Privacy notice

Acess Limited, trading as Quantifiable (company number 16890479, registered office 1a Pickford Road, Bexleyheath, England, DA7 4AT) is the controller for personal data we process to run Quantifiable. This notice is a draft pending solicitor review.

Whose data we process

• Workspace members: name, email, role, sign-in events, and the work they do in the product.
• Portal users invited by a firm: name, email, and the documents or messages that firm shares with them.
• Site visitors on the marketing site: the technical data needed to serve the page. Product analytics in the app and portal run in memory for the session and do not set analytics cookies.

Lawful basis

Contract, for data we need to deliver the service the customer asked for. Legitimate interests, for security, abuse prevention and product improvement that does not include training foundation models on tenant data. Legal obligation, where we must keep records. Consent, only where we ask for it (for example the global pattern library, which is off unless a firm opts in).

Processors

The current register is published at /legal/sub-processors. It includes hosting, authentication, email, payments, error monitoring, cookieless analytics, and the model providers that see a prompt when a firm uses an AI feature.

International transfers

Some processors are outside the UK. Where that happens we rely on the UK extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum to the EU standard contractual clauses, as the processor offers.

Retention

Workspace data is kept while the workspace is active and then for the erasure window (30 days after a confirmed request, then hard delete through the dedicated pipeline). Audit records are kept for seven years. Backup copies follow the backup retention then expire.

Rights

You can ask for access, correction, erasure, restriction or portability, and you can object to processing that relies on legitimate interests. Write to privacy@quantifiable.co.uk. We will acknowledge a subject-access request within 72 hours and respond within one month. You can complain to the Information Commissioner's Office.

ICO registration

ICO registration is in progress and the registration number will appear here once issued.

Questions: privacy@quantifiable.co.uk.