Legal

GDPR Compliance

Last updated: 19 February 2026

1. Our Commitment

Clawwell is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We process personal data lawfully, fairly, and transparently.

2. Data Controller

Clawwell acts as the data controller for personal data collected through our website and services. For data processed on your behalf by your assistant (such as client information you provide), you remain the data controller and Clawwell acts as a data processor.

3. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: request a copy of all personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure: request deletion of your personal data where there is no compelling reason for continued processing
• Right to restrict processing: request that we limit how we use your data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making: not be subject to decisions based solely on automated processing that significantly affect you

4. How to Exercise Your Rights

To make a data subject request, email us at privacy@clawwell.com. We will respond within one month. If your request is complex, we may extend this by a further two months, and we will inform you of any extension within the first month.

5. Data Processing Activities

We process personal data for the following purposes:

• Providing and maintaining the Clawwell service
• Personalising your assistant based on your professional role and preferences
• Processing payments and managing subscriptions
• Communicating service updates and support
• Improving and developing our services
• Complying with legal obligations

6. Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in a high risk to individuals' rights and freedoms, including the use of AI to process personal data.

7. International Data Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place. These include Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office (ICO) and adequacy decisions where applicable.

8. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Account data is retained for the duration of your subscription. Conversation data is deleted within 90 days of account closure. Financial records are retained for 7 years as required by law.

10. Sub-Processors

We use carefully selected sub-processors to help deliver our service. A list of current sub-processors is available on request by contacting privacy@clawwell.com.

11. Supervisory Authority

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113

12. Contact Our Data Protection Team

For any GDPR-related queries, contact us at privacy@clawwell.com.