Legal

Privacy Policy

Last updated: 15 August 2026

This policy explains how Contract Command ("we", "us") collects, uses, and protects your personal data when you visit contractcommand.com or join our early-access waitlist. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contract Command is currently a pre-launch product. This website is a marketing and waitlist site only — we do not yet store customer contracts or operate the application described on our homepage. This policy will be updated before the product launches.

Who we are

Contract Command is the data controller for personal data collected through this website. You can contact us about anything in this policy at privacy@contractcommand.com.

What we collect and why

We collect a deliberately small amount of data:

• Waitlist email address. If you join the early-access waitlist, we collect the email address you submit, together with which form on the page you used. We use it solely to contact you about Contract Command's launch and early access. Lawful basis: consent (you actively submit the form). You can withdraw at any time by emailing us or using the unsubscribe link in any message we send.
• Analytics data. If you accept analytics cookies, Google Analytics 4 collects pseudonymous usage data (pages viewed, approximate location, device type) to help us understand how the site is used. Lawful basis: consent, via the cookie banner. If you decline, no analytics cookies are set. We also use Ahrefs Web Analytics, a cookieless, privacy-focused analytics tool that collects aggregate, non-identifying visit statistics. Lawful basis: legitimate interests (understanding aggregate site traffic without identifying you).
• Technical logs. Our hosting provider (Cloudflare) processes IP addresses and request metadata transiently to serve the site securely and defend against abuse. Lawful basis: legitimate interests (security and service delivery).

We do not sell personal data, and we do not use it for third-party advertising.

Who processes your data

We use a small number of service providers ("processors") to run this site:

Some of these providers process data outside the UK/EEA. Where that happens, transfers are protected by appropriate safeguards such as the UK Addendum to the EU Standard Contractual Clauses or an adequacy decision (including the UK Extension to the EU–US Data Privacy Framework, where the provider is certified).

How long we keep your data

• Waitlist emails: kept until you unsubscribe, or until our launch communications conclude, after which the list is deleted.
• Google Analytics data: retained for up to 14 months, then deleted automatically.
• Emails you send us: kept as long as needed to handle your enquiry and for a reasonable period afterwards.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased ("right to be forgotten");
• restrict or object to our processing;
• receive your data in a portable format;
• withdraw consent at any time, where consent is the lawful basis.

To exercise any of these rights, email privacy@contractcommand.com. We will respond within one month. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

Cookies

Details of the cookies and similar technologies this site uses, and how to manage them, are in our Cookie Policy. You can change your choice at any time via the "Manage cookies" link in the footer.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18.

Changes to this policy

We may update this policy from time to time — for example, when the Contract Command application launches. The "Last updated" date at the top reflects the latest version. Material changes will be highlighted on this page.