We email you 14 days before that date. If you have not renewed by the end of it, the document is deleted from storage and the answers behind it are erased. Renewing continues both your access and our retention.
• After erasure we keep a record that an order existed and was attested — order reference, states and dates — with no personal data in it. We keep that because it is the audit trail for a document that was issued, and because it contains nothing that identifies you.

Cookies

This site sets no cookies and runs no analytics or advertising trackers. Your browser's session storage holds your own order link so you are not locked out if you reload the page; it is cleared when you close the tab and it never leaves your device. Cloudflare Turnstile, which keeps automated abuse off the signup form, may set its own storage to tell a browser from a bot.

Your rights

You can ask us to show you the data we hold about you, correct it, or erase it. Email [PRIVACY EMAIL] from the address on the order, or tell us the order reference. We will respond within 30 days and normally much sooner.

You can correct most things yourself: your answers stay editable for the whole of your access window. Asking for erasure before the window ends will delete your document, and we cannot restore it afterwards.

If you are a California resident, you have the rights described above, and we do not sell or share your personal information as those terms are used in the CCPA. We will not discriminate against you for exercising any of these rights.

Who else sees it

Your data stays within this service's own Azure resources. It is never placed in CloudSolved IT's internal systems. We use Microsoft Azure for hosting and storage, Azure Communication Services for email, Cloudflare Turnstile to keep automated abuse off the signup form, and Stripe to take payment. We never see or store your card details — those go directly to Stripe.

If something goes wrong

If we discover a breach that affects your personal data, we will tell you and any regulator we are required to tell, without undue delay and within any period the law sets. We will say what happened, what it affects, and what we are doing about it.

Changes

We may update this notice. The date at the top always reflects the current version.