MyLaw Privacy

MyLaw is committed to respecting your privacy and protecting your personal information. This Privacy Statement sets out what we do with your personal information collected from you when you use our digital platforms including our website and how we keep it secure.

It explains what personal information we collect, where, why and how we collect it, as well as what your rights are over the personal information we hold about you.

We use the terms "personal data" and "personal information" interchangeably in this Statement to mean details which identify you or could be used to identify you, such as your name and contact details, details of your enquiries including your employment details etc.

This Privacy Statement applies to personal information about you that we collect, use and otherwise process in connection with your relationship with us as a service user or potential service user including: when you make an enquiry with us or use our services; when you interact with us on social media or use our websites or mobile applications, through our online Zoom meetings, contact our service agents and/or book to use our services through third parties (such as legal services providers).

The purpose of this Privacy Statement is to enable you to understand how we process your personal data and to exercise control over it. The principle of "transparency" in data protection law requires that we communicate to you about how we process your personal data in an easily accessible and easy to understand format.

As a valued MyLaw digital visitor or service user, your personal privacy is very important to us. Therefore:

We are transparent about the personal data we collect and what we do with it.

We use the personal data you give us for the purposes described in this Privacy Statement (this includes providing you with services you have requested / enhancing your experience).

We also use your personal data to help us understand you better so that we can improve your experience / provide you with relevant offers.

If you tell us you don't want to receive marketing emails we will stop sending them. We will, of course, continue to send you essential information relating to a product or service you have purchased to keep you informed about your services.

We put in place measures to protect your personal data and keep it secure.

We respect your data protection rights and aim to give you control over your personal data.

For the purpose of the General Data Protection Regulation ("GDPR"), the data controller of this website is Lawfully AI Limited and our address is 25 Herbert Place, Dublin, D02 AY86, Ireland.

Should you have any queries about this Privacy Statement, or wish to exercise your rights as set out herein, please email us at [email protected].

Without prejudice to your rights under applicable laws, this Privacy Statement is not contractual and does not form part of your contract with us. This Privacy Statement is applicable to services provided by Lawfully AI Limited t/a MyLaw. References to "MyLaw", "we", "our", "ourselves" and "us" means Lawfully AI Limited, as applicable.

We may collect the following data:

Your name, title, contact information including email address and phone number; employment status and title; information supplied by you via our booking forms; payment details; purchase history; sales channel; social media interactions; information about your searches and web usage; account login details; information on the queries you have submitted to us.

We require your information to deliver services to you and to understand your needs and provide you with a better service, in order to respond to a query you may have submitted to us through the "Contact Us" section of our website or via a booking form.

From time to time, we may also use your information to contact you for market research purposes. We may use your information to improve our products and services or customise the website/app according to your interests.

We may send promotional emails about special offers and deals to the email address you have provided (unless you indicate you don't wish to receive these).

To administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical, survey and training purposes. To improve our website to ensure that content is presented in the most effective manner for you and for your device. To keep our website safe and secure.

Consent: We process your personal data where you have given your consent to the processing of your data (which you may revoke at any time).

Legal Compliance: We use your personal data in order to comply with any legal and regulatory obligations, to enforce our legal rights and to protect the rights of third parties.

Legitimate Interests: In most cases, it is in our legitimate interest to process your personal data for the following reasons: to respond to any queries that you have submitted through the website; to allow us to provide the services you request from us; for the administration and operation of our services, as well as for marketing and promoting our firm's legal services.

When we rely on legitimate interests as a legal justification for processing your personal data, we must consider whether those legitimate interests are overridden by your interests, fundamental rights and freedoms. If we think that there is a risk that one or more of your interests, fundamental rights and freedoms may be affected, then we will not use your personal data unless there is another legal basis for us to do so (for example by obtaining your consent).

In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.

If you have previously agreed to us using your personal data for direct marketing purposes, you may change your mind at any time by clicking on the unsubscribe link in each marketing email or via the unsubscribe page.

We will not sell your personal data to third parties.

If you are a "registered user" of our website/app you can update your account details on a self-service basis. You may request details of personal data which we hold about you.

If data we hold on you is incorrect or incomplete, please contact us. We will promptly correct any data found to be incorrect.

We will only retain your personal data for as long as necessary to fulfil the purpose for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.

It is our policy to retain documents in accordance with any retention period required by law or to the end of the period in which litigation might arise from our engagement.

If you stop interacting with us as a service user, we will remove or anonymise information kept for that purpose after 7 years.

When we have collected the personal information based on your consent and we have no other legal reason for retaining the information, if you then decide to withdraw your consent, we will delete your information.

Cookies help us to keep our website functioning securely and to provide you with a better service. Cookies allow us to recognise your device or computer and to see how you interact with our website, but not to identify you as an individual.

You can choose to accept or decline cookies or change your cookie preferences on the website. Alternatively, most web browsers allow some control of most cookies through the browser settings.

Any personal information processed by MyLaw in connection with this Privacy Statement is controlled by Lawfully AI Limited, which is therefore considered the "data controller" of your personal information under European Union, UK and Irish data protection law.

If you have used our services and been connected with a lawyer, then that lawyer will also separately be considered a "data controller". Any third party provider of services such as a lawyer, financial services provider, or business coach will also separately be a "data controller". You can access the privacy statements of those providers from them directly.

We collect personal information about you whenever you use our services, when you use our website or mobile applications, interact with us via email or social media or our online "chat" service, or use our contact centres.

In addition, we may receive personal information about you from third parties, such as legal service providers and financial services providers, companies that provide customer information (like fraud prevention agencies, marketing and research companies), and companies contracted by you to provide services to you.

The main purposes for which we use your personal information are:

To fulfil and deliver services: We will need to use your name, title, address, email, contact details, and payment information so that we can process bookings and take payment.

To meet legal and regulatory requirements: Which apply to MyLaw as a legal services technology platform.

To provide tailored services: To treat you in a more personal way.

To carry out analysis and market research: We will analyse the way in which our sales channels, products and services are being used so that we can understand how to improve the service we offer.

To carry out marketing: We may send you information about our products and services by email. We may tailor the content of our communications to ensure they are as relevant to you as possible. If you've searched for services but not booked we may remind you about our services via social media.

To send status updates and service communications: Even if you have opted-out of receiving marketing information, we may still send you communications about the services you have booked to use.

To improve our websites, products and services: We may monitor the way that you and other users use our website so that we can identify ways to improve the website experience.

For management and administrative purposes: We may use and retain your personal information for administrative purposes, which may include accounting and billing, auditing, credit or other payment card verification, anti-fraud detection/screening and systems testing, maintenance and development.

When we collect information directly from you we may ask you if you do not want to receive our marketing communications. You may receive marketing communications from us if you have made a booking with us (unless you have indicated that you do not wish to receive marketing communications).

We may analyse your personal information to create a profile of your interests and preferences so that we can contact you with information relevant to you.

If you decide you would no longer like to be sent marketing communications you can change your mind at any time. Each marketing communication we send by email will also have an "unsubscribe" option.

Marketing to Children: We do not knowingly send marketing/promotional emails to children under the age of 16.

MyLaw will only process your personal information where we have a legal basis to do so. Under EU and Irish data protection laws in almost all cases the legal basis will be:

Performance of a contract: It will be necessary for MyLaw to use your personal information in order to complete a booking you have made with us.

Legitimate Interests: As a legal services technology platform, MyLaw has a legitimate business interest to use the personal information we collect in order to offer an effective service and carry out our business.

Compliance with legal obligations: There are situations where MyLaw is subject to a legal obligation and needs to use your personal information in order to comply with those obligations (e.g. to fulfil certain regulatory obligations under the Legal Services Regulation Act).

To protect vital interests: There are situations where we may need to use your personal information in order to protect the vital interests of you or another person.

Consent: We may collect and use your personal information where you have given your specific consent to us doing so. Where the basis of our processing your data is consent, you can withdraw your consent at any time by contacting [email protected].

We will keep your information for as long as we need it for the purpose it is being processed for. For example, where you book a Zoom with us we will keep the information related to your booking so we can fulfil the specific call you have made and after that we will keep the information for a period which enables us to handle or respond to any complaints, queries or concerns relating to the booking.

We will actively review the information we hold and delete it securely, or in some cases anonymise it, when there is no longer a legal, business or customer need for it to be retained.

We may disclose your personal information with your consent to the following third parties:

Third party independent lawyers and legal service providers for the purposes of securing services on your behalf.

Third party advisors (e.g. financial services advisors) for the purposes of securing and administering services on your behalf.

Third parties, such as law firms and law courts, in order to enforce or apply any contract with you.

Third parties, such as the police and regulatory authorities, to protect our rights, property, or the safety of our staff and assets.

If necessary to comply with a legal or regulatory obligation in any jurisdiction.

We do not sell personal information to third parties.

Your personal information may be sent to and stored by us and third parties in countries outside the country in which you are located and in particular outside the European Economic Area ("EEA").

Where we, or our permitted third parties, transfer your personal data outside the EEA, we or they will impose contractual obligations on the recipients of that data to protect your personal data to the standard required in the EEA.

In the case of transfers by us, we may also transfer your personal data where: (i) the transfer is to a country deemed to provide appropriate protection of your personal data by the European Commission; or (ii) where you have consented to the transfer.

Under data protection laws in the European Union, the UK and in Ireland, you have certain rights in relation to your personal information. Responses to exercise your rights will be provided within 1 month and generally there is no fee for making these requests.

Right of access — to your personal information we hold.

Right to stop direct marketing — to ask us to stop sending you direct marketing.

Right of rectification — to ask us to correct personal information if that information is inaccurate.

Right to withdraw consent — to processing of data where consent is relied upon by us as the basis of processing.

Right to be forgotten — to ask for personal information which identifies you to be removed (anonymised) without undue delay in certain circumstances.

Right to object — to the use of your personal information where the basis of our processing is our legitimate interests.

Right to object to direct marketing — including profiling for the purposes of direct marketing.

Right to object to automated processing — which has a legal effect or similarly significant effects.

Please note: we may need to retain certain elements that relate to a contract between you and MyLaw because we need it for our own legal and auditing purposes. We cannot erase your personal information if we have identified that you either have an open complaint with us or we hold a previous case for you within the past 6 years.

If you are a "registered user" or "member" of the MyLaw website you can view personal information held within your registered user account by logging into your account.

Alternatively if you wish to access other personal information we hold about you, we recommend that you make your request by email and include: your name, the email address used for the relevant service/processing, and details of your request.

You must also provide a photocopy of your passport or driving licence so that we can verify your identity, and proof of address (e.g. utility bill) dated within the last 6 months if you wish to receive a response in hard copy.

Please send your request to: [email protected].

If we change this Privacy Statement, we will let you know about the changes by publishing the updated version on MyLaw.ie and our mobile app.

This Privacy Statement came into effect on 1st January 2019 replacing our previous Privacy Statement.

The Data Protection Officer for MyLaw can be contacted at [email protected].

You have a right to complain to the Data Protection Commissioner in Ireland at: Data Protection Commissioner, Canal House, Station Road, Portarlington, R32 AP23, Co. Laois — https://www.dataprotection.ie/docs/Contact-us/b/11.htm