audlex.co.uk/privacy

Privacy Notice

Version 1.0 · May 2026 · AudLex

1. Who We Are

The data controller is Oscar Gregory Nyoni, trading as AudLex, Manchester, United Kingdom. Contact: audlex.co.uk/contact

2. What Information We Collect

Information you provide directly: your name, email address, immigration history, nationality, family circumstances, housing and employment situation, documents you share, and the content of your conversations with Vera, AudLex's AI legal assistant.

Information collected automatically: IP address, browser type, operating system, pages visited, and time spent on the platform.

Special category data: some information we collect — nationality, ethnic origin, immigration status, health information where relevant — is classified as special category data under UK GDPR. We only collect this where necessary to provide the guidance service, and we obtain your explicit consent before processing it.

3. Why We Use Your Information

We use your information to provide the guidance service (lawful basis: performance of contract), process payments, respond to enquiries, send the Growth and Justice newsletter if you have subscribed (lawful basis: consent), maintain platform security, and comply with legal obligations.

4. Who We Share Your Information With

We do not sell your personal data. We share your data only with service providers acting on our behalf:

Anthropic (Claude API) — AI processing for the chat guidance service. Formspree — contact form delivery. Mailchimp — newsletter distribution (if subscribed). Calendly — appointment booking. Stripe — payment processing. Netlify — website hosting. We share your information with third parties only with your explicit consent, or where required by law.

5. How Long We Keep Your Information

Case records and documents: 6 years from case conclusion. Contact form submissions: 2 years. Newsletter subscriber data: until you unsubscribe. Payment records: 7 years (HMRC requirement). Chat conversation logs: 6 months unless linked to a case record.

6. Your Rights

Under UK GDPR, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to withdraw consent at any time. To exercise any of these rights, contact us through audlex.co.uk/contact. We will respond within 30 days. You have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.

7. Security

All data transmitted between your device and the AudLex platform is encrypted using HTTPS. Personal data is encrypted at rest. Access to case data is restricted to Oscar Gregory Nyoni. The AI chat assistant is accessed through a secure server-side proxy — your conversation data is not exposed in the website's public code.

8. Cookies

The AudLex website uses essential cookies to maintain your session and support platform security. With your consent, analytics cookies help us understand how the platform is used. You can control cookies through your browser settings.

9. Children's Data

AudLex's services are intended for adults aged 18 and over. In immigration matters involving children — EU Settlement Scheme, family route, asylum claims — a parent or guardian may provide information about their minor children. This is handled with the same care as all personal data.

10. Contact

For any questions about this Privacy Notice or to exercise your data rights: audlex.co.uk/contact · Information Commissioner's Office: ico.org.uk · 0303 123 1113

Privacy Notice · Version 1.0 · May 2026 · AudLex · See also: AI Use & Accountability Statement · Terms of Engagement