Who we are
PaperTrail ("we", "us", "our") is a cloud-based project management platform operated from Belfast, United Kingdom. We are committed to protecting the privacy and security of the personal data we process.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, PaperTrail is the data controller for personal data collected through this website (papertrail.uk).
What data we collect
We collect and process the following types of personal data:
Information you provide to us:
- Name, email address, phone number, and company name when you submit a contact form, request a demo, or apply for a role.
- Any additional information you include in messages sent through our forms.
Information collected automatically:
- IP address, browser type, operating system, and device information.
- Pages visited, time spent on pages, and referring URLs.
- Cookies and similar technologies (see our Cookie Policy for details).
How we use your data
We use personal data for the following purposes:
- To respond to enquiries: When you contact us or request a demo, we use your details to respond and follow up. Legal basis: legitimate interest.
- To improve our website: We use analytics data to understand how visitors use our site and to improve the user experience. Legal basis: legitimate interest.
- To process job applications: If you apply for a role, we use your data to assess your application. Legal basis: legitimate interest in recruitment.
- To comply with legal obligations: We may process data where required by law. Legal basis: legal obligation.
How we share your data
We do not sell your personal data. We may share data with the following categories of recipients:
- Analytics providers: Google Analytics and Cloudflare Web Analytics to help us understand website usage. These services may process data outside the UK, subject to appropriate safeguards.
- Hosting providers: Our website and application are hosted on infrastructure that stores data in the United Kingdom.
- Professional advisors: Accountants, lawyers, and other advisors where necessary.
Data retention
We retain personal data only for as long as necessary for the purposes described above:
- Contact form submissions: 2 years from the date of enquiry.
- Job applications: 1 year from the date of application.
- Analytics data: Retained in anonymised form by our analytics providers according to their own retention policies.
Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can ask us to correct inaccurate or incomplete data.
- Right to erasure: You can ask us to delete your personal data in certain circumstances.
- Right to restrict processing: You can ask us to limit how we use your data.
- Right to data portability: You can request your data in a structured, machine-readable format.
- Right to object: You can object to processing based on legitimate interests.
To exercise any of these rights, please contact us at papertrail.uk/contact.
Security
We implement appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.
Contact us
If you have questions about this privacy policy or how we handle your data, please get in touch.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.