Privacy policy
1. Who we are
ClearPath AI Ltd ("ClearPath", "we", "us") is a company registered in England and Wales, company number 17411433. We are registered with the Information Commissioner's Office as a data controller.
For personal data processed through this website and through enquiries you send us, ClearPath is the controller. For personal data processed inside the ClearPath Property AI platform on behalf of an estate agency, that firm is the controller and ClearPath is the processor, acting only on the agency's documented instructions under a data processing agreement.
2. What we collect
- Enquiry data — your name, firm, role, email address, telephone number and anything you choose to tell us when you request a demo or contact us.
- Website data — IP address, device and browser type, pages viewed and referring source. Analytics data is collected only where you have consented.
- Platform data — where your agency uses ClearPath Property AI, we process transaction data on the agency's behalf. This may include client identity data, financial information, property, ownership and transaction information, and correspondence. We process this only as instructed by the agency.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Responding to your demo request or enquiry | Legitimate interests, and steps prior to entering a contract |
| Providing, supporting and securing the platform | Performance of a contract |
| Analytics and site improvement | Consent |
| Meeting our legal, regulatory and audit obligations | Legal obligation |
4. AI processing
ClearPath Property AI uses large language models to carry out work on a matter. We do not use customer or transaction data to train shared or third-party foundation models. Model providers act as sub-processors under contractual terms that prohibit training on your data. Outputs that carry legal weight are surfaced for human approval; the platform does not make automated decisions producing legal effects without a person in the loop.
5. Sharing
We share personal data with sub-processors who help us run the platform — cloud hosting, model providers, identity and screening providers, search providers, e-signature and communications providers — each under a written contract. A current sub-processor list is available on request. We also share data where we are required to by law, regulation or a court order.
6. Where data is held
Platform data is held in the United Kingdom. Where any transfer outside the UK is necessary, we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment.
7. How long we keep it
Enquiry data is retained for 24 months from your last contact with us. Platform data is retained for the period set by the controlling firm in its data processing agreement, and is deleted or returned on termination in line with that agreement. Security and audit logs are retained for seven years to meet regulatory expectations for estate agency records.
8. Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time. Where your data is held in the platform on behalf of a estate agency, please contact that firm in the first instance; we will assist them in responding.
To exercise a right, or to raise a concern, email hello@clearpathgroup.ai. You may also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
9. Security
We apply encryption in transit and at rest, role-based access control, least-privilege administration, audit-grade logging, secure software development practices and regular penetration testing. Our ISO 27001, ISO 42001 and SOC 2 Type II certifications are in progress; the underlying controls are implemented today and the evidence pack is available under NDA.
10. Changes
We will post any change to this policy on this page and update the version and date above. Material changes affecting platform customers will also be notified in writing.