Privacy Policy
1. Data controller
EYA Ltd
Email: contact@legisbox.uk
2. Data collected and purposes
2.1 Contact form / demo request
When you complete the demo request form on the website, we collect:
- Full name
- Professional email address
- Firm name
- Bar / Regulator (optional)
- Number of solicitors
- Free-text message (optional)
Purpose: to respond to your demo request and contact you with information about LegisBox.
Legal basis: consent (Article 6(1)(a) UK GDPR).
Retention: up to 24 months from the last contact.
Form data is processed via Formspree Inc. (USA), covered by appropriate safeguards under UK GDPR Chapter V. See Formspree's privacy policy.
2.2 Technical cookies
The website uses technical cookies necessary for its operation, including memorising your theme preference (light/dark) and cookie consent. These do not require your consent under the UK GDPR and PECR.
2.3 Analytics cookies (with consent only)
Only if you explicitly accept via the cookie banner may we use anonymous analytics cookies to understand how visitors interact with the site. No personal data is transmitted to third parties.
2.4 Server logs
As with any website, our server automatically records the IP addresses of visitors, browser type, pages visited and access time. These data are retained for security purposes for a maximum of 30 days.
3. Your rights
Under Articles 15 to 22 of the UK GDPR and the Data Protection Act 2018, you have the following rights:
- Access: to know what data we process about you
- Rectification: to correct inaccurate data
- Erasure: to request deletion of your data ("right to be forgotten")
- Portability: to receive your data in a structured format
- Objection: to object to processing for direct marketing purposes
- Withdrawal of consent: at any time, without prejudice to prior processing
- Restriction: to request restriction of processing in certain circumstances
To exercise your rights, write to contact@legisbox.uk. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
4. Data transfers
Data collected via the contact form is processed by Formspree Inc. (USA) with appropriate safeguards under UK GDPR Chapter V. No other transfers outside the UK are made in connection with the website.
The LegisBox product itself is entirely self-hosted: client files and case data never leave the law firm's premises. No transfer of client data takes place at any point.
5. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. The website is served entirely over HTTPS with SSL/TLS certification.
6. Minors
The LegisBox website is exclusively intended for adult legal professionals. We do not knowingly collect data relating to individuals under the age of 18.
7. Changes to this policy
Any updates will be published on this page with the revision date indicated. We encourage you to check it periodically.
8. Contact
For any question relating to the processing of your personal data:
EYA Ltd, contact@legisbox.uk