How we handle your data when you sign

Option.is is the controller of the personal data processed by this signing service. For any question or request about your data, write to legal@option.is.

What we collect

• Your name and email address, as given by the person who sent you the document.
• The document itself and the name you type as your signature.
• A record of each step (link opened, consent given, signed or declined) with its date and time, your IP address, the network provider and country it belongs to, and your browser’s user-agent string. The network is also used to refuse signing through a VPN or proxy.

Why, and on what legal basis

We use this data to conclude the agreement you are asked to sign and to be able to prove afterwards who signed which document and when. The legal bases are the steps needed to enter into and perform a contract with you, and our legitimate interest in keeping reliable evidence of signed documents.

Who receives it

The data is seen by the staff of Option.is who handle the document. It is hosted and emailed for us by Cloudflare, Inc., acting as our processor. Where data is transferred outside the European Economic Area, this is done under the European Commission’s standard contractual clauses or an adequacy decision. We do not sell your data or use it for marketing.

How long we keep it

Signed documents and their audit trail are kept for 5 years after signing, or longer where the law requires or while a dispute is ongoing. The record of a request that was declined, cancelled or never signed is kept for the same period. Sign-in sessions use one strictly necessary cookie.

Your rights

You may ask for access to your data, for it to be corrected, erased or restricted, to receive it in a portable form, and you may object to its processing. A signed document and its audit trail may have to be kept as legal evidence even after an erasure request. You can also complain to your data protection authority; in Iceland this is Persónuvernd.