Privacy Policy

Last updated: 10 June 2026

1. Who we are

1 Sign (“we”, “us”, “our”) provides on-site job sign-off software at www.1sign.co.uk. 1 Sign is operated by [your registered company name], registered in England and Wales (company no. [company number]), registered office [registered address]. We are the data controller for the account and website data described below. For questions about this policy or your data, contact support@1sign.co.uk.

2. The data we collect

• Account data — when you register: company name, your name, email address, phone (optional), business address, and a securely hashed password.
• Engineer data — names and email addresses of engineers you invite to your account.
• Sign-off content — information your engineers enter to complete a sign-off, which may include your customer’s name, email, business/site address, job details and a captured signature image.
• Payment data — handled by our payment processor, Stripe. We do not store your card details; we keep a Stripe customer/subscription reference to manage your subscription.
• Technical data — limited server logs and security data (e.g. IP address used for login rate-limiting) needed to run and protect the service.
• Cookies — a strictly-necessary session cookie. See our Cookie Policy.

3. How we use your data

• To provide and operate the service (create your account, generate and email sign-off certificates).
• To take payment and manage your subscription (via Stripe).
• To send service emails (verification, password reset, engineer invites, sign-off certificates).
• To secure the service (authentication, rate-limiting, fraud and abuse prevention).
• To provide support and respond to your enquiries.

4. Legal bases

We process data to perform our contract with you, for our legitimate interests in running and securing the service, to meet legal obligations, and where required, with your consent (which you may withdraw at any time).

5. Your customers’ data (you as controller)

When your engineers capture a customer’s details and signature, you are the controller of that information and 1 Sign acts as your processor, handling it only to provide the service to you. You are responsible for having a lawful basis to collect your customers’ data and signatures and for telling your customers how you use them.

6. Who we share data with

We do not sell your data. We share it only with trusted providers who help us run the service:

• Stripe — payment processing.
• Our email provider — to deliver service emails.
• Our hosting provider — to host the application and data.
• Authorities or advisers where required by law.

7. Storage, security & retention

Data is encrypted in transit (HTTPS). Passwords are stored hashed; account data is isolated per customer so no account can see another’s data. We keep your data for as long as your account is active and as needed to meet legal, accounting and security obligations, after which it is deleted or anonymised.

8. International transfers

Some providers (e.g. Stripe) may process data outside the UK/EEA. Where they do, appropriate safeguards (such as UK/EU approved clauses) are in place.

9. Your rights

You have the right to access, correct, delete or restrict your personal data, to object to processing, and to data portability. To exercise these, contact support@1sign.co.uk. You can also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

10. Changes

We may update this policy from time to time. The “last updated” date above shows the latest version.

This page is a general template and not legal advice — please have it reviewed for your business before going live.