Privacy Notice
Last updated 3 November 2026
DulySign is run by P3 Technologies Ltd, company number 17180916, registered in England and Wales. This notice explains how we use personal data. If you have a question, email hello@dulysign.co.uk.
If you've been asked to sign a document
The business that sent you the document is in charge of your data (the controller). We handle it on their behalf (as processor) to get the document signed. That includes your name, email, mobile number if a code was sent by text, your signature, your IP address and device details, and the times you opened, confirmed your code and signed. These details appear on the certificate attached to the signed document. If you have questions about how your data is used, ask the business that sent you the document first. You can also contact us.
If you use DulySign at work
We are the controller of the data we need to run your firm's account.
| What we collect | Why | Lawful basis |
|---|---|---|
| Name, work email, password (stored scrambled), firm name | To create and run your account | Contract with your firm |
| Billing details handled by GoCardless | To take payment | Contract |
| Log in times, IP address, device | Security and preventing misuse | Legitimate interests |
| Emails you send us | To help you | Legitimate interests |
| Service emails, for example billing or changes to terms | To run the service | Contract |
We don't sell personal data and we don't use it for advertising. We only send marketing emails to business contacts where the law allows, and you can opt out at any time.
If you visit dulysign.co.uk
Our website doesn't use advertising or tracking cookies. The web app uses essential browser storage only, to keep you logged in.
Who we share data with
We use these suppliers to run DulySign: Supabase (database and storage, London), Twilio (text message codes, USA), Resend (email, Ireland), Vercel (web hosting, USA) and GoCardless (Direct Debit payments, UK). Where data leaves the UK we rely on UK adequacy regulations or approved safeguards such as the UK International Data Transfer Addendum. We may also share data where the law requires it.
How long we keep it
Signed documents and their audit trails are kept while the sending firm's account is open, and deleted 90 days after it closes, plus up to 35 days in backups. Account data is kept for the same period. Billing records are kept for 6 years to meet tax law.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to how we use it, and to data portability. Where we are processing on behalf of a business, we'll pass your request to them. Email hello@dulysign.co.uk to make a request. We'll reply within one month.
If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
We'll update this notice if anything changes and show the date at the top.