Privacy Policy — Find My Lawyer
Version 1.0 — Effective 25 August 2026
Operated by LAIS Technologies Limited (company no. 17404115), registered office 124 City Road, London EC1V 2NX. ICO registration ZC227379.
1. Who we are and how to contact us
Find My Lawyer (findmylawyer.uk) connects people who need legal help with regulated legal professionals in the UK. LAIS Technologies Limited is the data controller for the personal data described in this policy. Contact us about your personal data at privacy@laistechnologies.com. We are not required to appoint a Data Protection Officer; that mailbox is our nominated data-protection contact and is monitored every working day. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
2. Who can use the platform
You must be 18 or over to use Find My Lawyer. We ask you to confirm this when you register. If we learn that an account belongs to someone under 18, we will suspend it and remove the personal data associated with it.
3. What we collect
Clients. Your email address, a password (stored only as a secure hash; none if you sign in with Google), your preferred language and notification and accessibility preferences, and when you last signed in. Your name, city and region. A pseudonym we generate — this is what lawyers see; they never see your name or email through the platform. The private title you give your matter, everything you write to our AI intake assistant, the structured case summary it produces, and the anonymised version of that summary shown to lawyers. Messages you send to lawyers. Consultation bookings. Reviews you publish. A record of what was disclosed to which lawyers and when.
Lawyers. Your account details as above. Your full name, firm, professional title, regulator (SRA or BSB) and reference number, biography, years of experience, office city, website, phone number, contact email, languages and availability. Records of every verification check we carry out against your regulator's public register, including who reviewed it and their notes, and of profile changes you request. Your average review score, review count, average response time and last-active time. Whether your profile is paused or hidden and, if hidden, a note recording why. That note is personal data about you and is available to you on request (see §9).
Everyone. Notifications we send you. Records of significant actions on the platform (who did what and when), kept for security and accountability. Technical records of sign-ins, including your IP address and browser, held briefly by our hosting and database providers.
What we do not collect. We use no analytics, tracking or advertising tools, no error-tracking services, no payment details (the platform takes no payments) and no document uploads. Fonts are served from our own site.
4. Sensitive information
When you describe your legal problem, you will often include sensitive information — health conditions, criminal allegations or convictions, family, immigration or financial circumstances, and information about other people. We store what you write. We rely on two grounds for handling this information: it is necessary to establish, exercise or defend legal claims — that is what the service is for — and, for the processing carried out by our AI assistant and for matching your matter to lawyers, your explicit consent, which we ask for before the intake interview begins. For information about criminal offences or allegations, UK law requires a separate condition (Article 10 UK GDPR); we rely on the legal-claims condition in Schedule 1 of the Data Protection Act 2018.
You can withdraw your consent at any time by contacting us. If you do, we will stop any future AI processing that relies on your consent. We may still process your information where the law allows it on another basis — in particular where processing is necessary in connection with your legal claim — and §8 and §9 explain what happens to a matter that has already been shared with a lawyer. Withdrawal does not affect the lawfulness of processing already carried out.
Lawyers see only an anonymised summary. When we say "anonymised", we mean: names and other people are removed or reduced to roles; exact places, dates and amounts are removed or generalised; and rare, distinctive details that could identify you are taken out. You review and approve the anonymised version before it is shared, and you can flag anything that still feels identifying so it is redrafted more generally. In a highly unusual case, someone who already knows your situation might still recognise it — that is why your review comes first. For matters in criminal, family or immigration categories, we apply stricter anonymisation before anything is shown.
5. How we use your information and on what basis
| What we do | Why | Legal basis |
|---|---|---|
| Create and run your account | To provide the service | Contract |
| Sign you in and keep your account secure | Security | Contract; our legitimate interest in security |
| Conduct your intake interview using an AI assistant and produce your case summary | To structure your matter | Contract; for sensitive content, legal claims and your explicit consent |
| Produce an anonymised summary | To protect your identity | Contract; our legitimate interest in protecting you |
| Show your anonymised matter to verified lawyers in your practice area and region (your city is used only to rank results and is never shown) | To find you representation | Contract; for sensitive content, legal claims and your explicit consent |
| Verify lawyers against their regulator's public register | To ensure only regulated professionals receive matters | Contract with the lawyer; our legitimate interest and the public interest in the integrity of legal services |
| Messaging and bookings | To let you and a lawyer communicate and meet | Contract |
| Send account and booking emails | To run the service (we send no marketing) | Contract |
| Keep records of significant actions | Accountability and security | Our legitimate interest; our legal obligations |
| Prevent misuse of the platform | Protect users | Our legitimate interest |
| Publish and moderate reviews | Help clients choose; fairness to lawyers | Contract; legitimate interests |
| Handle your data-protection requests and meet our legal obligations | Law | Legal obligation |
We do not make decisions about you by automated means that have legal or similarly significant effects. Ranking of matters is by relevance only; lawyers choose whether to respond and you choose whom to instruct. If our AI assistant assesses your matter as outside the platform's scope, you can ask us to review that assessment personally by emailing support@findmylawyer.uk.
6. Our AI assistant
Your intake interview is conducted by Claude, an AI model made by Anthropic. The interview, your evolving case state, and — for anonymisation — your approved summary and any passage you flag are sent to the model. Your name, email and account details are not sent, and we remove explicit contact details such as phone numbers, email addresses and postcodes before sending; anything else you type is included. The model is run for us by Amazon Web Services in the European Union, so this information does not leave the UK and EU. Your inputs and the model's outputs are not used to train AI models and are not stored by the AI service after your request is processed, except for limited automated abuse-detection described in the provider's documentation. The same content is stored in our database as your matter record under the retention periods in §8.
7. Who processes your data for us, and where
| Provider | Role | Location | Transfer safeguard |
|---|---|---|---|
| Supabase | Database and sign-in | United Kingdom (London) | Data is stored in the UK. Supabase support staff outside the UK may access data only when needed to support us, under the UK Addendum to the EU Standard Contractual Clauses. |
| Vercel | Hosting | Our application runs in London; Vercel's global network carries traffic and holds short-lived technical logs, some outside the UK | UK–US Data Bridge (UK Extension to the EU-US Data Privacy Framework) |
| Amazon Web Services | Runs the AI model (Anthropic's Claude, operated on AWS infrastructure) | European Union, with a UK entry point | Covered by the UK's adequacy regulations for the EU — not a restricted transfer |
| Resend | Sends our emails | United States | UK Addendum to the EU Standard Contractual Clauses; we keep email content minimal |
| Sign-in, only if you choose it | United States | UK–US Data Bridge |
Where we rely on the Standard Contractual Clauses, we have carried out a transfer risk assessment. Copies of the safeguards are available on request.
8. How long we keep your information
| Information | Kept for |
|---|---|
| Your account and profile | Until you delete your account or 12 months after you last sign in, whichever is first |
| Your intake interview (full text) where your matter was never shared with a lawyer | 12 months after your last activity on it, then deleted |
| Your intake interview where your matter was shared | 12 months after the matter closes, then deleted |
| Your case summary and the anonymised version, where shared with a lawyer | 6 years after the matter closes (the period within which a dispute about what was shared could arise), then deleted |
| Messages | 12 months after the matter closes, then deleted; 6 years if the matter is subject to a dispute or complaint |
| Bookings | Meeting links deleted 12 months after the matter closes; the fact and time of a consultation kept 6 years |
| Notifications | 12 months |
| Records of what you consented to share | 6 years after the matter closes |
| Reviews | While the lawyer's profile exists; removed reviews 12 months |
| Lawyer profile after account closure | Name, firm and regulator reference kept 6 years; everything else deleted |
| Lawyer verification records | 6 years after account closure; reviewer notes then deleted |
| Records of significant actions | 24 months in full; thereafter reduced to the fact that an event happened, with identifying details removed |
| Sign-in and technical logs | Up to 90 days, held by our providers |
| Backups | Deleted data may remain in our database provider's backups for up to 28 days |
A matter "closes" when you or the lawyer mark it resolved, when you withdraw it, or after 90 days without activity. We may keep information longer where a legal dispute, complaint or regulatory inquiry requires it.
9. Your rights
You have the right to access your personal data, to have it corrected, to have it erased, to restrict or object to processing, and to receive it in a portable format. Send requests to privacy@laistechnologies.com from the email address on your account. We respond within one month.
Access and portability. We will send you a copy of your data in a machine-readable format. The other party to any message or matter is shown as a pseudonym or professional name only. We currently provide this manually; there is no self-service export.
Correction. You can edit your profile in the app. Lawyers' professional details are corrected through re-verification. To correct your matter, contact us or start a new intake.
Erasure. There is currently no self-service deletion; email us and we will carry it out. We will remove your account details, profile, interview text and notifications, and your side of any messages. Some information survives erasure because the law allows or requires it: an anonymised summary of any matter that was shared with a lawyer, with the link to you severed, and the record of what you consented to share, both kept for six years in case of a dispute; a hashed form of your email to prevent abuse; and minimised records of significant actions. Lawyers who received your matter hold their own copy and are responsible for it; we will tell them you have asked for erasure. Deleted data may remain in backups for up to 28 days.
Lawyers. The note recording why a profile was hidden is personal data about you and will be provided on request, with any information about other people removed.
10. Cookies
We set only cookies that are strictly necessary to provide the service: a session cookie that keeps you signed in, and — only while you sign up with Google — a cookie lasting 15 minutes that remembers which account type you chose. No consent banner is required for these and we set no other cookies.
11. Security
Access controls are enforced inside the database itself: client identities are never joinable into lawyer-facing queries; verification status can be changed only by the platform; conversations can be read only by their participants. All connections use HTTPS. Our database and application are hosted in the United Kingdom.
12. Changes to this policy
Each version has a number and an effective date. Previous versions are available on request. For changes that affect your rights, how we use your data, or who processes it, we will notify you by email or in the app at least 14 days before they take effect; for minor clarifications we simply update the version. Where a change concerns processing based on your consent, we will ask for it again.
Change log
- v1.0 — 25 August 2026 — First published version.