Privacy Policy
What we do and do not do
Slipway Sync publishes read-only Snowflake Native Apps that extract Clio Manage and Filevine data into the customer’s own Snowflake account.
- Practice SaaS payloads (matters, contacts, billing records, and similar) are written into your Snowflake account. We do not host those payloads on EPC Scout servers for production installs.
- OAuth / API secrets and External Access Integrations are configured and bound in your Snowflake account. We do not receive production tokens in our infrastructure for production installs.
- This notice mainly covers publisher personal data (website, support, and Marketplace contacts)—not ownership of law-firm client files in your warehouse.
1. Who we are (controller)
Controller: EPC Scout LTD (England and Wales private limited company).
Company number: 17229314
Registered office: 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE
Trading as: Slipway Sync
Contact (including data-subject requests): support@slipwaysync.com
Website: https://slipwaysync.com
ICO data protection fee: We will maintain ICO registration / fee payment as required for UK controllers. Registration number will be added here when issued. Check status via the ICO register.
We have not appointed a Data Protection Officer (not required for our current scale).
2. Roles and practice data
| Context | Who controls the data |
|---|---|
| Website visits, support email, Marketplace / billing contacts about your organisation | EPC Scout LTD (controller) |
| Clio / Filevine (or other SaaS) payloads extracted into Snowflake | You (the Snowflake account organisation) as controller of that practice data in your account |
| Production OAuth tokens / secrets / External Access Integrations | Held in your Snowflake account; we do not host them on EPC Scout servers for production installs |
Installing the Native App does not make EPC Scout the host of your practice-management database.
3. Personal data we process as publisher
When you use our website, email us, or deal with us via Snowflake Marketplace (when listed) or a pre-listing sandbox, we may process:
| Category | Examples |
|---|---|
| Identity & contact | Name, business email, company / firm name, role |
| Support content | Email body, attachments you send, troubleshooting notes |
| Commercial / Marketplace | Account contacts, listing or entitlement metadata Snowflake shares with providers, payout-related contacts |
| Technical (website) | Standard server/CDN logs (IP address, user agent, timestamps) from hosting providers — no first-party analytics cookies on slipwaysync.com |
We do not run a consumer signup product or advertising pixels on the public site.
4. Purposes and lawful bases (UK GDPR / DPA 2018)
| Purpose | Lawful basis |
|---|---|
| Respond to support and sandbox requests; operate listed Marketplace apps | Contract (Art. 6(1)(b)) and/or legitimate interests (Art. 6(1)(f)) — running a B2B publisher |
| Website delivery and security (CDN, abuse prevention) | Legitimate interests |
| Billing, tax, accounting, Companies House / regulatory requests | Legal obligation (Art. 6(1)(c)) and/or contract |
| Improve product security (without using customer SaaS payloads from your Snowflake) | Legitimate interests |
Where we rely on legitimate interests, you may object (see Rights).
5. Recipients
We do not sell personal data. We may share publisher personal data with:
| Category | Examples |
|---|---|
| Cloud / site hosting & DNS | Vercel (site), Cloudflare (DNS, Email Routing) |
| Cloudflare Email Routing to our support inbox | |
| Marketplace / cloud platform | Snowflake Inc. (provider / Marketplace distribution and security review) |
| Professional advisers | Accountants, solicitors, insurers under duty of confidence |
| Authorities | When required by UK law |
6. Retention
| Record | Typical retention |
|---|---|
| Support / sandbox email | Up to 24 months after last correspondence, unless needed longer for a dispute |
| Marketplace / billing contacts | For the commercial relationship, then up to 6 years (UK limitation / tax records often require this order of magnitude) |
| CDN / security logs | Per provider defaults (typically days to a few months) |
Customer SaaS data in Snowflake is retained or deleted under your control (including uninstall / DROP APPLICATION).
7. International transfers
Some processors (for example Snowflake, Vercel, Cloudflare) may process data in the United States or other countries outside the UK. Where required, we rely on UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), or UK Addendum to EU SCCs, or equivalent lawful transfer tools.
8. Your rights
UK data subjects may request: access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. Contact support@slipwaysync.com or write to our registered office. We aim to respond within one month.
You may complain to the Information Commissioner’s Office.
Automated decision-making: We do not use automated decision-making or profiling that produces legal or similarly significant effects about you.
9. Children
Our products and website are directed at businesses and professionals, not at children under 18.
10. Cookies and similar technologies
slipwaysync.com does not use non-essential analytics or advertising cookies. Fonts are self-hosted. Hosting/CDN providers may process technical logs as described above. If that changes, we will update this notice.
11. Security
Connectors are designed so customer SaaS data stays in the customer Snowflake account; secrets use Snowflake Secret objects; API egress uses External Access Integrations declared in the Native App manifest. Extract is intended to be read-only over HTTPS (plus webhook subscription management required for sync where enabled).
12. Changes
We will update this page and revise the “Last updated” date when the policy changes.