Privacy Policy

1. Who we are

ContextPath Ltd ("ContextPath", "we", "us") is a company registered in England & Wales. This policy applies to this website and to the ContextPath platform.

The role we play depends on the context. For this website and for the accounts used to access our service, we act as a controller. When we process information on behalf of an organisation that uses our platform, we generally act as a processor under that organisation's instructions; in that case, the organisation's own privacy notice governs how your information is used.

2. Information we collect

We collect only what we need:

• Information you provide. When you contact us or request a demo, we receive details such as your name, email address, and anything you choose to include in your message.
• Account and identity information. When access to the platform is provided to you, we receive basic details such as your name, work email address, and the organisation you belong to.
• Technical information. Standard details processed automatically to deliver the site and service securely and reliably, such as IP address and request details held in server logs.

This website does not use advertising or third-party tracking cookies. See our Cookie Policy.

3. How we use information

• To respond to enquiries and demo requests.
• To provide, operate, and secure the service.
• To authenticate users and manage access.
• To monitor, maintain, and improve what we offer.
• To meet our legal and regulatory obligations and to protect our rights and those of our customers.

4. Legal bases

Where we act as a controller, we rely on the following legal bases under the UK GDPR: performance of a contract; our legitimate interests in operating and improving the service securely and in responding to enquiries; compliance with legal obligations; and, where required, your consent.

5. How we share information

We do not sell your personal information. We share it only as needed:

• Service providers. Trusted vendors who process information on our behalf, such as hosting, under contracts that require appropriate safeguards.
• Your organisation. Where access was provided through an organisation, we may share relevant information with that organisation's authorised administrators.
• Legal and safety. Where required by law, or to protect the rights, safety, and security of our users and our service.
• Business transfers. In connection with a merger, acquisition, or similar transaction, subject to this policy.

6. International transfers

Where information is transferred outside the UK or European Economic Area, we use appropriate safeguards such as Standard Contractual Clauses or the UK's International Data Transfer Agreement.

7. Data retention

We keep personal information only for as long as necessary to provide the service, respond to your enquiry, and meet our legal, accounting, and reporting obligations. Retention of information held on behalf of an organisation is governed by our agreement with that organisation.

8. Security

We use technical and organisational measures designed to protect personal information against unauthorised access, loss, or misuse, including encryption in transit and access controls. No method of transmission or storage is completely secure, but we work to protect your information and review our measures regularly.

9. Your rights

Subject to applicable law, you may have the right to access, correct, update, or delete your personal information; to restrict or object to certain processing; to data portability; and to withdraw consent where we rely on it. You also have the right to lodge a complaint with a supervisory authority, in the UK the Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at support@contextpath.com. Where your access was provided through an organisation and we act on its behalf, we may direct your request to that organisation, which is responsible for responding.

Deleting your data

You can ask us to delete personal information we hold about you by emailing support@contextpath.com with the subject "Data deletion request". We will verify your request and respond within the time required by applicable law. Where your account was provided by an organisation, deletion is coordinated with that organisation, and some information may be retained where we are legally required to keep it.

10. Children

Our service is intended for use by organisations and their authorised personnel. It is not directed to children, and we do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "last updated" date above.

12. Contact us

Questions or requests can be sent to support@contextpath.com.

• ContextPath Ltd
• Registered in England & Wales
• Company number: 17053644
• Registered office: Camburgh House, 27 New Dover Road, Canterbury, Kent CT1 3DN, United Kingdom