Privacy Policy / UK GDPR Notice
Last updated: 4 June 2026
Website: https://mylawtools.co.uk/
Business/operator: myLawTools part of QMConsultancy.uk trading as My Law Tools
Contact: admin@myLawTools.co.uk
1. Who we are
My Law Tools provides software tools, plugins, dashboards and online utilities for document preparation, legal bundle production, PDF processing, redaction assistance, chronology building, deadline calculation, tutorial guidance and related productivity functions.
For the purposes of this Privacy Policy, “we”, “us” and “our” means myLawTools part of QMConsultancy.uk trading as My Law Tools. “You” and “your” means the person accessing or using our website, tools, account, subscription or services.
2. Our data protection role
We may act as a controller for personal data relating to accounts, billing, website usage, support, marketing and administration.
Where you upload, process or manage files containing personal data through our tools for your own purposes, you will normally be the controller of that content and we may act as your processor only where we process that personal data on your behalf.
Where a tool processes files locally in your own browser or device and the file is not uploaded to our servers, we may not receive or process the contents of those files.
3. Scope of this policy
This Privacy Policy explains how we collect, use, store, share and protect personal data when you visit our website, create an account, subscribe to a plan, use our tools, contact us for support, receive emails from us, upload or process files where server-side processing is enabled, or interact with cookies and similar technologies.
4. Personal data we may collect
4.1 Account data
Name, email address, username, password hash, organisation name, role, team membership, subscription tier, account status, permissions and login details.
4.2 Contact and support data
Emails, messages, support tickets, chat messages, telephone notes, technical details, screenshots, attachments and information you provide when asking for help.
4.3 Billing and transaction data
Subscription details, payment status, invoices, billing address, tax details, payment provider references, plan history, cancellation history and related records. We do not normally store full card details. Payments are usually handled by third-party payment providers.
4.4 Technical and usage data
IP address, browser type, device type, operating system, time zone, pages visited, actions taken, error logs, diagnostic data, performance data, access logs, security logs and approximate location inferred from IP address.
4.5 Document and file data
Where server-side processing or account storage is enabled, we may process files, filenames, file metadata, logos, cover pages, bundle settings, generated outputs, chronology entries, redaction settings, deadline settings and other materials you upload or generate.
Where local browser processing is used, file contents may remain on your device unless you choose to upload, save, share, email, export or otherwise transmit them.
4.6 Marketing preferences
Your preferences for receiving service updates, product updates, newsletters, offers or other communications.
4.7 Cookies and similar technologies
Information collected through cookies, local storage, session storage, analytics tools, consent tools, security tools and similar technologies.
5. Special category, criminal offence, confidential and legally privileged data
Our tools may be used by legal professionals and other users to process documents that contain sensitive, confidential, privileged, special category or criminal offence data.
You must not upload or process such data unless you have a lawful basis and authority to do so.
You remain responsible for determining whether any document contains special category personal data, criminal offence data, children’s data, health data, financial data, confidential information, legally privileged material, court-protected material, client-sensitive material or commercially sensitive material.
6. How we use personal data
We may use personal data to provide access to our website and tools, create and manage accounts, process subscriptions and payments, provide free, trial and paid features, generate or process documents where required, provide support, investigate faults, improve performance, prevent fraud or abuse, maintain records, send service notices, send marketing where permitted, comply with legal obligations and enforce our terms.
7. Lawful bases for processing
We rely on one or more of the following lawful bases:
- Contract: where processing is necessary to provide your account, subscription, tools, support, billing or requested services.
- Legitimate interests: where processing is necessary for operating, securing, improving and protecting our business, website, tools, users and systems, provided your rights do not override those interests.
- Legal obligation: where processing is necessary to comply with legal, tax, accounting, regulatory or court obligations.
- Consent: where we rely on your consent, such as for certain marketing or non-essential cookies.
- Vital interests: rarely, where processing is necessary to protect someone’s life.
8. Local browser processing
Some tools may process files locally in your browser or device. This means the document may not be uploaded to our server for that processing step.
Local processing does not mean all data is invisible to all systems. Your browser, device, operating system, extensions, security tools, network, cloud sync, backups or third-party software may still affect local files.
You are responsible for your own device security, browser security, backups and access controls.
9. Server-side processing
Some features may require files or data to be uploaded to our server or a third-party service. This may include account storage, team sharing, cloud export, AI processing, OCR processing, document conversion, email delivery, subscription verification or support diagnostics.
Where server-side processing applies, we will process the data only as necessary to provide the feature, secure the service, comply with law, resolve support issues or as otherwise described in this policy.
10. AI, OCR and automated processing
Some features may use OCR, artificial intelligence, machine learning, document parsing, date extraction, classification, summarisation or other automated methods.
Automated output may be inaccurate, incomplete, misleading, duplicated, inappropriate or unsuitable. We do not guarantee the accuracy of automated outputs.
11. Sharing personal data
We may share personal data with hosting providers, payment providers, email and notification providers, analytics providers, security and anti-fraud providers, support systems, cloud storage or processing providers where enabled, professional advisers, regulators, courts, law enforcement or public authorities where legally required, business purchasers or successors, and subcontractors who help us operate the website and tools.
We do not sell your personal data.
12. International transfers
Some service providers may process data outside the United Kingdom. Where personal data is transferred internationally, we will take steps required by applicable data protection law.
13. Retention
We keep personal data only for as long as reasonably necessary. Retention periods may vary depending on the type of data, legal requirements, account status, subscription status, security needs and dispute risk.
Typical retention periods may include account data for the duration of the account and a reasonable period afterwards, billing records normally up to 6 years, support records normally up to 6 years, security logs for a reasonable audit period, marketing preferences until changed or withdrawn, and uploaded or generated files according to the relevant feature or account setting.
You should keep your own backups. Our tools are not intended to be your sole archive, evidence repository, legal file storage system or backup service unless we expressly agree otherwise in writing.
14. Your rights
Subject to legal limits, you may have rights to access your personal data, correct inaccurate data, erase data, restrict processing, object to processing, data portability, withdraw consent where processing is based on consent, and complain to the Information Commissioner’s Office.
To exercise rights, contact us at admin@myLawTools.co.uk. We may need to verify your identity before responding.
15. Marketing
We may send marketing communications where permitted by law. You can unsubscribe at any time by using the unsubscribe link or contacting us. We may still send service, security, billing and account communications even if you opt out of marketing.
16. Security
We use reasonable technical and organisational measures to protect personal data. However, no website, plugin, browser tool, hosting platform, internet transmission, payment system, email system or third-party service is completely secure.
You are responsible for account security, password security, device security, user permissions and safe handling of documents.
17. Children
Our tools are not intended for children. You must not create an account or use paid services if you are under the legal age required to enter into a contract.
18. Complaints
Please contact us first if you have a privacy concern. You also have the right to complain to the Information Commissioner’s Office.
19. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be posted on our website with a revised date.
