Privacy Policy
Last updated: 1 August 2026
This policy explains what personal data we collect when you use ContractHelp, why we collect it, and the rights you have over it. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018.
1. Who is responsible for your data
The controller of your personal data is JAMBA Inc., a company incorporated in Canada, which designs and operates the ContractHelp platform (contracthelp.org).
For anything related to your data, contact legal@contracthelp.org or write to ContractHelp, c/o JAMBA Inc., 300-420 West Hastings St, Vancouver, BC, V6B1L1, Canada.
2. What we collect
- Your email address — collected at checkout and used to deliver your report and communicate about your review.
- Payment confirmation — payments are processed by Stripe. We receive confirmation that you paid; we never see or store your card details.
- The contract you upload — along with the party you represent and any focus question you add.
- Basic technical data — such as IP address and request logs, kept for security and to keep the service running reliably.
- Usage analytics — page views and related browser data collected via Google Analytics on public pages (not on internal admin or reviewer tools), so we can understand how the site is used and improve it.
We do not run advertising trackers on this site.
3. Why we use it (and our lawful bases)
- To deliver your review — reviewing your contract, preparing your report, and emailing it to you (performance of a contract).
- To take payment and keep required records (performance of a contract and legal obligation).
- To keep the service secure and improve it (our legitimate interests).
- To respond when you contact us (our legitimate interests).
We do not use your data for marketing unless you have asked us to contact you.
4. The contract you upload
Contracts often contain personal data — about you and about other parties. Your document is treated as confidential, is used only to prepare your report, and is seen only by the members of our team working on your review. You are responsible for making sure you have the right to share the document with us.
5. Who we share data with
We never sell your data. We share it only with:
- the members of our review team working on your report;
- service providers we use to run ContractHelp — payment processing (Stripe), website analytics (Google Analytics), and hosting infrastructure (AWS) — who may only use your data to provide their service to us;
- authorities or courts, where we are legally required to do so.
6. International transfers
ContractHelp serves customers in the UK, but your data may be processed in, or accessed from, Canada and other countries where we or our service providers operate. Canada is covered by UK adequacy regulations for commercial organisations. Where a transfer is not covered by adequacy regulations, we use appropriate safeguards such as the UK International Data Transfer Agreement or standard contractual clauses.
7. How long we keep it
- Your contract and report: up to 12 months after delivery, so we can handle follow-up questions, then deleted.
- Payment and transaction records: as long as tax and accounting law requires.
- Technical logs: a short rolling period.
You can ask us to delete your contract and report sooner at any time by emailing legal@contracthelp.org.
8. Your rights
Under UK data protection law, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it;
- receive a copy of data you gave us in a portable format.
To exercise any of these rights, email legal@contracthelp.org. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk), though we would appreciate the chance to resolve any concern first.
9. Security
Your data is encrypted in transit, access to uploaded contracts is restricted to the team working on your review, and we limit what we collect to what the service needs.
10. Cookies
Our website uses strictly necessary cookies — those needed for the site and checkout to function — and analytics cookies set by Google Analytics on public pages so we can measure site usage. We do not use advertising cookies. Payment pages are hosted by Stripe, which sets its own cookies as described in its privacy policy.
11. Changes to this policy
If we make material changes to this policy, we will update this page and the date at the top. Please check back from time to time. See also our Terms & Conditions.