GDPR & European Privacy Notice

Soft Clerk is committed to compliance with the General Data Protection Regulation (Regulation (EU) 2016/679) (“EU GDPR”) and the UK General Data Protection Regulation / Data Protection Act 2018 (“UK GDPR”).

This notice applies to all European Economic Area (EEA) and United Kingdom visitors, prospective clients, and enterprise partners interacting with our services.

Under Article 6 of the GDPR, we process personal data solely under the following lawful bases:

• Contractual Necessity (Art. 6(1)(b)): To prepare proposals, deliver milestone code, and execute client development agreements.
• Legitimate Interests (Art. 6(1)(f)): To maintain website security, prevent fraudulent bot traffic, and optimize technical infrastructure.
• Explicit Consent (Art. 6(1)(a)): When you opt-in to communications or submit direct inquiry forms via our site.
• Legal Obligations (Art. 6(1)(c)): To comply with tax, invoicing, and corporate compliance regulations.

Under Chapter 3 of the GDPR, you have the right to:

• Right of Access (Art. 15): Obtain confirmation and copies of your personal data processed by us.
• Right to Rectification (Art. 16): Correct inaccurate or incomplete personal records.
• Right to Erasure / “To Be Forgotten” (Art. 17): Request deletion of your personal data under certain conditions.
• Right to Restriction of Processing (Art. 18): Restrict how your personal data is utilized.
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests.

When personal data is transferred outside the EEA/UK to our cloud infrastructure in the United States, we ensure equivalent levels of data protection by utilizing European Commission-approved Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework.

To exercise your GDPR data rights or submit a Data Subject Access Request (DSAR), please contact our Data Protection Office at:

dpo@softclerk.com

We will acknowledge your request within 5 business days and respond substantively within 30 calendar days as required by GDPR Article 12.

You also possess the right to lodge a complaint with your local EU Data Protection Authority (DPA) or the UK Information Commissioner's Office (ICO).