1. Data Controller Information

Human Law is authorised and regulated by the Solicitors Regulation Authority (SRA No. 657838). For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Data Controller is:

Justin Patten
Human Law
Email: advice@human-law.co.uk

2. Information We Collect

We may collect and process the following categories of personal information:

• Identity Data: Name, title, and identity verification documents.
• Contact Data: Email address, physical address, and telephone numbers.
• Case & Intake Data: Information relevant to estate administration, probate diagnostic assessments, or legal deadlock scans submitted via our intake tools or correspondence.
• Technical Data: IP addresses and anonymised usage data collected via our privacy-friendly analytics provider (Plausible).

3. How We Use Your Data

We process your personal information under the following legal bases:

• Contractual Necessity: To review, diagnose, and execute requested legal services and advice.
• Legal Obligation: To comply with regulatory obligations set out by the SRA, anti-money laundering (AML) legislation, and HMRC requirements.
• Legitimate Interests: To improve our legal intake tools, maintain site security and, where appropriate, process information needed to provide legal services where the person concerned is not our client.

Use of AI: I use ChatGPT (OpenAI) and sometimes Gemini (Google) to assist with research, reviewing information and preparing drafts. I check substantive AI-assisted work and remain responsible for my advice. Where personal information is used, the lawful basis depends on the purpose: this may be providing the service you have requested under our contract, or our legitimate interest in providing legal services. Any use of sensitive personal information also requires an applicable additional legal condition.

4. Analytics & Cookies

We use Plausible Analytics to measure website traffic. Plausible is a privacy-first analytics platform that does not use cookies, does not track individual IP addresses across websites, and does not collect personally identifiable information (PII).

5. Data Sharing & Retention

We do not sell or rent your personal data to third parties. We only share information with third parties where necessary to fulfill legal obligations, protect legal rights, or utilize secure, trusted legal tech infrastructure (e.g., encrypted cloud storage and SRA validation badges).

We decide how long to keep information by considering the purpose for which it was collected, our legal and professional obligations, and the need to deal with complaints or legal claims. Client files are normally kept for six years after a matter ends, or longer where justified. Enquiries that do not lead to instructions and temporary AI records are kept only for as long as needed for their purpose, taking account of those obligations. We review information for secure deletion when it is no longer needed.

Where personal information is shared with an AI provider, we limit it to what is needed and check the service's terms, privacy settings and security arrangements first. These checks cover provider access, model training, retention and any processing outside the UK. Before a proposed use involving personal information begins, we will explain any relevant provider retention arrangements and overseas processing safeguards not already covered by this notice. We will seek specific permission where required.

6. Your Rights

Under UK data protection law, you have rights including:

• The right to access your personal data.
• The right to request rectification of inaccurate data.
• The right to request erasure of your data (subject to legal and regulatory record-keeping obligations).
• The right to ask us to restrict the use of your personal data in certain circumstances.
• The right to object to processing based on legitimate interests in certain circumstances.
• The right to receive and transfer personal data you have provided, where the right to data portability applies.
• The right to withdraw consent at any time where we rely on it, without affecting the lawfulness of earlier processing.
• The right to lodge a complaint with the Information Commissioner's Office (ICO).

To ask about these rights or raise a concern about your information, email advice@human-law.co.uk. Some rights are subject to legal limits, including protection for legally privileged information.