Legal information
Privacy policy
1. Who is responsible
Rightsward is a brand of Cirracloud Limited, a company registered in England and Wales under company number 16938812. Cirracloud Limited is the data controller responsible for deciding how personal information submitted through this website is used for audit assessment, service delivery and operation of the website.
You can contact us at hello@rightsward.com or hello@cirracloud.com, or use the privacy-request form below.
2. Information we collect
- Your name, work email and organisation information you provide.
- Names of protected works, products or brands, official public URLs and public links you ask us to review.
- Communications about the audit or service.
- Evidence records created from public sources, including URLs, timestamps and screenshots.
- Basic technical logs needed to secure and operate the website.
3. Why we use it
- To respond to your request and assess whether Rightsward is a suitable service.
- To perform the public-source audit you requested.
- To prepare a proposal or deliver a contracted service.
- To maintain evidence, case and authorisation records.
- To protect the website, prevent abuse and comply with legal obligations.
Depending on the context, our lawful basis is taking steps at your request before a contract, performing a contract, complying with legal obligations or pursuing legitimate interests in securely operating and improving the service. Where consent is the appropriate basis, you may withdraw it.
4. Service providers and transfers
Website forms and hosting may be processed by Netlify or the final hosting provider. Email, evidence storage and case-management providers may process information under contract. We limit access to people and providers who need it for the stated purpose. Some providers may process data outside the UK; where required, appropriate contractual safeguards will be used.
5. Retention
Unsuccessful or inactive audit enquiries are normally deleted or anonymised within 12 months. Client evidence and authorisation records are retained for the period stated in the service agreement and for any additional period reasonably needed for legal, security or dispute purposes. We delete information earlier when it is no longer needed and no obligation requires retention.
6. Sharing
We do not sell personal information. If you authorise a notice, relevant information may be supplied to the platform, host or service processing that notice. We may also disclose information where required by law or to establish, exercise or defend legal rights.
7. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may complain to your data-protection regulator. UK residents can contact the Information Commissioner's Office.
8. Contact us or submit a privacy request
Email hello@cirracloud.com or use this dedicated form for privacy questions or rights requests. We may need to verify your identity before acting.
9. Changes
We will update the effective date when this policy materially changes.