1. Introduction
This Privacy Policy explains how Hummingbird Labs Ltd ("we", "our", or "us") collects, uses, and protects personal information through ClarityLegal. We are committed to protecting your privacy and ensuring transparent data practices.
2. Data Controller
Hummingbird Labs Ltd is the data controller for personal information collected through ClarityLegal. We can be contacted at:
- Email: privacy@claritylegal.co.uk
- Address: [Your Business Address]
- Data Protection Officer: [DPO Name]
3. Information We Collect
3.1 User Information
- Name and contact details
- Professional information
- Login credentials
- Usage data and analytics
3.2 Client Information
- Client names and contact details
- Matter information
- Financial records
- Legal documents and correspondence
4. How We Use Information
- Providing practice management services
- Processing payments and managing subscriptions
- Sending service notifications and updates
- Improving our services
- Complying with legal obligations
- Preventing fraud and maintaining security
5. Legal Basis for Processing
- Contract performance
- Legal obligations
- Legitimate business interests
- Consent (where applicable)
6. Data Security
- AES-256 encryption for all data
- UK data sovereignty
- Regular security audits
- Access controls and authentication
- Staff security training
- Incident response procedures
7. Data Sharing
We may share data with:
- Service providers (e.g., hosting, payment processing)
- Professional advisers
- Regulatory authorities
- Law enforcement (when required by law)
8. Data Retention
- Active accounts: Data retained while account is active
- Archived accounts: 180 days retention period
- Financial records: 7 years (legal requirement)
- Usage logs: 12 months
9. Your Rights
- Access your personal data
- Correct inaccurate data
- Request data erasure
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent
10. International Transfers
All data is stored in UK-based data centers. If any international transfers are required, we ensure appropriate safeguards are in place through Standard Contractual Clauses or adequacy decisions.
11. Cookies and Tracking
We use essential cookies for service functionality and analytics cookies to improve our services. Users can control cookie preferences through their browser settings.
12. Children's Privacy
Our services are not intended for children under 18. We do not knowingly collect data from children.
13. Changes to Privacy Policy
We may update this policy periodically. Users will be notified of significant changes. Continued use of the Service constitutes acceptance of the updated policy.
14. Complaints
If you have concerns about our data practices, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO).