Privacy

Privacy policy (UK GDPR)

Who we are

LegalX ([legal entity & registration]), [address], is responsible for personal data handled through this site and our services. Contact: info@legalx.legal.

Our UK representative

As we are based outside the UK and offer services to people in the UK, we have appointed [name/company, UK address, email] as our representative under Article 27 UK GDPR. UK individuals and the ICO may contact our representative on data-protection matters.

What we collect & why

Identity and contact details, organisation, the content of your enquiry and any documents you send us, and website/usage data via cookies. We use these to respond to enquiries and provide our services (contract), to meet legal obligations, and to run and improve our business (legitimate interests). Where we handle personal data for a client (for example a law firm), we act as a processor under that client’s instructions and a Data Processing Agreement.

International transfers

We are based in Pakistan, which is not covered by a UK adequacy decision. Where personal data is transferred from the UK to us, we use the ICO’s International Data Transfer Agreement (IDTA) (or the EU SCCs with the UK Addendum) together with a transfer risk assessment.

Retention, security & your rights

We keep data only as long as needed, then securely delete it. We use encryption, access controls and confidentiality obligations. You have rights of access, rectification, erasure, restriction, objection and portability — contact us or our UK representative to exercise them.

Complaints

You can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. Last updated: [date].