Privacy Notice

Drawer is a business policy platform operated by Clientweb Limited, a company registered in England and Wales. Clientweb Limited is the data controller for personal data processed through this website and, where we determine the purposes of processing, for account data in the Drawer application.

Registered company details: Clientweb Limited, a company registered in England and Wales (company number 04702458), registered office 3 Warners Mill, Silks Way, Braintree, Essex, CM7 3GB, England.

Website visitors. This marketing website is a public, stateless site. It does not require an account and does not collect form submissions. Our hosting provider processes standard technical information such as IP address, browser type and requested pages in order to serve and secure the site.

Application users. If you create an account at app.drawer.co, we handle the details you provide — such as your name, work email address, company details and the content of the policy documents you create — so that we can provide the service.

We process this information to provide and secure the Drawer service, to respond to enquiries, to administer accounts and billing, and to improve the product. Depending on the activity, our lawful basis is performance of a contract, our legitimate interests in running and securing a business service, or compliance with a legal obligation.

This marketing website does not use advertising or cross-site tracking cookies. Any cookies set are limited to those strictly necessary for the site to load and remain secure. The Drawer application uses cookies and equivalent browser storage that are strictly necessary to keep you signed in and to protect your session.

You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent the application from working correctly. If we introduce optional analytics or marketing cookies in future, we will ask for your consent first and update this notice.

We use a small number of service providers to host and operate Drawer, such as cloud hosting and infrastructure suppliers. They act on our instructions under written terms. We do not sell personal data. We may disclose information where we are legally required to do so.

We keep account and document data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and record-keeping obligations. You can ask us to delete your account data, subject to those obligations.

Under UK data protection law you have rights to access, correct, delete, restrict or object to the processing of your personal data, and to data portability in some circumstances. To exercise a right, contact us using the details on our contact page.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office (ico.org.uk), the UK supervisory authority.

We may update this notice as the product develops. Material changes will be reflected on this page.