Privacy & Cookie Policy

Stays on your device only (we never see it): case notes, P's details, COP24 statement drafts, bundle indexes, hearing diary entries, contact and incident logs, letter drafts, checklists, and your app settings.

Given to us only if you choose to send it: your name and email when you request a download pack, make a directory enquiry, ask about training, or contact us by email. We use it only to answer you, and keep it no longer than needed.

Account holders (professionals and advocates): if you create an account or buy a listing, we store your email, account identifier, plan status and payment reference in our secure backend. Card details are handled by our payment provider — we never see or store them.

Technical data: our hosting provider processes standard server logs (IP address, browser type, time of request) for security and reliability. Analytics data is only collected if you opt in.

Enquiries and partnership/sponsorship forms: stored so the founders and named admins can reply. Lawful basis: legitimate interests (responding to a business enquiry) — and, where you tick a consent box, your consent. We keep active enquiries for up to 24 months after our last contact with you. Enquiries we close with no reply are deleted after 12 months.

Directory and care/housing listing applications: kept while the listing is live and for 6 years afterwards, because they include regulator, insurance and verification checks we may need to evidence.

Feedback and accessibility reports: kept for 24 months, then deleted or anonymised.

Uploaded case files: kept until you delete them. Deleting a file removes it from storage; the audit record of the deletion is kept for 12 months for security.

Payments and invoices: retained for 6 years to meet UK tax and accounting rules.

Analytics and spam-check records: aggregated counts only, no personal profiling; kept for 13 months.

To stop automated spam, our enquiry forms include a hidden trap field, a short timing check and a simple spam-check question. Where a captcha provider (hCaptcha or Google reCAPTCHA) is enabled, your browser also contacts that provider, which processes your IP address and interaction signals under its own privacy policy purely to tell us whether the submission looks human. We do not use it to profile you or to advertise.