Privacy Policy

We collect and process the following categories of personal data:

Name, email address, and password (hashed) when you register

Professional details: job title, practice areas, jurisdictions, firm affiliation, SRA number

Profile information: biography, location (city, county, postcode), profile photograph, website URL

Organisation details: firm name, address, logo, contact information

Publication name, LinkedIn URL, portfolio URL, article samples

Expert quotes, quote context, and editorial commentary you submit

Articles, expert assets (insights, videos, podcasts), and related metadata

Bespoke quotes submitted in response to journalist requests

Testimonials and trust signals added to your profile

Discovery events: profile views, article views, search queries

Expert asset interactions: views, downloads, shares

Authority score history and ranking snapshots

Citation usage records (internal and external)

Messages sent through the Connect messaging system

Media request threads and journalist request messages

Expertise request descriptions and responses

Connection requests, endorsements, and saved experts/articles

Organisation invites and team membership records

Subscription and billing information processed via Stripe (we do not store full card numbers)

Invoice history, subscription tier, and seat allocations

IP address, browser type, device identifiers

Session identifiers used for asset interaction tracking

Authentication tokens and refresh tokens

We process your data under the following UK GDPR lawful bases:

To operate and maintain your account and membership

To publish your professional profile in our solicitor directory ("The Legal Graph")

To manage expert quotes and editorial citations in "The legalVIS WIRE"

To calculate and display Authority Scores and Expert Rankings

To process media requests and facilitate journalist–expert connections

To enable the Connect networking features (connections, endorsements, expertise requests)

To track discovery events and provide analytics on profile and content visibility

To manage team membership, organisation invites, and firm dashboards

To process payments and manage subscription billing via Stripe

To verify journalist credentials and manage access tiers

To send platform notifications about quotes, requests, and account activity

To maintain audit logs for administrative and legal compliance purposes

Profile information (name, firm, practice areas, jurisdictions, biography, quotes marked as public, and trust signals) is displayed publicly on the platform. You can control visibility of individual mentions via the "show on public profile" setting.

Verified journalists can view available expert quotes and submit media requests. External citation usage records are shared with your organisation.

Our platform infrastructure is hosted on Supabase (backed by AWS). Data is stored in EU data centres.

We may disclose data where required by UK law, regulation, or court order.

We do not sell your personal data to third parties.

Your data is primarily stored in EU/EEA data centres. Where data is transferred outside the UK (for example, to Stripe's US infrastructure), we ensure appropriate safeguards are in place including Standard Contractual Clauses (SCCs) and the UK International Data Transfer Agreement (IDTA) as required under UK GDPR.

Data is retained for the duration of your account and membership.

Upon account deletion, personal data is removed. Anonymised audit logs (admin deletion records) are retained for 24 months for compliance purposes.

Articles and editorial content that has been published may be retained in anonymised form for archival purposes.

Historical ranking data is retained for platform integrity and trend analysis.

Billing records are retained for 7 years in compliance with UK tax and accounting requirements.

Usage analytics are retained for 24 months, then aggregated or deleted.

You have the following rights in relation to your personal data:

— Request a copy of the personal data we hold about you

— Request correction of inaccurate data (you can also update your profile directly)

— Request deletion of your data ("right to be forgotten"), subject to legal retention obligations

— Request we restrict processing in certain circumstances

— Receive your data in a structured, machine-readable format

— Object to processing based on legitimate interests

— Where processing is based on consent, withdraw it at any time

. We will respond within one calendar month as required by UK GDPR.

You also have the right to lodge a complaint with the

We implement appropriate technical and organisational measures to protect your data, including:

Encryption of data in transit (TLS) and at rest

Password hashing using industry-standard algorithms

Row-level security (RLS) policies ensuring users can only access authorised data

Role-based access control (RBAC) with separate admin, editor, journalist, and member roles

Secure authentication with email verification and token rotation

Audit logging of administrative actions including account deletions

We use essential cookies and local storage for authentication session management. We do not use advertising or third-party tracking cookies. Session identifiers used for discovery event tracking are generated per-visit and are not linked to advertising profiles.

Our platform is designed for legal professionals and is not directed at individuals under 18. We do not knowingly collect data from children.

We may update this policy from time to time. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top of this page indicates when the policy was last revised.

If you have any questions about this Privacy Policy or our data practices, please contact: