Privacy Policy

Last updated: 6 November 2026

This policy explains what personal data Legal Lift ("we", "us") collects when you use legallift.co.uk, why we collect it, who we share it with, and the rights you have over it.

1. Who we are

Legal Lift is a trading name of Veritas Consulting Ltd, a company registered in England and Wales (company number 16932352, registered office: 73 Francis Road, Edgbaston, Birmingham, B16 8SP). We're a UK-based document service that provides legal document templates, AI-assisted document tailoring, and access to a network of independent SRA-regulated solicitors. We are the data controller for the personal data described in this policy. You can reach us via our contact form or by phone on 0800 321 3191.

2. What data we collect

Account data

When you create an account, we collect your email address and a securely hashed password, handled by our authentication provider, Supabase. We never see or store your password in plain text.

Document content

When you use the document generator, we collect the details you type into the form (for example, names, addresses, salary figures, or dates) in order to produce your document. A small number of free-text fields are sent to our AI provider, Anthropic, so it can rephrase your wording into clearer, more professional language — the legal structure of every document is fixed in advance and is never altered by AI. See "AI processing" below for more detail. Your answers and the finished document are saved to your account so you can reopen, edit and download it later. You can delete any saved document from your dashboard.

Documents you send for review

If you ask for a solicitor document review, the files you upload are stored in a private, encrypted storage area. They are shared only with the independent solicitor reviewing them, using secure links that expire after 14 days. We keep them for as long as needed to complete the review and deal with any follow-up questions, and you can ask us to delete them at any time.

Electronic signatures

If you sign a document electronically, we record the name you type, the date and time, your IP address, your browser details and a fingerprint (hash) of the document text. This creates the signing certificate that shows who signed and when.

Payment data

Payments are processed entirely by Stripe. Legal Lift never receives or stores your card number, expiry date or CVC — Stripe shares with us only what we need to manage your subscription or purchase (such as payment status and the last four digits of your card, where applicable).

Contact form and phone

If you contact us via the contact form, we collect your name, email address and message so we can reply. If you call us, standard call-handling information may be collected by our phone provider.

Technical data

Our hosting provider, Netlify, automatically logs standard technical information (such as IP address and browser type) for security and reliability purposes, as is standard for any website.

3. Cookies and local storage

Legal Lift does not use advertising or tracking cookies. We use your browser's local storage to keep you signed in between visits, and to keep the answers you have typed into a document form if you leave the page to pay. This is essential to the service and cannot be disabled without logging you out. We do not run third-party analytics or advertising trackers on this site at this time.

4. AI processing

We use a "safe architecture" for AI-assisted drafting: every document's legal clauses are fixed, professionally-drafted text that AI never touches. AI is only used to rephrase a small set of free-text fields you provide (such as a job description) into clearer wording. These fields are sent to Anthropic, our AI provider, solely to generate that document for you, and are not used by Legal Lift or Anthropic to train AI models.

5. Why we process your data

• To provide the service — creating your account, generating your documents, and processing payments (performance of a contract).
• To respond to you — replying to contact form messages and phone enquiries (legitimate interest).
• To keep the service secure and working — technical logging and fraud prevention (legitimate interest).
• To meet legal obligations — such as keeping financial records for tax purposes.

6. Who we share data with

We share data with the following processors, each acting under their own data protection obligations, strictly to help us run the service:

• Supabase — account authentication and database storage.
• Stripe — payment processing and subscription management.
• Anthropic — AI-assisted rephrasing of the free-text fields you provide.
• Netlify — website and backend function hosting.
• Resend — sending account and order emails, such as payment and review confirmations.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

7. Where your data is stored

Our processors may store or process data outside the UK/EEA, including in the United States. Where this happens, they do so under appropriate safeguards such as Standard Contractual Clauses, as required by UK GDPR.

8. How long we keep your data

We keep your saved documents until you delete them or close your account, and other account data for as long as your account is active, and for a reasonable period afterwards to meet legal and accounting obligations (typically up to 7 years for financial records). You can ask us to delete your account and associated data at any time — see your rights below.

9. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Complain to the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data

To exercise any of these rights, contact us via the contact form or on 0800 321 3191.

10. Children

Legal Lift is intended for users aged 18 and over. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our service or the law. We'll update the "last updated" date above when we do.