Privacy Policy

This notice explains how Nexum Ledger Ltd (“Nexum,” “we,” “us”) collects, uses, and protects personal data. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Nexum Ledger Ltd is a private company limited by shares, registered in England & Wales. Company number 17001897. Registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. Contact: founder@nexumledger.com.

What data we collect

• Contact data you send to us (name, email address, firm name) when you request a demo or otherwise correspond with us.
• Product telemetry: anonymous aggregate metrics (e.g., request counts, error rates) generated when you use our hosted services.
• Document fingerprints. When your firm seals a document, the document itself is never transmitted to us. Your system computes a SHA-256 hash and sends only that hash, the file size, and the file name. We encrypt the file name on receipt under a key unique to that record, so it is not readable in our database, and destroying that key is what makes the record unreadable on erasure.
• AI interaction governance data. Prompts and model outputs are never transmitted to us in any form other than their SHA-256 digests. The reviewer identity and matter reference are encrypted on receipt in the same way. The model used, the purpose, and whether the output was adopted, edited, or rejected are held in plain text, because they contain no personal data and must survive erasure for reporting.
• Client-account ledger data submitted to our ledger endpoints, which may include matter references, client identifiers, counterparty names, and the email address and IP address of the staff member who recorded the entry. Every one of those is encrypted on receipt under a key held per data subject. The amounts and dates are not, so the account can still be reconciled after an erasure.
• For all of the above we act as a data processor, not a controller, under a written contract with your firm.

Lawful bases

We process contact data on the basis of legitimate interest (responding to enquiries) or, where applicable, contract performance. We do not rely on consent for any processing of contact data you provide to us in the course of a business enquiry.

Retention

We retain contact data for as long as necessary to respond to your enquiry and for a reasonable period thereafter in line with normal business record-keeping obligations. Data processed on a firm’s behalf is retained according to the service agreement with that firm.

Erasure here does not mean a row being deleted from a database, and it is worth saying what it does mean. Sealed records, AI interaction envelopes and client-account ledger entries are all erased by destroying the key that decrypts them, which leaves the proof intact and the content permanently unreadable, to us as much as to anyone else. Ledger keys are held per data subject rather than per entry, because an erasure request concerns a person rather than a line item, so one destruction reaches every entry about them at once.

Two things deliberately survive, and both are there for the firm’s benefit. The amounts remain readable, so the firm can still reconstruct its client account under the SRA Accounts Rules for six years: an erasure request should not destroy a financial record the firm is separately obliged to keep. The cryptographic proof also remains, so the firm can still demonstrate the log was not rewritten afterwards. What goes is the identity: client identifiers, matter references, counterparty names, free-text notes, and the email, IP address and device details of the staff member who made the entry.

Your rights

Under the UK GDPR you have the right to request access to, correction of, or erasure of your personal data, and to object to or restrict our processing. To exercise these rights, contact us at the address above. You also have the right to lodge a complaint with the Information Commissioner’s Office (ico.org.uk).

International transfers

Our hosted infrastructure is located in the United Kingdom. Third-party sub-processors used for operational purposes (e.g., email delivery) may process data in jurisdictions outside the UK under standard contractual safeguards.

Cookies and local storage

This website does not use advertising, analytics, or third-party tracking cookies. Authenticated areas of the product (e.g., the dashboard) use browser local storage to hold an authentication token and a minimal user record after you sign in. This storage is strictly necessary to keep you signed in for the duration of your session; no consent banner is required under the Privacy and Electronic Communications Regulations for storage of this kind. Clearing site data from your browser removes the stored token and signs you out.

Changes

We may update this policy from time to time. The “last updated” date at the top reflects the most recent revision.