Who this notice covers
This notice covers DataHalt website visitors, prospective customers, customer users, vendor-portal users and other people whose personal data is processed in connection with the DataHalt service.
For website and commercial contact data, DataHalt determines the purposes of processing. When a customer uploads or connects contract, vendor or negotiation data to the service, that customer generally determines the purposes and DataHalt processes that Customer Data under the applicable customer agreement and documented instructions.
Personal data we may process
- Contact and commercial information, such as a name, business email address, organisation, role and communications with us.
- Account and access information, including workspace membership, authentication information and authorised user actions.
- Service content supplied by a customer or its counterparties, such as contract documents, vendor correspondence, attached evidence, approvals and negotiation history.
- Technical and security information necessary to operate and protect the service, such as session data, audit events, device or browser information and service logs.
- If a public-website visitor enables optional Analytics, aggregate page and selected call-to-action counts used to improve the website. DataHalt does not use those measurements to identify or profile individual visitors.
Why we use personal data
- To respond to a demo, pilot, support or security request and manage our business relationship with you.
- To provide, secure, maintain and support the DataHalt service, including authentication, auditability, document handling and authorised integrations.
- To prevent fraud, misuse and security incidents; investigate service issues; and comply with applicable legal obligations.
- Where permitted, to send relevant business communications. You can opt out of marketing communications at any time.
Lawful bases
Where UK or EU data-protection law applies, DataHalt relies on the lawful basis appropriate to the context, including performance of a contract, legitimate interests in operating and securing a business-to-business service, compliance with legal obligations and consent where consent is required. Customer Data is processed on the customer’s documented instructions and under the applicable customer agreement.
Sharing and integrations
We may use carefully selected service providers to host and support the service, store customer-provided documents, provide email or identity functions, and operate authorised integrations. We may also disclose data where required by law or to protect the rights, security or integrity of DataHalt, its customers or others.
A customer controls which mailbox, CLM, document system or other integration is connected to its workspace. DataHalt processes the data made available through that connection only to provide the configured service.
International transfers and retention
Where personal data is transferred internationally, DataHalt and its providers use the transfer mechanism and safeguards required for the relevant processing. Customers may obtain the applicable details through the customer agreement and security review process.
Customer Data is retained in accordance with the customer agreement, workspace configuration and documented deletion or retention instructions. We retain website, account and commercial information only for as long as necessary for the purposes described here, including legitimate recordkeeping, security and legal requirements.
Your rights and choices
Depending on applicable law, you may have rights to request access, correction, deletion, restriction, portability or objection to certain processing. If DataHalt processes the data on behalf of a customer, please direct your request to that customer first; we will assist the customer as required by the applicable agreement.
To make a privacy request or raise a concern, email support@datahalt.com with “Privacy” in the subject line. Where UK GDPR applies, you may also complain to the Information Commissioner’s Office.
Changes to this notice
We may update this notice when our services or legal obligations change. The current version and its last-updated date will be published on this page.