Legal
The documents that govern use of Proxy.
Proxy is a trading style of Case Ledger Tech Ltd, registered in England and Wales under company number 17009166. Four documents govern use of the platform, they are published here in full, and each one carries a version and an effective date. An agreement incorporates them at the version current when it was signed.
- Operator
- Case Ledger Tech Ltd
- Company number
- 17009166
- Governing law
- England and Wales
- Contact
- poweredbyproxy.co.uk/access#request
Draft
These documents are not in force.
35 facts have still to be supplied, and they are highlighted in the text where they belong. Nothing here binds anybody until those are filled in and a solicitor has reviewed the result. The outstanding list is on the legal index.
Four documents, and they are one agreement.
Read in this order: what you are agreeing to, what we do with data about you, what we do with data you send us, and what the service may not be used for.
-
01 v1.0
Terms of service
What Proxy provides, what your organisation is responsible for, how it is paid for, how it can be suspended, and how the agreement ends. Your order form incorporates these terms at the version stated on it.
- Proxy is provided as a service. Your data stays yours, and we do not train on it.
- Work is metered per operation and paid for in credits, at the rates on your order form.
- Either party can end the agreement. You get a window to export before anything is deleted.
- Liability is capped, and the cap is on your order form. Some liability cannot be capped.
-
02 v1.0
Privacy notice
This notice covers the people Case Ledger Tech deals with directly: visitors to this site, people who ask for access, people who sign in to Proxy, and billing contacts. Personal data inside a customer's documents is covered by the data processing terms instead.
- This website sets no cookies, runs no analytics, and makes no third-party requests.
- The access form records five fields and a timestamp. It does not record your IP address.
- We do not sell personal data, and we do not use it for advertising.
- You can ask for a copy, a correction or a deletion, and complain to the ICO.
-
03 v1.0
Data processing terms
These terms form part of the agreement and govern the personal data inside the documents your organisation sends to Proxy. You are the controller. We are your processor, and we act on your instructions.
- You are the controller. We process only on your documented instructions.
- Subprocessors are named in advance, and you can object before one is engaged.
- We tell you about a breach without undue delay, and help you meet your own deadline.
- At the end we give you an export window, then delete. Deletion is not reversible after it.
-
04 v1.0
Acceptable use
This policy forms part of the agreement and applies to everybody who uses Proxy through your organisation. It matters more here than on most platforms, because Sign and Communications act in your name towards people who are not your customers.
- Nothing unlawful, and nothing that makes us a party to harming somebody.
- Do not probe the isolation between organisations. Report what you find instead.
- Sign is for people you have a real relationship with and authority to ask.
- Communications is subject to PECR. Consent and opt-out are your responsibility.
Why they are published here now
This page used to say that publishing a second copy risked it drifting out of step with the one attached to your contract. That risk is real, and the answer to it is one copy rather than none: these are versioned, your order form names the version, and superseded versions stay available on request.
What your order form still decides
Rates, term, region, services enabled, and any variation to these terms live on the order form, because they differ per organisation. Where the order form and these documents disagree, the order form wins on anything it expressly varies, and the data processing terms win on anything about personal data.
Asking a question about them
Use the contact form. Send your security questionnaire at the same time and ask for the subprocessor list. Prospective customers get the same answers as customers, before signing anything.
Reporting a vulnerability
Use the same contact form, say that it is a security report, and give enough detail to reproduce it. We will confirm receipt, and we will not pursue anybody who reports in good faith and does not access other organisations' data.
What is still outstanding.
Every fact in these documents that this site cannot establish on its own is written as a marker rather than as a plausible value, and highlighted where it appears. A legal page with an invented registered office is worse than no legal page.
This list is generated from the documents, so it cannot fall out of step with them. When the last one is filled in, the draft notice disappears, these pages become indexable, and this section stops rendering.
35 outstanding
- abuse report acknowledgement window
- acceptable use change notice period
- API deprecation notice period
- audit record retention period
- background check policy
- backup deletion period
- billing currency
- breach notification window
- business continuity and backup arrangements
- categories of data subject for this customer
- categories of personal data for this customer
- confidentiality survival period
- controller data location
- credit expiry period
- effective date
- enquiry retention period
- force majeure termination period
- ICO registration number
- invoice dispute window
- liability cap
- non-renewal notice period
- overdue payment notice period
- payment terms
- post-termination export window
- privacy request owner role
- rate change notice period
- registered office address
- security record retention period
- security training cadence
- server log retention period
- subprocessor change notice period
- subprocessor list location
- subprocessor notification method
- termination for convenience notice period
- terms change notice period