Privacy Notice

1. Data controller and contact details

The data controller for the Lawward platform is Azam Shafa, a sole trader trading as Lawward. The business and service address is 460 Alum Rock Road, Birmingham, B8 3HU, United Kingdom. For privacy requests, email hello@lawward.co.uk. An independent professional becomes separately responsible for information they use in their own client engagement or professional file.

2. Information collected

For a legal enquiry, Lawward collects your name, email, optional phone number, location, short matter summary, urgency and deadline choices, service preferences, consent choices and enquiry status. For a professional application, Lawward collects identity and contact details, work email, regulator and registration number, firm or chambers, practice information, experience, locations, languages, application status and consent choices. The platform also records limited security, access, payment-status and audit information.

3. Information not requested at the first stage

The initial enquiry form does not request documents. Do not include another person’s unnecessary personal information, detailed medical information, ethnicity, religion, sexual orientation, genetic or biometric information, or information about alleged or proven criminal offences. If Lawward identifies unexpected sensitive information that is not needed for the initial matching purpose, it will restrict access and delete or redact it where reasonably possible.

4. Why information is used

Lawward uses enquiry information to receive and review a request, contact the person who submitted it, identify a possible professional match, administer the enquiry and protect the service. Professional application information is used to review eligibility, check public professional-register information, communicate about the application and administer membership. Payment status is used to activate and support paid membership. Audit and security information is used to prevent misuse, diagnose problems and keep the service secure.

5. Lawful bases

Lawward relies on steps requested before entering a contract and performance of a contract to administer applications, memberships and requested services. It relies on legitimate interests to operate a secure marketplace, review enquiries, perform proportionate manual matching, prevent fraud, keep necessary records and improve the service, after considering the effect on the people involved. Lawward uses consent for optional marketing; consent may be withdrawn at any time by emailing hello@lawward.co.uk.

6. Sharing

Authorised Lawward administrators may access a record where needed for matching, support, security or administration. Limited matter information may be shared with potential independent professionals to identify a match; identifying and contact details are shared in line with the enquiry choices. Service providers may process information for website hosting and databases, authentication, business email, security and Stripe payment processing. Lawward may also disclose information where required by law or needed to establish, exercise or defend legal claims.

7. International transfers

Some service providers may process information outside the United Kingdom. Where that happens, Lawward requires an applicable adequacy decision, approved contractual safeguards or another lawful transfer mechanism.

8. Site analytics

Lawward’s application-level analytics records page paths and selected events such as an enquiry start or completion. It does not add a cookie identifier or store contact details, enquiry text or IP addresses in the analytics table. Hosting and security providers may process technical request logs under their own service terms. Lawward uses these limited analytics for its legitimate interest in understanding and improving the service.

9. Retention

Open enquiry records are kept while the enquiry is being administered and are reviewed after closure or the last meaningful contact. Closed enquiry records are deleted or anonymised within 12 months unless they are needed for a complaint, security incident or legal claim. Rejected or withdrawn professional applications are kept for up to 12 months; approved application and membership records are kept during membership and for up to six years afterwards where needed for contractual, tax, accounting or dispute records. Application-level analytics and routine security events are kept for up to 13 months. Marketing preferences are kept until consent is withdrawn, with a minimal suppression record retained to respect the opt-out.

10. Security

Lawward uses HTTPS, restricted administrator access, authenticated sessions, input validation and audit records for selected administrative actions. Payment-card details are entered on Stripe-hosted pages and are not stored in Lawward’s database. No internet service can guarantee absolute security.

11. Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction or transfer of personal information, or object to processing. You may withdraw marketing consent at any time. Send a request to hello@lawward.co.uk; Lawward may need to verify your identity. You may also complain to the Information Commissioner’s Office.