Privacy Policy

Evidentia Group Ltd is the data controller for personal data collected through this website and the Evidentia platform.

Contact: hello@evidentia.ltd

Through this website:

• Name, email address and organisation name submitted via our waitlist form
• Name, email address and message submitted via our contact form

Through the Evidentia platform:

• Account information (name, email, organisation)
• Governance records created by users
• Usage data for platform operation

Website enquiries and waitlist:

• To respond to your enquiry
• To notify you of early access availability
• To understand which sectors are most represented in our waitlist

Platform data:

• To provide the Evidentia service
• To maintain the integrity of governance records

We process personal data on the basis of:

• Legitimate interests (website enquiries)
• Contract performance (platform users)
• Legal obligation where applicable

Website enquiry data: retained for 24 months or until you request deletion. Platform data: retained for the duration of your subscription and in accordance with your Data Processing Agreement.

Under UK GDPR you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (subject to legal and contractual constraints)
• Object to processing
• Data portability

To exercise these rights contact: hello@evidentia.ltd

Data is primarily stored within the EEA. Where transfers outside the UK or EEA occur, appropriate safeguards are applied including UK IDTA or SCCs.

We use the following sub-processors:

• Supabase (database and authentication — EU/Ireland)
• Vercel (application infrastructure)
• Resend (transactional email)

See our Cookie Policy for details.

We may update this policy. The current version is always available at evidentia.ltd/privacy-policy.

hello@evidentia.ltd