Skip to main content

We’ve updated our privacy policy

We’ve updated our Privacy Notice, effective 18 June 2026.

The UK’s new data protection law, the Data (Use and Access) Act 2025 (DUAA), has come into force, so we’ve updated our notice to reflect it. We’ve also taken the chance to make how we handle your data clearer, which matters to us as a compliance company. Here’s what’s changed.

  • We’ve named our subprocessors. The old version listed vague categories like “cloud computing services”. The new one names the actual companies that process data for us and what each one does, so you can see exactly who’s involved.

  • We’ve updated our AI providers. We now use Anthropic (Claude), Google (Gemini) and Reducto, replacing OpenAI and Microsoft Azure. We’ve also spelled out that none of them are allowed to train their models on your content, and they can only hold it to provide the service to us.

  • We record and transcribe some calls and meetings, for example Ask an Auditor sessions and support calls.

  • We’ve changed how long we keep data. The old notice kept it for up to three months after an account closed. The new one keeps it for up to seven years, which we need to meet our legal, tax, accounting and limitation-period obligations.

  • New rights under the DUAA. You can now raise a data protection complaint with us directly and we’ll acknowledge it within 30 days, and we’ve set out your rights where a decision about you is made automatically.

  • We’ve been clearer on cookies and tracking, including session recording on the platform with sensitive fields like passwords masked, and we now honour Global Privacy Control signals.

There’s nothing you need to do. You can read the full notice here: OneClickComply.com/privacy. If you’ve any questions, email our privacy team at privacy@oneclickcomply.com.