Privacy Policy
How Legal Lift collects, uses and protects your personal data.
Last updated: 28 August 2026
This policy explains what personal data Legal Lift ("we", "us") collects when you use legallift.co.uk, why we collect it, who we share it with, and the rights you have over it.
1. Who we are
Legal Lift is a trading name of Veritas Consulting Ltd, a company registered in England and Wales (company number 16932352, registered office: 73 Francis Road, Edgbaston, Birmingham, B16 8SP). We're a UK-based document service that provides legal document templates, AI-assisted document tailoring, and access to a network of independent SRA-regulated solicitors. We are the data controller for the personal data described in this policy. You can reach us via our contact form or by phone on 0800 321 3191.
2. What data we collect
Account data
When you create an account, we collect your email address and a securely hashed password, handled by our authentication provider, Supabase. We never see or store your password in plain text.
Document content
When you use the document generator, we collect the details you type into the form (for example, names, addresses, salary figures, or dates) in order to produce your document. A small number of free-text fields are sent to our AI provider, Anthropic, so it can rephrase your wording into clearer, more professional language — the legal structure of every document is fixed in advance and is never altered by AI. See "AI processing" below for more detail.
Payment data
Payments are processed entirely by Stripe. Legal Lift never receives or stores your card number, expiry date or CVC — Stripe shares with us only what we need to manage your subscription or purchase (such as payment status and the last four digits of your card, where applicable).
Contact form and phone
If you contact us via the contact form, we collect your name, email address and message so we can reply. If you call us, standard call-handling information may be collected by our phone provider.
Technical data
Our hosting provider, Netlify, automatically logs standard technical information (such as IP address and browser type) for security and reliability purposes, as is standard for any website.
3. Cookies and local storage
Legal Lift does not use advertising or tracking cookies. We use your browser's local storage to keep you signed in between visits — this is essential to the service and cannot be disabled without logging you out. We do not run third-party analytics or advertising trackers on this site at this time.
4. AI processing
We use a "safe architecture" for AI-assisted drafting: every document's legal clauses are fixed, professionally-drafted text that AI never touches. AI is only used to rephrase a small set of free-text fields you provide (such as a job description) into clearer wording. These fields are sent to Anthropic, our AI provider, solely to generate that document for you, and are not used by Legal Lift or Anthropic to train AI models.
5. Why we process your data
- To provide the service — creating your account, generating your documents, and processing payments (performance of a contract).
- To respond to you — replying to contact form messages and phone enquiries (legitimate interest).
- To keep the service secure and working — technical logging and fraud prevention (legitimate interest).
- To meet legal obligations — such as keeping financial records for tax purposes.
6. Who we share data with
We share data with the following processors, each acting under their own data protection obligations, strictly to help us run the service:
- Supabase — account authentication and database storage.
- Stripe — payment processing and subscription management.
- Anthropic — AI-assisted rephrasing of the free-text fields you provide.
- Netlify — website and backend function hosting.
We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.
7. Where your data is stored
Our processors may store or process data outside the UK/EEA, including in the United States. Where this happens, they do so under appropriate safeguards such as Standard Contractual Clauses, as required by UK GDPR.
8. How long we keep your data
We keep account and document data for as long as your account is active, and for a reasonable period afterwards to meet legal and accounting obligations (typically up to 7 years for financial records). You can ask us to delete your account and associated data at any time — see your rights below.
9. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Request a copy of your data in a portable format
- Complain to the Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data
To exercise any of these rights, contact us via the contact form or on 0800 321 3191.
10. Children
Legal Lift is intended for users aged 18 and over. We do not knowingly collect data from children.
11. Changes to this policy
We may update this policy from time to time to reflect changes in our service or the law. We'll update the "last updated" date above when we do.