Privacy policy
Last updated: July 2026
This policy explains how Fitzentic Ltd ("Fitzentic", "we", "us") handles personal data in relation to this website and the Fitzentic platform. Company number 16534780. ICO registration ZC044007. Registered office: 15a Shrubbery Road, London, SW16 2AS.
Who is the controller
For website visitors and enquiries, Fitzentic is the data controller. For personal data a law firm processes inside the platform about its own clients and matters, the firm is the controller and Fitzentic is a processor acting on the firm's instructions (see our Data Processing Addendum).
What we collect
- Enquiries & signups: your name, firm, email, phone and the message you send us.
- Account data: login email, name, role and security information (e.g. two-factor status).
- Usage & technical data: IP address, device/browser type, pages viewed and actions taken, kept for security and to improve the service.
- Cookies: see our Cookie policy.
Why we use it (lawful bases)
- To respond to enquiries and provide the service you request (contract / steps prior to a contract).
- To keep the platform secure, prevent abuse and maintain an audit trail (legitimate interests).
- To meet legal and regulatory obligations (legal obligation).
- For limited marketing where you have opted in (consent) — you can withdraw at any time.
How long we keep it
We keep personal data only as long as needed for the purpose it was collected, then delete or anonymise it. Account and audit records are retained for the life of the account and for a reasonable period afterwards to meet legal and security obligations.
Sharing & sub-processors
We do not sell your data. We share it only with the sub-processors that help us run the service (hosting, payments, email and the integrations you use) — listed on our Sub-processors page — and where required by law.
International transfers
Fitzentic is hosted in the UK. Where any processing involves a transfer outside the UK, we rely on an approved transfer mechanism (such as the UK International Data Transfer Agreement or adequacy regulations).
Your rights
You have the right to access, correct, erase, restrict and object to processing, and to data portability. To exercise any of these, contact [email protected]. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Security & breaches
We protect personal data with encryption, strict tenant isolation, access controls and an append-only audit log. If a personal-data breach occurs that is likely to result in a risk to individuals, we will notify the relevant parties and, where required, the ICO within 72 hours.
Contact
Questions about this policy or your data: [email protected].