Privacy policy
Last updated 19 September 2026
This policy covers this website and signing up for an account. Firms using the product itself are covered by a separate data processing agreement, which sets out how client documents inside a portal are handled.
What we collect
If you sign up, we store the email address you give us. If you use the longer form we also store whatever you choose to add: your name, your firm's name, the kind of firm it is, roughly how many of you there are, and how you collect documents today. Every field except the email address is optional and nothing is inferred if you leave it blank.
We also record which page and which country edition you signed up from, the referring website if your browser sent one, and any campaign parameters in the link you arrived on. That is so we can tell which pages are useful.
How we measure the site
We count visits using Plausible, a privacy-focused analytics tool we run ourselves on our own server rather than hand to an advertising company. It records the page, the country edition, the referring site and whether the visit ended in a signup. It sets no cookie, it does not follow you to any other website, and it stores nothing that identifies you: your IP address and browser are used only to work out, for that day alone, whether two page views came from the same visit, and they are discarded rather than stored.
This is how we tell whether the pages we write are reaching the firms they are written for, which is the only reason we measure anything.
The engagement letter generator
The generator stores nothing at all. What you type into it — your firm, your client's name, the scope and the fee — is used to assemble the letter in the moment and is then gone. There is no database record of it, no draft saved for later, no copy emailed to us, and no email address asked for. Closing the page is the end of it.
We mention this specifically because it is the one place on this site where you might type a client's name. The safest place for your client's name is nowhere, so that is where we keep it. The downloadable templates are static files and involve no form at all.
What we do not collect
We do not use advertising trackers, we do not share anything with an analytics company, and we do not set any cookie that is not required for the site to function. There is no cookie banner because there is nothing to consent to.
We do not buy data about you, we do not enrich what you give us from third-party sources, and we do not build a profile of you from your browsing.
Why we hold it
To set up your account and to answer you if you write to us. That is the whole purpose. Where a legal basis is required, it is our legitimate interest in responding to a business enquiry you initiated.
We will not add you to a marketing newsletter on the strength of a signup. If we ever start one it will be a separate, explicit opt-in.
Who else sees it
Our hosting provider, which stores the database, and our email provider, which delivers the mail we send you. Both act on our instructions and neither uses your details for their own purposes. We will keep a current list of these sub-processors on this page as it changes.
We do not sell, rent or share your details with anybody else, and we will not, including as part of a sale of the business without telling you first.
How long we keep it
Until you ask us to delete it, or until two years after your last contact with us, whichever comes first. A signup that has gone nowhere for two years is not useful to either of us.
Your choices
Email privacy@firmhello.com and we will send you everything we hold about you, correct it, or delete it. No form and no verification hoops: if you can write from the address you signed up with, that is enough.
Deletion is real deletion, not a suppression flag, and we will confirm when it is done. Depending on where you live you may also have rights to object, to restrict processing, or to complain to a data protection authority, and nothing in this policy limits them.
Security
The database is encrypted at rest, connections to this site are encrypted in transit, and access to signup records is limited to the people who need it. Our security page describes how the product itself is built, including what has not yet been independently verified.
Changes and contact
If we change this policy we will update the date at the top, and if the change is material we will say so on this page rather than quietly revising it. Questions go to privacy@firmhello.com.
FirmHello is a product of Furvur. If you need our full legal entity details and registered address for a data protection request, ask and we will provide them.