Privacy Policy

Last updated: 3 September 2026

DRAFT — pending review by a qualified solicitor. Working draft, not yet relied upon. A reviewed version will replace it before the service is offered commercially.

1. Scope

This policy explains how Matter Due handles personal data. For the personal data your firm loads into the Service about its own staff and clients (caseworker names, contact details, matter references), your firm is the controller and we are the processor — that relationship is governed by the Data Processing Addendum. For the data described in section 3 we are the controller.

2. Who we are

Matter Due is the data controller for its own account and website data. Contact: privacy@matterdue.com. Registered entity details: TBC.

3. Data we control

Category	Examples	Lawful basis
Account	Your name, work email, firm name, hashed password	Contract
Billing	Stripe customer/subscription IDs, plan, invoices (no card numbers)	Contract / legal obligation
Usage & logs	Sign-in events, request logs, error reports	Legitimate interests (security, reliability)
Support	Emails and notes from support requests	Legitimate interests

4. How we use it

To provide and secure the Service, take payment, provide support, comply with legal obligations, and send service messages. We do not sell personal data and do not use it for third-party advertising.

5. Sharing

We share data with the sub-processors listed on the sub-processors page (payments, email delivery, hosting, error monitoring), and with authorities where legally required. All sub-processors are bound by data-protection terms.

6. Retention

Account and firm data is retained while your account is active. After closure, live data is deleted within 30 days (TBC); backups age out within the backup retention window (TBC). Billing records are kept for the period required by law.

7. International transfers

We aim to keep data in the UK/EU. Where a sub-processor processes data outside the UK/EU, appropriate safeguards (e.g. the UK IDTA or SCCs) are in place. See the sub-processors page.

8. Your rights

Subject to law, you may request access, correction, deletion, restriction, or portability of your personal data, and object to certain processing. For data your firm controls, contact your firm; we will assist them as processor. To exercise rights over data we control, email privacy@matterdue.com. You may also complain to the UK Information Commissioner's Office (ICO).

9. Cookies

See the Cookie Policy. In short: the app uses only a strictly-necessary session cookie; the marketing site sets no cookies.

10. Changes

We will post changes here and, for material changes, notify you by email or in the app.