The Statutory Registers service at registers.easonlaw.co.uk (our service) is provided by Eason Law Limited, a company incorporated in England and Wales with registered number 12308593, whose registered office is at 128 City Road, London, EC1V 2NX ('we', 'our' or 'us'). We are the controller of personal data obtained via our service, meaning we are the organisation legally responsible for deciding how and for what purposes it is used.
We take your privacy seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share any information relating to you (your personal data) in connection with your use of our service. It also explains your rights in relation to your personal data and how to contact us or the regulator if you have a complaint.
When we collect and use your personal data we are subject to the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Given the nature of our service, we do not expect to collect the personal data of anyone under 18 years old. If you are aware that any personal data of anyone under 18 has been shared with our service, please let us know so that we can delete it.
This privacy policy relates to your use of our service only. Our service links to other websites, including the main Eason Law website and the websites of partners such as TLC Accountants. Those websites may gather information about you in accordance with their own separate privacy policies, which you should consult as appropriate.
We collect and use the following personal data about you:
You must provide your email address and a password to use the service, and payment details (to Stripe) to subscribe. The contents of your registers are under your control: the service builds them from the public record and you choose what to add, correct or remove.
A point specific to this service: the registers you keep will usually contain personal data about other people, such as your company's directors and shareholders. Those registers are your company's own statutory records, which the law requires the company to hold, and your company is the controller of them in its own right. We process them on your instructions in order to provide the service.
We collect personal data from you directly, when you create an account, subscribe, build or edit your registers, or contact us by email; from Companies House, whose public data service is the source of the company information the service assembles; and indirectly and minimally through the essential technical operation of the service, as explained under 'Cookies and similar storage' below.
Under data protection law, we can only use your personal data if we have a proper reason: where you have given consent; to comply with our legal and regulatory obligations; for the performance of a contract with you or to take steps at your request before entering into a contract; or for our legitimate interests or those of a third party. A legitimate interest is when we have a business or commercial reason to use your personal data, so long as this is not overridden by your own rights and interests.
| What we use your personal data for | Our reasons |
|---|---|
| Creating and managing your account with us | To perform our contract with you or to take steps at your request before entering into a contract |
| Providing the service to you, including building, storing and updating your statutory registers | To perform our contract with you |
| Taking subscription payments and managing billing through Stripe | To perform our contract with you, and to comply with our legal and regulatory obligations regarding accounts and tax |
| Communications with you not related to marketing, including about changes to our terms or policies or other important service notices | Depending on the circumstances, to comply with our legal and regulatory obligations, or for our legitimate interests in running the service well |
| Protecting the security of the systems and data used to provide the service, and preventing and detecting criminal activity | To comply with our legal and regulatory obligations; beyond that, for our legitimate interests in protecting systems and data |
| Enforcing legal rights or defending or undertaking legal proceedings | Depending on the circumstances, to comply with our legal and regulatory obligations, or for our legitimate interests in protecting our business and rights |
| Disclosures and other activities necessary to comply with legal and regulatory obligations that apply to our business | To comply with our legal and regulatory obligations |
| Sharing personal data with parties that will or may take control or ownership of some or all of our business (and professional advisers acting for us or them) in connection with a significant corporate transaction or restructuring, or in the event of our insolvency — anonymised where possible and shared only where necessary | Depending on the circumstances, to comply with our legal and regulatory obligations, or for our legitimate interests in protecting, realising or growing the value in our business |
| Voluntarily sharing relevant personal data with public authorities, regulators or other bodies exercising official functions, in response to written requests where we consider disclosure necessary and appropriate | For a recognised legitimate interest, namely responding to a request from a body that needs the data for its public task or official authority |
We do not collect any special category personal data (such as data about health, ethnicity, beliefs or biometrics), and we do not make any solely automated decisions about you that have legal or similarly significant effects.
We do not use your personal data for marketing, and we will never sell or share it with other organisations for their marketing. If we ever want to send you marketing about our own services, we will ask for your consent first, separately and clearly, and you will be able to withdraw it at any time.
We routinely share personal data with a small number of providers who help us deliver the service, each acting on our instructions under contractual obligations that restrict what they can do with it:
| Recipient | What they do with it |
|---|---|
| Supabase, Inc. (USA) | Account sign-in and database hosting: stores your account details and your registers so the service can be provided, on infrastructure located in London |
| Stripe Payments UK Limited and its group (UK/USA) | Payment processing: collects and holds your card details, takes subscription payments, and provides the billing portal where you manage your subscription |
| Vercel, Inc. (USA) | Website and application hosting: runs the service's pages and server functions through which your data passes |
Company information is retrieved from the Companies House public data service; we do not send your personal data to Companies House. We may also occasionally share personal data with our professional advisers (bound by confidentiality), with law enforcement agencies, courts, tribunals and regulatory bodies to comply with our legal and regulatory obligations, and as described in the corporate transaction row of the table above. We will not share your personal data with any other third party.
We will not keep your personal data for longer than we need it for the purpose for which it is used. In particular: your account details and registers are kept while your account exists; if your subscription ends, they are retained so you can return, and deleted or anonymised twelve months after your subscription ends, or sooner if you ask; billing records are kept for six years as tax law requires; and service logs are kept for no more than thirty days. Following the end of the relevant retention period, we will delete or anonymise your personal data.
Countries outside the UK have differing data protection laws, some of which may provide lower levels of protection of privacy. Your registers and account data are stored at rest in London. However, some of our providers are US-headquartered, and it is sometimes necessary for personal data to be processed in, or accessible from, countries outside the UK, including the United States.
Where that happens, we do so only as UK data protection law permits: on the basis of a UK adequacy regulation (including the UK Extension to the EU-US Data Privacy Framework, for US providers certified under it), or where appropriate safeguards are in place such as legally-approved standard data protection clauses under Article 46(2) of UK GDPR, together with enforceable rights and effective legal remedies for you. If we cannot rely on one of those mechanisms, we will not transfer your personal data outside the UK unless an alternative lawful mechanism or exception applies and this policy has been updated to say so. For more information about our transfer safeguards, contact us using the details below.
Our service does not use advertising or analytics cookies, and does not track you. The only things stored in your browser are strictly necessary for the service to function: your sign-in session, and a local working copy of your registers so your book loads quickly and survives connection problems. Because we use only strictly necessary storage, no cookie consent banner is required. Stripe's payment pages, which are hosted by Stripe, use cookies of their own as described in Stripe's privacy policy.
You generally have the following rights, which you can usually exercise free of charge:
| Right | What it means |
|---|---|
| Access | The right to be provided with a copy of your personal data |
| Correction (rectification) | The right to require us to correct any mistakes in your personal data |
| Erasure (the right to be forgotten) | The right to require us to delete your personal data, in certain situations |
| Restriction of use | The right to require us to restrict use of your personal data in certain circumstances, for example if you contest its accuracy |
| Data portability | The right to receive the personal data you provided to us in a structured, commonly used, machine-readable format, and/or to have it transmitted to a third party, in certain situations — and note that you can download your registers from the service at any time |
| To object | The right to object at any time to your personal data being used for direct marketing (we do none), and in certain other situations to our continued use of it, for example where we rely on legitimate interests |
| Rights around automated decision-making | Safeguards where significant decisions are made about you by wholly automated means — we make no such decisions |
| To withdraw consent | Where we rely on your consent, the right to withdraw it easily at any time, without affecting the lawfulness of what was done before withdrawal |
To exercise any of these rights, email us at scott.eason@easonlaw.co.uk, providing enough information to identify yourself and telling us which right you want to exercise and what information your request relates to. We will respond within one month. You may also find it helpful to refer to the Information Commissioner's guidance on your rights under UK GDPR.
We have appropriate security measures to prevent personal data from being accidentally lost, or used or accessed unlawfully. Data is encrypted in transit, passwords are stored only in securely hashed form, payment details never touch our systems, and access to your personal data is limited to those with a genuine need. We have procedures in place to deal with any suspected data security breach, and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
We may not always get things right, so if something has gone wrong, please tell us and we will do our best to resolve it. You also have the right to lodge a complaint with the Information Commissioner's Office, using the details at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113.
We may change this privacy policy from time to time. When we make significant changes we will tell you by email to your account address before the change takes effect, and this page will always show the version date at the top.
You can contact us by post or email with any questions about this policy or the information we hold about you, to exercise a right under data protection law, or to make a complaint. Post: Eason Law Limited, 128 City Road, London, EC1V 2NX. Email: scott.eason@easonlaw.co.uk.
If you would like this policy in another format (for example audio or large print), please contact us and we will do our best to help.
← Back to Statutory Registers · Terms & Conditions