Privacy policy
Last updated 20 August 2026.
This policy explains what Captivated Ltd does with personal data in connection with the Latch software and this website. It is written to be read, not to be survived.
Who we are
| Controller | Captivated Ltd |
|---|---|
| Registered office | Electric Works, 3 Concourse Way, Sheffield, S1 2BJ, United Kingdom |
| Company number | 15936109 (England and Wales) |
| ICO registration | ZC010118 |
| Contact | privacy@filelatch.com |
The Latch software
Latch does not send us your files, your file names, or any record of your activity. We operate no server that receives data from the software. Latch communicates only with Microsoft services, from your own machine, using your own Microsoft credentials.
Latch stores a small amount of information locally on the machine it runs on — which libraries are synced, which applications you have approved, and which files it currently believes are checked out. This never leaves the device, and we cannot access it.
Your Microsoft access tokens are held by Windows, in the operating system's own token cache, and are not readable by us.
Actions Latch performs on your behalf — checking a file out, checking it in — are recorded by Microsoft in your organisation's own audit logs, under your own user account, exactly as if you had performed them yourself. Those records belong to your organisation and are governed by its policies, not ours.
If we ever add usage reporting
We may later offer optional reporting to help us learn which applications people use Latch with. If we do, it will be off unless you switch it on, it will be described here before it ships, and it will not include file names, file contents or document paths. Today, no such reporting exists.
This website
This site sets no cookies and runs no analytics. There are no tracking pixels, no advertising tags and no embedded third-party content. Nothing here asks for your consent because nothing here requires it.
The site is hosted on Cloudflare Pages. Cloudflare processes your IP address and request metadata to deliver the page and protect the service against attack — this is standard infrastructure logging, and Cloudflare acts as our processor. Their privacy documentation is published at cloudflare.com/privacypolicy.
If you email us
When you contact us we process your email address, your name if you give it, and whatever you write to us. We use it to reply and to keep a record of the conversation.
| Lawful basis | Legitimate interests — responding to someone who has contacted us about our product. |
|---|---|
| Retention | Kept while the conversation is live and for up to 24 months afterwards, then deleted. |
| Recipients | Our email provider, acting as processor. We do not sell or share your details, and we will not add you to a mailing list without asking. |
International transfers
Our hosting and email providers may process data outside the United Kingdom. Where they do, transfers are covered by UK adequacy regulations or by the International Data Transfer Agreement or Addendum, as applicable.
Your rights
Under UK data protection law you may ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. Where we rely on legitimate interests, you can object and we will stop unless we have compelling grounds not to.
Email privacy@filelatch.com and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you raised it with us first so we can put it right.
Changes
If we change this policy we will update the date above. Where a change materially affects how we handle your data, we will say so prominently rather than relying on you to notice.