This notice explains how ContraCase collects, uses, and protects personal data for its own business purposes — including website visitors, demo requesters, prospective customers, and platform users. It does not replace the customer organisation's own privacy notice for statutory casework data.
ContraCase is the data controller for the personal data described in this notice. Contact: privacy@contracase.com
| Category | Data | Purpose |
|---|---|---|
| Website visitors | IP address, browser type, pages visited | Website operation, analytics (with consent) |
| Demo / walkthrough requests | Name, email, organisation, job title, request details | Assessing and responding to enquiries |
| Procurement pack requests | Name, email, organisation, procurement stage | Providing procurement documentation |
| Platform users | Name, email, role, authentication data | Account management, access control, audit |
We do not sell personal data. We may share data with sub-processors listed in our sub-processors page. All sub-processors are bound by appropriate data processing agreements.
Enquiry data is retained for up to 24 months after last contact. Platform user data is retained for the duration of the customer relationship plus a reasonable period for regulatory and audit purposes. See our retention policy.
Under UK GDPR you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to withdraw consent at any time. Contact privacy@contracase.com to exercise any of these rights. You may also complain to the ICO at ico.org.uk.
Last updated: May 2026. This notice may be updated from time to time.