Privacy Policy

Lawyerly Ltd is a private limited company registered in England and Wales with company number 15697410. Our registered office is at 3rd Floor, 45 Albemarle Street, London, W1S 4JL.

We are the controller of the personal data we collect and process as described in this Privacy Policy. We are registered with the Information Commissioner’s Office.

We have appointed Willie van der Merwe as our external Data Protection Officer. The Data Protection Officer is responsible for overseeing how we handle personal data, advising on data protection compliance, and acting as a point of contact for data subjects and the Information Commissioner’s Office. You can contact the Data Protection Officer at support@lawyerly.co.

Lawyerly is a commercial legal service. Legal services are delivered by solicitors who are individually authorised and regulated by the Solicitors Regulation Authority and remain personally bound by the SRA’s professional rules and Code of Conduct. We are committed to handling personal data in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003.

You can contact us about this Privacy Policy or any data protection matter:

• by email at support@lawyerly.co

• by post to 3rd Floor, 45 Albemarle Street, London, W1S 4JL

• by phone on 0203 442 8479.

If you have a specific concern about how we handle your personal data, please address your message to the Data Protection Officer.

When you enquire about our services, we may collect:

• your name, role, and business contact details;

• information about the business you represent;

• information about your legal need or the matter you are enquiring about;

• records of our communications with you, including emails, forms, calls, and meetings; and

• marketing preferences and any consents you have given.

When you become a client or are connected with a client business (for example, as a director, officer, employee, shareholder, or other contact), we may collect:

• your name, role, business contact details, and signature where relevant;

• identification and verification information collected for anti-money laundering and know-your-client checks, including identity documents and proof of address;

• information about the client business and your relationship to it;

• payment and billing information;

• records of our communications and meetings, including recordings and transcripts of meetings where you have consented;

• documents and information you provide to us in connection with a matter; and

• information generated through your use of the Client Hub, including login records, activity logs, and uploaded content.

When you visit our website, we may collect:

• technical information such as IP address, browser type, device type, and operating system;

• usage information such as pages viewed, time on site, and referring sources; and

• information you submit through web forms, including any message content.

We explain how we use cookies and similar technologies in our Cookies Policy.

When you apply for a role with us, we may collect your CV, covering letter, employment history, references, right to work documentation, contact details, and any other information you provide as part of your application or that we obtain through reference checks. Successful applicants will receive a separate Employee Privacy Notice covering the wider scope of staff personal data we hold.

When we engage suppliers, advisers, or other contacts, we may collect the business contact details of relevant individuals, their role, and information necessary to manage the relationship and any associated payments.

We process personal data to set up your account, complete onboarding and compliance checks, deliver legal services, communicate with you about your matters, manage the Client Hub, and complete payments and billing. The lawful bases are performance of a contract, compliance with legal obligations, and our legitimate interests in operating our service.

We process personal data to administer our accounts, manage our suppliers, develop our service, train our team, protect our systems and information, and exercise or defend legal claims. The lawful bases are our legitimate interests and, where applicable, compliance with legal obligations.

We process personal data to respond to your enquiries, send you service-related messages and updates, and provide information you have requested. The lawful bases are performance of a contract or our legitimate interests in responding to you, and your consent where required.

We process limited personal data to send you information about our services that we think may interest you. We do this on the basis of your consent or, where permitted by the Privacy and Electronic Communications Regulations, on the basis of our legitimate interests under the soft opt-in. You can opt out of marketing at any time using the unsubscribe link in our messages or by contacting us.

We process personal data to comply with our obligations under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, the Solicitors Regulation Authority’s rules, tax and accounting law, data protection law, and any other law, regulation, or court or regulatory order that applies to us.

We share personal data with our parent company, Lawyerly Group (Pty) Ltd, and with related entities where necessary for shared services, group governance, and support functions. Group sharing is governed by intra-group agreements that include appropriate data protection safeguards.

We use carefully selected service providers to support our operations and the delivery of our services. The main categories of service providers are:

• cloud hosting, productivity, and collaboration platforms (for example, Microsoft);

• payment processing (for example, Stripe);

• customer relationship management and marketing platforms (for example, HubSpot);

• identity verification and anti-money laundering providers (for example, ComplyCube);

• meeting transcription tools used with your consent (for example, Fireflies);

• AI tools that support service delivery (for example, Anthropic);

• compliance and operational tooling (for example, monday.com); and

• our strategic partners, including our technology partner Shft (Pty) Ltd and our marketing partner Seek the Just (Pty) Ltd.

All service providers act on our instructions under written data processing terms. Where they handle personal data we process on behalf of a client, the detailed sub-processor arrangements are set out in our Data Processing Addendum.

Where appropriate, we may share personal data with external advisers and specialists, such as barristers, accountants, tax advisers, or other professionals, in connection with a specific matter or to obtain advice. Where we make a referral or introduction at your request, we share only the information you have asked us to share or that is needed for the referral.

We may share personal data with regulators, courts, and law enforcement bodies where we are required to do so by law, by a court order, or by a regulatory authority such as the Solicitors Regulation Authority, the Information Commissioner’s Office, or HM Revenue and Customs.

If we sell, restructure, or reorganise our business or assets, we may share personal data with the relevant counterparties and their advisers, subject to appropriate confidentiality and data protection safeguards.

You have the right to be informed about how we collect and use your personal data. This Privacy Policy is our main way of providing that information.

You have the right to ask us for a copy of the personal data we hold about you and information about how we process it.

You have the right to ask us to correct personal data we hold about you that is inaccurate or incomplete.

You have the right to ask us to erase personal data we hold about you in certain circumstances, for example where the data is no longer needed for the purposes for which we collected it. We may not be able to comply with an erasure request where we are required to keep the data by law or for the establishment, exercise, or defence of legal claims.

You have the right to ask us to restrict our processing of your personal data in certain circumstances, for example while we investigate a complaint or rectification request.

Where we process personal data on the basis of consent or performance of a contract and by automated means, you have the right to ask us to provide that data to you, or to another controller, in a structured, commonly used, and machine-readable format.

You have the right to object to our processing of personal data where we rely on our legitimate interests. You also have the right to object to processing for direct marketing purposes at any time, and we will stop such processing when you do so.

You have the right not to be subject to a decision based solely on automated processing which produces a legal effect on you or similarly significantly affects you, except in limited circumstances permitted by law. We do not make such decisions about you.

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of your rights, please contact us at support@lawyerly.co. We will respond within one month, although we may extend this period by up to two further months for complex or numerous requests, in which case we will let you know. We do not usually charge a fee, but we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.

We may need to verify your identity before responding to a rights request, particularly where it relates to special category data or where there is a risk that the request has come from someone other than the data subject.