Effective 3 November 2026
Who we are
EstateBee Limited, trading as DocuDraft, is registered in England and Wales under company number 11429690. Our registered office is 33 Canonbie Road, London, SE23 3AW, United Kingdom. We are the controller of personal information used to operate DocuDraft.
For a privacy request, email customersupport@docudraft.co.uk or write to our registered office. Start with a short description of your request; please do not attach identity documents or passwords.
The information we collect
When you create an account or purchase, we use your name, email, login details, billing information, products ordered, payment status and transaction references. We retain the terms and digital-delivery choices recorded with your order. Stripe and PayPal handle payment details; we do not store your full payment-card number or security code.
Enquiries and support requests contain the contact details and messages you send. Newsletter subscriptions contain your email address, name if supplied, preferences and subscription records. Technical records may include IP address, browser information, requests, security events and download activity.
Editable documents are completed on your own device. Buying a template does not upload its completed contents to DocuDraft. Do not send sensitive personal information or confidential transaction documents through a general enquiry form.
How we receive information
If you choose Google or Facebook sign-in, we receive the identity details needed to create or access your account. The provider’s own privacy policy governs its service.
Most information comes directly from you when you browse, register, order, subscribe or contact us. Payment providers return payment confirmations and transaction references. Our hosting and security services generate technical records. If someone contacts us on behalf of a business, we may receive professional contact information from that person.
Why we use information
| Purpose | Information used | Legal basis |
|---|---|---|
| Accounts, orders and downloads | Identity, contact, order and payment-reference information | Taking steps you request before a contract and performing that contract |
| Answering enquiries and handling issues | Contact details, correspondence and relevant order records | Contract where applicable; otherwise our legitimate interest in responding and resolving problems |
| Security and preventing misuse | Connection, account and security records | Our legitimate interest in protecting the service and its users |
| Tax, accounting and compliance | Transaction and business records | Legal obligations |
| Newsletter and legal alerts | Name, email and subscription preferences | Your consent |
| Complaints and legal claims | Relevant correspondence and records | Legal obligations or our legitimate interest in establishing, exercising or defending rights |
We balance our legitimate interests against your rights and use information only where the purpose justifies it. If information is necessary to process an order and you do not provide it, we may be unable to fulfil that order.
Marketing choices
Buying a product or contacting us does not subscribe you to marketing. If you sign up for DocuDraft updates, we use your details to send business guidance, legal alerts and relevant product news. You can unsubscribe using the link in a message or by contacting us.
Withdrawing consent does not affect earlier lawful use. Essential order, account and security messages are separate from marketing. We do not sell customer contact details or give other businesses permission to market to you merely because you use DocuDraft.
Who receives information
Authorised staff and contractors may access information needed for their work. Service providers support our website, communications, security and payments: 20i provides hosting and email infrastructure; Microsoft supports business email; Stripe and PayPal process payments; WordPress and WooCommerce operate the store; Newsletter manages subscriptions within the site; Zoho integrations support customer records and communications where used. Wordfence supports website security.
Providers receive the information needed for their function and may act as processors or, for some payment, security or legal purposes, independent controllers. We may also share relevant information with professional advisers, insurers, regulators or authorities where necessary, or with a successor business under appropriate confidentiality safeguards.
International transfers
Some providers operate internationally, so processing may take place outside the United Kingdom. Where we make a restricted transfer, we use an applicable adequacy arrangement or appropriate safeguards, such as approved contractual protections, and assess any additional measures required. Contact us for information about the safeguards relevant to your data.
Security
We use HTTPS, restricted access, account protections, backup arrangements and security monitoring appropriate to the service. Access is limited to people and providers with a work-related need. No online system is completely risk-free. Keep your password private and contact us promptly about suspected unauthorised access.
How long we keep information
We retain information for as long as necessary for the purpose for which it was collected. Order and accounting records are normally retained for the applicable statutory period, generally six years, and longer where a legal requirement or unresolved claim justifies it. Account and download records may be needed while providing access to purchases.
Enquiries are retained while we handle them and for a proportionate period afterwards to address related issues. Newsletter records remain while you subscribe; a limited suppression record may be kept after withdrawal to respect your choice. Security records and backups follow operational retention cycles. We consider sensitivity, purpose, legal requirements and the risk of retaining information when deciding retention.
Your rights
Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your information. You can object to processing based on legitimate interests and object to direct marketing at any time. You can withdraw consent where we rely on it.
Rights are subject to legal conditions. We may need proportionate information to verify your identity. We normally respond within one month, subject to extensions or other provisions permitted by law, and explain any limitation. Requests are normally free; a fee or refusal applies only where the law permits.
You can complain to the Information Commissioner’s Office. You do not have to contact us first, although we welcome the opportunity to address a concern.
Children, automated decisions and external links
DocuDraft is intended for adults and businesses. We do not offer automated decisions that produce legal or similarly significant effects about you. Payment providers may carry out their own fraud checks.
Links to Amazon, source materials and other sites take you to independent services with their own privacy policies. See our cookie policy for browser storage and controls.
Changes to this notice
We update this notice when our service or information practices change. Material changes will be brought to your attention where required. The effective date is shown above.