Privacy Policy

1. Who We Are

My Legal Hub (my-legal-hub.com) is operated by Axiella Ltd, a company registered in England and Wales. We operate an online introducer marketplace that connects individuals and businesses with independent legal professionals.

For the purposes of UK data protection law, Axiella Ltd is the data controller responsible for your personal data collected through this website.

2. What This Policy Covers

This Privacy Policy explains how we collect, use, store and share your personal data when you use the My Legal Hub website, search tools, contact forms, document tools and any other features of our platform. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy does not cover the privacy practices of the independent legal professionals listed on our platform. Each professional is their own data controller for any personal data you share with them directly.

3. Data We Collect

3.1 Data you provide to us directly

We may collect the following personal data when you interact with our platform:

• Name and email address (when you contact us or register interest)
• Phone number (if provided in contact forms)
• Message content submitted via our contact form
• Professional details if you register as a legal professional (name, firm, regulatory number, practice areas, contact details)

3.2 Data collected automatically

When you visit our website, we automatically collect:

• IP address (used to determine approximate location for search results)
• Browser type and version
• Pages visited and time spent on each page
• Search queries entered into the AI legal search tool
• Referring website or source
• Device type (desktop, mobile, tablet)

3.3 Data from third parties

We may receive data from the following third-party sources:

• Google Places API — We use Google Places data to supplement search results with publicly available information about legal professionals. This data is subject to Google's own privacy policy.
• Regulatory bodies — Where we verify a professional's registration, we may cross-reference publicly available data from the SRA, Faculty Office, Bar Standards Board, CLC, OISC, IPReg or CILEx registers.

4. How We Use Your Data

Purpose	Data used	Legal basis (UK GDPR)
To operate the search and matching service	Search queries, IP address, location data	Legitimate interests (Art. 6(1)(f))
To respond to your contact form enquiry	Name, email, phone, message	Legitimate interests / contract performance
To register and display a professional profile	Professional contact and qualification data	Contract performance (Art. 6(1)(b))
To improve our platform and AI tools	Search queries, usage data	Legitimate interests (Art. 6(1)(f))
To send marketing communications (opt-in only)	Name, email address	Consent (Art. 6(1)(a))
To comply with legal obligations	As required by law	Legal obligation (Art. 6(1)(c))
To display search results using Google Places	Location / search query	Legitimate interests (Art. 6(1)(f))

5. Search Query Data

When you use our AI-powered legal search tool, your search query is processed to identify the type of legal professional that may be appropriate for your need. Search queries are stored in our systems to improve the accuracy of our AI matching over time.

We do not sell search query data to third parties. Search data is not linked to your identity unless you have created an account or submitted a contact form in the same session.

6. Document and AI Tool Data

If you use our AI document drafting or contract analysis tools, any text you submit is processed to generate output. We use reputable AI service providers to process this data. These providers process data under their own terms and data processing agreements and are required to handle your data securely. You should not submit documents containing highly sensitive personal data (such as financial account numbers, health data or passport numbers) through these tools.

We do not store document content you submit through AI tools beyond the duration of your session, unless you explicitly save or share the output.

7. Professional Profile Data

If you register as a legal professional on My Legal Hub, your profile data — including name, firm name, regulatory number, practice areas, contact details and photograph — will be displayed publicly on the platform. This data will remain visible for as long as your listing is active. You may request removal of your profile at any time by contacting info@my-legal-hub.com.

8. Google Places Data

My Legal Hub uses the Google Places API to supplement search results. Where search results include data sourced from Google Places, that data has not been independently verified by My Legal Hub. Google's privacy policy governs how Google processes data in connection with the Places API. You can view Google's Privacy Policy at policies.google.com/privacy.

9. Who We Share Your Data With

We do not sell your personal data to third parties. We may share your data with the following categories of recipients:

• IT and hosting providers — who host our website and databases under data processing agreements
• AI service providers — who process search queries and document tool submissions to generate results. These providers operate under their own terms and data processing agreements.
• Email and communication tools — used to respond to enquiries and send notifications
• Analytics providers — to understand how the platform is used (anonymised where possible)
• Legal and regulatory authorities — where required by law or court order

All third-party processors are required to handle your data securely and in accordance with applicable data protection law.

10. Data Transfers Outside the UK

Some of our service providers are based outside the UK. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or adequacy decisions recognised by the UK Government. If you would like further information about the safeguards in place, please contact us at info@my-legal-hub.com.

11. Data Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration. These include:

• Encrypted connections (HTTPS/TLS) across the entire website
• Access controls restricting internal access to personal data
• Regular security reviews of our systems and third-party providers
• Data minimisation — we only collect what we need

No method of electronic transmission or storage is 100% secure. If you believe your data has been compromised, please contact us immediately at info@my-legal-hub.com.

12. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy:

• Contact form data — retained for up to 2 years from the date of submission
• Search query data — retained in anonymised form; identifiable data deleted after 12 months
• Professional profile data — retained for as long as the listing is active, then deleted within 30 days of deactivation
• Website analytics data — retained for up to 26 months
• Legal obligation records — retained for as long as required by applicable law

13. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access — You have the right to request a copy of the personal data we hold about you.
• Right to rectification — You can ask us to correct inaccurate or incomplete data.
• Right to erasure — You can ask us to delete your personal data in certain circumstances.
• Right to restrict processing — You can ask us to limit how we use your data in certain circumstances.
• Right to data portability — You have the right to receive your data in a structured, machine-readable format.
• Right to object — You can object to processing based on legitimate interests or for direct marketing purposes.
• Rights related to automated decision-making — You have the right not to be subject to solely automated decisions that significantly affect you.
• Right to withdraw consent — Where we process data based on consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at info@my-legal-hub.com. We will respond within one month. There is no charge for exercising your rights.

14. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK's supervisory authority:

We would, however, appreciate the opportunity to address your concerns before you contact the ICO. Please reach out to us first at info@my-legal-hub.com.

15. Marketing Communications

We will only send you marketing emails if you have explicitly opted in to receive them. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us at info@my-legal-hub.com. Opting out of marketing does not affect any other communications we send you in connection with services you have requested.

16. Children

Our platform is not directed at children under the age of 16 and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the platform after changes are published constitutes acceptance of the updated policy.

18. Rights for California Residents (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know — You have the right to request information about the categories and specific pieces of personal data we collect, use, disclose, and sell about you.
• Right to delete — You have the right to request that we delete personal data we have collected from you, subject to certain exceptions.
• Right to opt out of the sale or sharing of personal data — My Legal Hub does not sell your personal data to third parties. We do not share personal data for cross-context behavioural advertising.
• Right to non-discrimination — You have the right to exercise your privacy rights without receiving discriminatory treatment. We will not deny services, charge different prices, or provide a different level of service because you exercised your rights.

To exercise any of these rights, please contact us at info@my-legal-hub.com. We will respond to verified requests within 45 days. Requests may be made free of charge.

19. Rights for Australian Users (Privacy Act 1988)

Where applicable, My Legal Hub complies with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth):

• APP 5 — Notification of collection: We inform users of the purpose of collection, how we use their data, and to whom we may disclose it at the point of collection (e.g. via this Privacy Policy, contact forms and registration processes).
• APP 6 — Use and disclosure: We only use or disclose personal data for the primary purpose for which it was collected, or for directly related secondary purposes you would reasonably expect, unless you have consented or an exception applies.
• APP 8 — Cross-border disclosure: Some of our service providers and AI partners are located outside Australia. Where we disclose personal data overseas (including to the United Kingdom and the United States), we take reasonable steps to ensure recipients handle it consistently with the APPs.
• APP 12 — Access to personal data: Australian users may request access to any personal data we hold about them. We will respond to access requests within a reasonable time.

Australian users may exercise their rights or raise a complaint by contacting us at info@my-legal-hub.com. If we cannot resolve your complaint to your satisfaction, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

20. Contact

For any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact us: