Clment privacy & data

For the purposes of the GDPR and UK GDPR, our customers are the data controller when storing or otherwise processing User Data and we are the data processor.

we collect your name, email address, phone number and any other information you choose to provide to us.

we may automatically collect information about your device and usage of our website, products and services, including your IP address, operating system, browser type

time spent on certain pages of the website, pages visited and links clicked.

purchase history and any other information you submit to us for billing and order fulfilment purposes.

demographic information and any other information you choose to include in your response.

Name and contact details. The Service can be used to record the name, email address, job title and phone number of the Subscriber’s Personnel who access the Service and the counterparties recorded in the contract database.

Usage data. The Service records an audit trail of user activity which can be associated with the Subscriber’s Personnel who access the Service.

Contract content. Contracts uploaded to the Service may contain Personal Data about counterparties, signatories and other individuals identified in the contracts.

provide our website, products and services to you;

market our products and services to you, including contacting you electronically

improve our website, products and services;

conduct research and statistical analysis;

tailor content or advertisements on our website to you;

Contract Eagle will Process Personal Data as necessary to provide the Service in accordance with the Terms

The personal information that we collect and use will not be kept longer than necessary for the purposes for which it is collected, or for the duration required for compliance with applicable law, whichever is longer.

free accounts that stay inactive — no sign-in and no use — for an extended period may be closed and their organisation data deleted.

Contract Eagle will delete all Personal Data within a reasonable period from termination of the Agreement.

The Subscriber will be given 90 days from the date of termination (or such other period as agreed between the parties) to export any Data

Some of the personal information we collect is processed in New Zealand.

Geo-redundant backup storage within New Zealand. Required due to the absence of a secondary Azure region within New Zealand.

Where we transfer personal information outside the EEA or UK, it will only be transferred to countries that have been identified as providing adequate protection for EU/UK data, or to a third party where approved transfer mechanisms are in place to protect your personal information (e.g. by entering into the Standard Contractual Clauses and/or the UK’s International Data Transfer Agreement

New Zealand is recognised for the purposes of the GDPR and UK GDPR as a country that has an adequate level of data protection and we rely on this decision in transferring personal information to New Zealand.

such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or an equivalent safeguard required under Applicable Data Protection Laws

A list of current Sub-Processors for the Service as at the date of this Addendum is set out in Schedule 2.

including our Data Processing Addendum (available at clment.com/dpa )

Right to erasure — when your personal information is no longer needed for the purposes for which you provided it, we will delete it.

Right of access — if you ask us, we will confirm whether we are processing your personal information and provide you with a copy of that personal information.

Right to rectification — if the personal information we hold about you is inaccurate or incomplete, you have the right to have it rectified or completed.

Right to erasure — when your personal information is no longer needed for the purposes for which you provided it, we will delete it.

Right to restrict processing — you may request that we restrict or block the processing of your personal information in certain circumstances.

Right to object to processing — you may request that we stop processing your personal information at any time

Right to data portability — you may obtain your personal information from us that you have consented to give us or that is necessary to perform a contract with you.

Right to withdraw consent — if the basis of our processing of your personal information is consent, you can withdraw that consent at any time.

Right to complain to a supervisory authority — you can report any concern you have about our privacy practices to your local data protection authority.

Contract Eagle will assist The Subscriber by implementing appropriate technical and organisational measures, to the extent possible, to fulfil The Subscriber’s obligation to respond to a Data Subject Request

Contract Eagle will not: sell or share (as those terms are defined in the CCPA) Personal Data