Privacy Notice

Who we are

The controller of your personal information is AI LAW GROUP LIMITED (company number 12517370, registered in England and Wales), trading as Ai Law, of 8 Water Street, Liverpool L2 8TD.

For anything about this notice or your personal information, please contact us by email at info@ai-law.co.uk, by telephone on 0151 294 4722, or by post to Data Protection, Ai Law, 8 Water Street, Liverpool L2 8TD.

Information you provide to us

Your privacy is important to us. We are committed to keeping the privacy and security of any personal information that we receive from you. If you give us personal information such as your name and email address through the forms on this website, we use it to contact you about what you have asked us for.

What type of information we have

We currently collect and process the following information:

● Personal information such as your name and contact details; date of birth, national insurance number; bank details.

● Personal and sensitive information which would relate to your case.

● Technical information when you use this website, such as your IP address (see ‘Ai Guy, our website assistant’ and ‘Who we share your information with’ below).

How we get the information and why we have it

Most of the personal information we process is provided to us directly by you, so that we can provide a legal service to you or deal with your enquiry. We also receive information from others where your matter needs it — for example from other parties and their advisers, from public registers, and from the identity checks we carry out before we act for you.

Under the UK General Data Protection Regulation, the lawful basis we rely on depends on what we are doing with your information:

● Providing legal services to you, and dealing with your enquiry or taking steps you ask for before you instruct us — performance of a contract (Article 6(1)(b)).

● Identity checks, anti-money-laundering checks, keeping accounting and regulatory records, and responding to our regulator — a legal obligation (Article 6(1)(c)). If you do not give us information the law requires us to obtain, such as evidence of your identity, we will not be able to act for you.

● Running this website and Ai Guy, our enquiry forms, quality control, supervision, security, and establishing or defending legal claims — our legitimate interests (Article 6(1)(f)), balanced against your rights, or those of a client.

● Marketing — your consent (Article 6(1)(a)). You can withdraw your consent at any time by contacting us (see ‘Who we are’).

● Special-category information that arises in your case (health, for example, in a personal-injury or employment matter) — the legal-claims condition (Article 9(2)(f)); for a message you choose to send Ai Guy after it has paused to ask, your explicit consent (Article 9(2)(a)).

● Special-category information involved in our anti-money-laundering checks (for example, where a check shows that you hold a political office, which can reveal political opinions) — substantial public interest (Article 9(2)(g)), under the conditions in Schedule 1 to the Data Protection Act 2018 for preventing or detecting unlawful acts (paragraph 10) and for regulatory requirements relating to unlawful acts and dishonesty (paragraph 12).

● Information about criminal offences (Article 10) — processed only under the conditions in Schedule 1 to the Data Protection Act 2018: for legal claims and legal advice in your case (paragraph 33); for our anti-money-laundering checks and reports, including reports to the National Crime Agency, the conditions in paragraphs 10 and 12, and, if we share information with another regulated business about a suspicion of money laundering or terrorist financing, paragraph 15 — each as paragraph 36 applies them; and for a message you choose to send Ai Guy after it has paused to ask, your consent (paragraph 29), which you can withdraw in the same way.

Ai Guy, our website assistant

Ai Guy is the assistant on this website. When the live assistant is switched on, the messages you type are sent from your browser to our website’s servers, which run on Microsoft Azure in the UK, and on to Amazon Web Services (AWS) in London, where Anthropic’s Claude model writes the replies. Each message carries the conversation so far (your messages and the assistant’s replies) and the part of the site you are asking from. AWS processes this in the UK on our instructions: it does not store your messages or the replies, does not share them with Anthropic, and does not use them to train any model. When the live assistant is not switched on, the answers are scripted previews and nothing is sent to AWS. We do not keep the words of your conversation on our own systems, other than in the briefing described below if you ask us to contact you. If you ask Ai Guy for a first draft from one of our templates, it is made from what you have told it in the conversation; when you download it, the draft is sent to our website’s server to make the Word or PDF file, and is not kept.

Our lawful basis for running Ai Guy is our legitimate interests (UK GDPR Article 6(1)(f)) in helping people understand where they stand and find the right help, and in answering the questions they ask us.

Ai Guy does not ask for special-category information (about health, ethnic origin, religion or belief, political opinions, trade-union membership, sex life or sexual orientation, or genetic or biometric data) or for details of criminal offences, and you do not need to give them: if your matter involves them, a solicitor will ask for what is needed, in confidence. When Ai Guy recognises that a message seems to contain such information, it pauses and asks whether you want to send it with your explicit consent. If you do, we process that message on the basis of your explicit consent (UK GDPR Article 9(2)(a); for information about criminal offences, Data Protection Act 2018 Schedule 1, paragraph 29). Ai Guy cannot recognise everything, so please leave out anything you would not want processed, and do not include information about other people without their authority. We keep such details out of the briefing that reaches our team as far as automatic checks allow — anything you type into an enquiry form yourself is stored as you wrote it.

You can withdraw at any time with the assistant’s ‘Withdraw’ control. We then stop relying on your agreement and on any consent you gave in that conversation: we do not process further sensitive messages in it, the conversation is deleted from your browser, and your next message will ask you again. Withdrawing does not affect what was processed before. If you went on to book a review or a call-back, we delete the briefing in that enquiry if you ask us to.

We keep a record of what you agree to. When you accept the statement shown before your first message, and whenever you send a message with your explicit consent, we record the text and version of the statement, the date and time, and hashed (scrambled) forms of your IP address and of the random identifiers your browser creates for you and for the conversation — not the address or the identifiers themselves. For a message sent with your consent, the record also holds fingerprints of it — a one-way hash of the whole message and keyed hashes of short runs of its words — so that, if you withdraw, we can recognise that message and not process it again; for the same reason we keep hashes of the assistant’s replies. None of these records contains the words of your messages. We keep them for as long as we may need to show what you agreed to and when, and to honour a withdrawal — for example to answer a complaint or a claim.

Your browser keeps some information so that the assistant works: in session storage, your conversation and a random identifier for it, so that the conversation survives a page reload (they are deleted when you close the tab, choose Start again or withdraw), and, for a moment, a question you type into one of the site's ask bars, until the assistant's page puts it in the box (it is removed as soon as it is read, and ignored after ten minutes); and in local storage, a random identifier for your browser and a note that you have accepted the statement shown before your first message, so that you are not asked again each time. These are strictly necessary for the assistant you have chosen to use. The assistant does not use cookies, and we cannot see what your browser stores — only what it sends with your messages.

To protect the service from misuse, we use your IP address to limit how many messages can be sent from it in a short period.

Enquiries, review requests and call-backs

If you ask for a solicitor review, request a call back or send an enquiry, we record your name, email address, telephone number if given, the matter as you described it, and — for Ai Guy — a short briefing of what the assistant learned (the matter, who you are in it, your goal and urgency), never the conversation itself. This is stored in our practice-management system so a member of staff can contact you, and it is deleted automatically 12 calendar months after it arrived if you do not become a client (a scheduled nightly job removes unconverted enquiries and abandoned orders and records that it did so; if you do become a client it is kept with your file for the client-file retention period). If you download a draft from Ai Guy, we ask for your name and email first and keep them, with which draft it was, as an enquiry so that we can follow it up. If you also tick ‘Check in with me in a week to see if I’ve sorted this’, we email you once, about a week later, to ask whether you resolved it; that box is never ticked for you, and the email has a link to stop us contacting you again. Our lawful basis for that email is your consent, which you can withdraw at any time.

When the website sends an email — an acknowledgement to you, a code to download a draft, or an alert to our team — it is sent from our own Microsoft 365 email (info@ai-law.co.uk). If you buy a fixed-fee legal product from us online (when that service is available), Stripe processes your payment and receives your email address and the order reference; we do not see your card details. Our lawful basis is our legitimate interest in responding to your enquiry or, where you ask us to act for you, taking the steps you ask for before a contract (Article 6(1)(b)); marketing updates are sent only if you opt in, and you can withdraw at any time.

Who we share your information with

We share personal information only where we need to, and only with:

● people involved in your matter — for example barristers, experts and other professional advisers, the other parties and their advisers, and courts and tribunals — as your matter requires;

● our regulators and others where the law requires it — for example the Solicitors Regulation Authority, HM Revenue & Customs or the National Crime Agency — and our auditors, external assessors and professional indemnity insurers;

● Thirdfort, which carries out the electronic identity, anti-money-laundering and source-of-funds checks we make before we act for you;

● the providers who run our website and systems for us: Microsoft (Azure, which runs our website and its database in the UK, and Microsoft 365, our email), Amazon Web Services (the AI model behind Ai Guy, in London) and, when our online shop is open, Stripe (card payments).

When it helps to answer your question, Ai Guy searches public sources on your behalf: legislation.gov.uk and the National Archives’ Find Case Law service, GOV.UK, Companies House, the FCA’s Financial Services Register, the Charity Commission’s register of charities, the UK Intellectual Property Office’s trade mark register and the European Patent Office’s patent records. These searches are made from our servers and carry only the search words (for example a company’s name) — not your IP address or your conversation.

The SRA’s digital badge on our pages is supplied by Yoshki for the SRA. When it loads, your browser connects to Yoshki (cdn.yoshki.com) and the badge loads a code library from Google (ajax.googleapis.com), so both receive your IP address and basic details of your browser. We cannot change how the badge works.

We do not sell personal information. Our service providers may use it only to provide their services to us, on our instructions.

Transfers outside the UK

Our website, its database and Ai Guy’s AI model run in the UK. Stripe is a US company, so payment information we share with it may be processed in the United States. Where personal information is transferred outside the UK, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on the UK–US data bridge where the recipient is certified under it.

Using your personal information

Personal information, which you supply to us, may be used in a number of ways, for example:

● Provision of our legal services;

● For quality control and audit inspection including legal and regulatory compliance;

● For human resources if you are an employee or prospective employee;

● From time to time, we may also use your information to contact you for marketing purposes.

Our work for you may require us to provide information to third parties such as expert witnesses and other professional advisers. Any third party to whom we disclose information about you will be under an obligation to keep your information secure and not to use it for any purposes other than for which it was disclosed.

We may also be under a duty to disclose your personal data as part of our legal or regulatory obligations. We may need to disclose data to third parties in order to comply with those requirements or to prevent fraud or money laundering.

How we store your information

Your information is securely stored at our office on our electronic case management system (which is backed up off-site) and/or on paper files.

We generally keep your files until destruction date. We will then dispose of any papers file securely using a secure disposal system.

Personal information is kept only for as long as it is needed for the purpose it was collected for, and then for the period the law or our regulator requires: client files for the retention period in our client-care letter (normally six years from the end of the matter), identity and anti-money-laundering records for at least five years after we stop acting for you, accounting records including paid orders for six years, and website enquiries and abandoned orders for 12 months unless you become a client. After that it is deleted or anonymised. What happens to Ai Guy conversations and the records of what you agreed to is set out above.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect and process.

Automated decisions

We do not make decisions about you based solely on automated processing that have a legal effect on you or affect you in a similarly significant way. Ai Guy gives general information and points you to help; whether, and on what terms, we act for you is decided by our people.

Your rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.

Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances, and you can always object to its use for direct marketing.

Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

Your right to withdraw consent – Where we rely on your consent, you can withdraw it at any time.

Your right to complain to us – You can complain to us if you think we have not handled your personal information as the law requires (Data Protection Act 2018, section 164A). Email info@ai-law.co.uk, call 0151 294 4722 or write to Data Protection, Ai Law, 8 Water Street, Liverpool L2 8TD. We will acknowledge your complaint within 30 days, look into it, keep you informed and tell you the outcome without undue delay.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Under the DPA 2018, you may ask us to provide you with the details of any personal information that we hold about you. Such a request should be sent to us using the contact details above. We will not charge any fee and we will respond within one calendar month. If we refuse a request, we will explain why and set out your rights to complain.

If you believe that any information we hold about you is incorrect or incomplete or you have any comments, queries or requests relating to the use of your personal information, please contact us. Any information which is found to be incorrect will be promptly corrected.

How to complain

If you are unhappy with how we have used your personal information, please tell us first (see ‘Your right to complain to us’ above), so that we can put it right.

You can also complain to the Information Commission, the UK’s data protection regulator, which continues to be known as the ICO:

Post: ICO, 4th Floor, No.3 Circle Square, 5 Hawkshaw Street, Manchester M1 7BL

Helpline: 0303 123 1113 (Monday to Friday, 9am to 5pm); textphone users can dial 18001 then 0303 123 1113

Website: ico.org.uk/make-a-complaint

Changes

We will post any material changes that we may make to our Privacy Notice in the future on this page and, where appropriate, we will notify you of the change by email.

Contact

For further information on how your information is used, how we maintain the security of your information, and your rights to access information we hold on you, please contact us on 0151 294 4722 or at info@ai-law.co.uk, or by post to Data Protection, Ai Law, 8 Water Street, Liverpool L2 8TD.

Version

This privacy notice was last updated on 28 October 2026.