Our baseline approach
Customer Data remains owned by the customer or applicable rights holder. Chiron Consulting Inc. processes it only to provide and secure Sign Work Pro, does not sell it, limits access to authorized people and service providers, supports privacy-rights requests, applies retention controls, and maintains incident-response procedures.
Canada
PIPEDA and provincial private-sector laws
Canada’s federal Personal Information Protection and Electronic Documents Act (PIPEDA) governs personal information in many commercial activities, including information crossing provincial or national borders. British Columbia’s Personal Information Protection Act (PIPA) applies to many private-sector activities within BC. These laws emphasize accountability, reasonable purposes, meaningful consent, limited collection and use, safeguards, openness, access, correction, retention, and complaint handling.
How Sign Work Pro addresses these requirements
- Our Privacy Policy identifies what is collected, why it is used, when it is disclosed, and how to contact our Privacy Officer.
- We process Customer Data only for stated service, security, support, billing, and legal purposes.
- Customers retain ownership, and service providers receive only the access needed to perform contracted functions.
- Access, correction, consent-withdrawal, and deletion requests are supported subject to legal and audit-retention requirements.
- Security, retention, disposal, and breach-response measures are applied according to the sensitivity and purpose of the information.
United Kingdom
UK GDPR and the Data Protection Act 2018
The UK GDPR and Data Protection Act 2018, as amended, require lawful, fair, and transparent processing; specified purposes; data minimisation; accuracy; limited retention; security; and accountability. Individuals may have rights to information, access, correction, erasure, restriction, portability, objection, and safeguards concerning automated decisions.
How Sign Work Pro addresses these requirements
- For customer-controlled documents and contacts, the customer generally determines the purpose and lawful basis while Chiron acts as its service provider or processor.
- Our product and policies support purpose limitation, limited access, retention controls, secure processing, and assistance with individual-rights requests.
- Chiron does not use customer document content for advertising or independent profiling.
- Before a restricted transfer from the UK, the parties must confirm an allowed transfer basis and put any required safeguards in place, such as applicable adequacy coverage, a UK International Data Transfer Agreement, or the UK Addendum.
- A UK deployment may also require processor terms, documented lawful bases, transfer assessments, ICO registration, or a UK representative depending on the parties and processing.
United States
Federal sector rules and state privacy laws
The United States does not have one comprehensive federal privacy law covering every business. Federal laws regulate particular sectors and data types, while the Federal Trade Commission may act against unfair or deceptive privacy and security practices. State laws, including California’s CCPA as amended by the CPRA, may provide rights to know, access, delete, correct, opt out of sale or sharing, limit certain sensitive-data uses, and receive equal service.
How Sign Work Pro addresses these requirements
- Our notices describe the categories, purposes, disclosures, retention approach, and available request channels.
- We do not sell Customer Data or share document content for cross-context behavioural advertising.
- We support verified requests for access, correction, and deletion, subject to applicable exceptions and the customer’s role as data controller.
- Service providers are limited to defined operational purposes, and safeguards are applied to retained information.
- Applicability, request deadlines, appeal processes, sensitive-data consent, and contract wording must be assessed under each relevant state or sector-specific law.
Important scope note
This is a general overview, not a certification or legal opinion. The laws that apply depend on the customer, affected individuals, data, location, processing purpose, and statutory thresholds. Customers remain responsible for their own notices, lawful authority, professional duties, and instructions to Sign Work Pro. Chiron will work with customers to document additional contractual or transfer safeguards where required.
Questions may be sent to our Privacy Officer at support@signworkpro.com.