Privacy policy

Last updated: 20 October 2026

Who we are

Diava is a service of Mr Computer EdTech Ltd, a company registered in England and Wales (company number 17047745), whose registered office is at 123 Rawnsley House, Goodhind Street, Bristol BS5 0UQ, United Kingdom. We are the data controller for the personal data described here.

For anything about your personal data, contact our data protection team at dpo@diava.co.uk. For help with an order, email support@diava.co.uk.

What we collect

Your account: your email address. If you create a password, it is stored only in scrambled (hashed) form by our sign-in provider, so nobody at Diava can see it. If you sign in with Google, we receive the name, email address and profile picture Google shares with us.
Your documents: the files you upload, their translations, and the details you enter or correct when you check a translation. Documents can contain sensitive information, for example health details or religion on a certificate. We process these only to provide the translation you ask for.
Your order: what you ordered, the price, and payment status. Card details are handled by Stripe; we never see or store your full card number.
Technical data: basic logs needed to run the service securely, and the country you visit from (used to show the right language and prices).
Partners: if you join our partner programme, your business details, the orders placed with your code, and what we pay you.
Translators: if you join our translator plan, your business and contact details, your qualifications, the logo, signature and certificate wording you upload, and your credit purchases and use.

How we use it

To translate your documents and deliver them to you (to perform our contract with you).
To take payment, issue refunds and keep accounting records (contract and legal obligation).
To send you emails about your account and your order, such as confirming your email address or telling you your translation is ready (contract).
To keep the service secure and prevent fraud (legitimate interests).
To measure our adverts, only if you accept advertising cookies (consent).

Where documents contain special category data, we rely on your explicit consent, which you give when you upload a document and ask us to translate it. You can withdraw it at any time by deleting your files.

How your documents are handled

Your files are encrypted while they travel to us and while they are stored. Translation is done by an automated system. Before any text is sent to our translation technology provider, our systems remove names, identity numbers, addresses and contact details, so this information is not shared with that provider. Your details are added back to the translation on our own systems. We do not use your documents for any other purpose, and we never sell your data.

If a translator ordered your translation

Some professional translators use Diava to prepare translations for their own clients. If a translator uploaded your document, that translator is responsible for your personal data (the controller), and we process it on their behalf, under a written agreement, only to produce their translation. The same protections apply: personal details are removed before any text reaches our translation technology provider, and files are deleted 7 days after delivery. To exercise your rights, contact the translator; we will help them respond.

Who we share it with

We use trusted service providers who process data for us under contract:

Cloudflare, for hosting the website and storing files (files are stored in the European Union).
Supabase, for sign-in and order records.
Stripe, for payments.
Our translation technology provider, which receives text with personal details removed.
Our email provider, to send account and order emails.
Google, if you choose to sign in with Google.
Google and Meta, only if you accept advertising cookies.

Some providers are based outside the UK, for example in the United States. Where data leaves the UK we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

Documents and translations: deleted automatically 7 days after delivery, or straight away if you delete them from your orders page. Uploads that are never paid for are deleted after 2 days.
Order and payment records: 6 years, as required by UK tax law. These records do not include your documents.
Your account: until you ask us to delete it.

Your rights

You can ask us to access, correct, delete, restrict or transfer your personal data, and you can object to how we use it or withdraw consent. Email dpo@diava.co.uk and we will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies

We use your browser's storage to keep you signed in and remember your language. These are needed for the site to work. We only use advertising cookies from Google and Meta if you choose "Accept" on our cookie banner. You can change your mind by clearing your browser's storage for this site.

Security

We use encryption, access controls and automatic deletion to protect your data. If a security incident affects your data, we will tell you and the ICO where the law requires it.

Changes

We will post any changes on this page and update the date above.