Privacy & Cookie Policy

Switched On App Ltd trading as DocuRail

1. Purpose

This policy explains how DocuRail collects, uses, stores, and protects personal data, and how cookies are used on our website and digital platforms. It ensures compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Scope

This policy applies to:

• All personal data processed by DocuRail.
• All visitors to our website and users of our digital services.
• All employees, contractors, and third-party suppliers handling personal data on behalf of DocuRail.

3. Data We Collect

DocuRail may collect the following personal data:

• Contact details such as name, email address, phone number, and job title.
• Business details relating to client organisations.
• Account information for users of our digital platform.
• Technical data including IP addresses, browser type, and usage statistics.
• Information provided through website forms, support requests, or demo bookings.

4. How We Use Data

Personal data is processed only where lawful and necessary. Uses include:

• Delivering our services, including digital form development and hosting.
• Responding to enquiries and providing customer support.
• Managing accounts, billing, and contracts.
• Sending relevant service updates or communications (with consent where required).
• Monitoring and improving website and platform performance.

5. Legal Basis

We process personal data based on one or more lawful bases:

• Consent from the data subject.
• Performance of a contract.
• Compliance with legal obligations.
• Legitimate business interests (balanced against individual rights).

6. Data Retention

Personal data is retained only as long as necessary for the purpose it was collected. Once no longer required, data is securely deleted.

7. Data Security

• Data is protected using appropriate technical and organisational measures.
• Encryption is applied where appropriate for data in transit and at rest.
• Access is restricted to authorised personnel only.

8. Sharing Data

• We do not sell personal data.
• Data may be shared with trusted third-party providers (such as cloud hosting or analytics services) under contract.
• Where personal data is transferred outside the UK, appropriate safeguards (e.g. Standard Contractual Clauses) will be applied.

9. Your Rights

Under UK GDPR, individuals have the right to:

• Access their personal data.
• Request correction of inaccurate data.
• Request deletion (“right to be forgotten”).
• Restrict or object to processing.
• Request data portability.
• Withdraw consent at any time (where consent was the basis for processing).

Requests can be made by contacting privacy@docurail.com. We will respond within one month.

10. Cookies

Our website uses cookies to improve user experience. These may include:

• Essential cookies: Required for website functionality.
• Analytics cookies: Used to monitor traffic and performance.
• Preference cookies: Store user settings and preferences.

Visitors may manage or disable cookies through their browser settings.

11. Contact

For questions about this policy or to exercise data rights, contact:

Anthony Young, Managing Director
Switched On App Ltd trading as DocuRail
Email: privacy@docurail.com

12. Review

This policy will be reviewed annually or when legislation changes.

Approved by:
Anthony Young
Managing Director
Switched On App Ltd trading as DocuRail
Date: 05/01/2025