Privacy policy
Last updated 29 July 2026
Short version: we collect what you type into the quote form, plus which search brought you here, so we can price your migration and reply to you. We do not sell it, we do not add you to a mailing list, and you can have it deleted by asking.
This page is about the website. If you become a customer, the agreements we export on your behalf are a completely separate matter, governed by a data processing agreement signed before anything is authorised. We never hold your signed agreements under this policy. See During an engagement.
Who we are
The operator of this site is responsible for the information described here. To reach us about anything on this page, including a deletion request, email the address in the footer.
We are an independent service. We are not affiliated with, endorsed by, or a partner of Docusign, Inc.
What we collect
When you ask for a quote
The form asks for six things, five of them required, because a quote is not possible without them:
- Work email address
- Company name
- Approximate number of envelopes
- When you need the migration done
- Where the archive should be delivered
- Anything else you choose to write in the notes box
Please do not put confidential details, personal data about other people, or anything sensitive into the notes box. A sentence about your deadline is all we need at this stage.
Automatically, with the form
When you submit the form we also record the advertising click identifier and campaign parameters from the link you arrived on (`gclid`, `utm_source`, `utm_medium`, `utm_campaign`, `utm_term`, `utm_content`), the page you submitted from, the referring website, and the time. This tells us which search term brought you, which is how we work out whether advertising is worth continuing. It is stored with your enquiry and nowhere else.
Analytics, only if you agree
We use Google Analytics 4 and Microsoft Clarity to understand how the page is used. Neither loads until you accept them on the banner. If you decline, or ignore the banner, no analytics cookies are set and no session data is collected. You can change your mind at any time using the link in the footer.
Be aware that Microsoft Clarity records session replays, meaning your mouse movement, scrolling, clicks and page interactions, so that we can see where the page confuses people. Clarity masks text input by default. We do not use it to identify individuals.
Why we are allowed to use it
| Information | Purpose | Legal basis under UK and EU GDPR |
|---|---|---|
| Quote form contents | Price your migration and reply to you | Steps taken at your request before entering a contract |
| Click and campaign parameters | Work out which advertising produces genuine enquiries | Legitimate interest in running a business that can measure itself |
| Analytics and session replay | Improve the page | Your consent, withdrawable at any time |
| Enquiry records we keep after replying | Records of who we quoted and what we said | Legitimate interest, and legal obligation where a contract follows |
Who else processes it
We keep the list deliberately short. Each of these is a processor acting on our instructions, not a party we sell anything to.
| Provider | What they do | Where |
|---|---|---|
| Brevo | Stores your enquiry as a contact and a deal, and sends the emails between us | European Union |
| Vercel | Hosts the website and the form endpoint | United States |
| Cloudflare | Domain, DNS, and forwarding for our email address | Global |
| Analytics and advertising measurement, only with your consent | United States | |
| Microsoft | Clarity analytics and session replay, only with your consent | United States |
Where a provider is outside the UK or EU, transfers rely on the standard contractual clauses those providers publish. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
How long we keep it
- Enquiries that do not become customers: 24 months, then deleted. Migration deadlines move, and people come back a year later.
- Enquiries that become customers: kept for the duration of the engagement and 7 years after, because that is what tax and contract record keeping requires.
- Analytics: retained by Google and Microsoft under their own schedules. GA4 is configured to the shortest retention it allows.
Your rights
Wherever you are, you can ask us to show you what we hold, correct it, delete it, hand it over in a portable format, or stop using it. If you are in the UK or EU you can also object to processing based on legitimate interest, and withdraw analytics consent at any time. If you are in California you can exercise the equivalent rights under the CCPA, and we will not treat you differently for doing so.
Email us and we will action it within 30 days. We do not require a specific form of words. If you are unhappy with how we handle it, you can complain to your data protection authority, which in the UK is the Information Commissioner's Office.
During an engagement
If you hire us, we handle your signed agreements, which is far more sensitive than anything on this page. That relationship is governed separately:
- A data processing agreement is signed before any access is authorised. We are happy to sign yours rather than ours.
- Access happens through Docusign's own OAuth consent screen, granted by you, on your own account, and revocable by you at any moment. We never ask for, see, or store your Docusign password.
- We act only on your documented instructions and use the data solely to produce your archive.
- When the archive is delivered and you have confirmed the counts, our working copy is destroyed and we confirm that in writing.
Security
The site is served over HTTPS. Form submissions are transmitted encrypted and processed server side. Credentials for our providers are held in server environment variables and are never exposed to your browser. We keep the number of systems touching your data as small as we practically can, which is why the provider list above is four names long rather than twenty.
Children
This is a business service. It is not directed at anyone under 18 and we do not knowingly collect their information.
Changes
If this policy changes materially we will update the date at the top. Since the only people affected are those who have contacted us, we will email you if a change affects information we already hold about you.