Privacy Notice
Version 1.0, effective 5 October 2026
1. Who we are
1.1Corven Law Ltd is the controller of the personal information described in this notice. We are a company registered in England and Wales with company number 17492112, and our registered office is 19 The Circle, Queen Elizabeth Street, London SE1 2JE. We trade as Corven.
1.2You can contact us about anything in this notice at contact@corvenlaw.com.
1.3Corven Law Ltd is registered with the Information Commissioner's Office as a data controller. Our registration number is ZC264823.
2. The information we collect
2.1When you contact us or buy from us, we collect your name, email address, telephone or WhatsApp number, business name and address, and your payment status. Stripe collects your card details on our behalf. We never see or store your full card number.
2.2When you ask a question or buy a product, we collect the facts, documents and photos you send us. These often include information about other people, such as your employees, customers or the other side of a dispute.
2.3When you use our website, we collect technical information needed to run it securely, such as your IP address and the pages you request.
2.4We ask you not to send us information about health, ethnic origin, religion, sexual orientation, trade union membership or criminal matters unless it is needed for your question. If you do send it, we use it only to answer your question.
3. How we use your information and our lawful basis
3.1We use your information to provide the services you buy from us, to manage your membership and payments, and to send you messages about your account and your questions. Our lawful basis is that this is necessary for our contract with you.
3.2We keep records of our work and our payments, and we respond to requests from regulators and law enforcement. Our lawful basis is that this is necessary to comply with our legal obligations.
3.3We keep our website and systems secure, prevent fraud, deal with complaints and claims, and improve our services, including by using questions from which all identifying details have been removed. Our lawful basis is our legitimate interest in running a secure and reliable business. You can object to this use at any time.
3.4Where your question involves special category information, such as health information about an employee, we rely on the condition that processing is necessary for the establishment, exercise or defence of legal claims, under Article 9(2)(f) of the UK GDPR.
3.5We send marketing emails only if you have agreed to receive them, or if you have bought from us and we are telling you about our own similar services. Every marketing email has a simple way to unsubscribe.
4. Who we share your information with
4.1We share your information only with the following, and only as much as they need:
(a)technology providers who host our website, database, email, documents and messaging, and who help us prepare answers and documents;
(b)Stripe, which processes payments, and our bank;
(c)our accountants and professional advisers;
(d)a law firm or other business we introduce you to, but only with your consent; and
(e)regulators, courts, law enforcement or other authorities, where the law requires us to.
4.2Our providers act on our instructions under written contracts. We only use providers whose terms do not allow them to use your information to train their own models.
4.3We do not sell your information.
5. Information held or accessed outside the UK
5.1Some of our providers store or access information outside the UK. Where they do, we make sure the transfer is covered by UK adequacy regulations or by an approved transfer mechanism, such as the Information Commissioner's international data transfer agreement or addendum. You can ask us for details.
5.2People who work for Corven may access our UK systems from outside the UK. When they do, we apply security measures to protect your information.
6. How long we keep your information
6.1We keep records of your questions, our answers and our documents for six years after our last service to you, because a claim based on a contract can be brought up to six years after it arises.
6.2We keep payment and accounting records for as long as company and tax law requires.
6.3If you contact us but do not buy from us, we delete your enquiry after 12 months.
6.4We keep your marketing preferences until you unsubscribe, and then keep a record that you unsubscribed so that we do not contact you again.
7. Automated decisions
7.1We use software to help prepare answers and documents. We do not make any decision about you based solely on automated processing that has a legal or similarly significant effect on you.
8. Your rights
8.1You have the right to ask for a copy of your information, to have it corrected, to have it deleted, to restrict how we use it, to object to how we use it, and to receive it in a portable format. Some of these rights apply only in certain circumstances.
8.2To use any of these rights, email contact@corvenlaw.com. We will respond within one month.
8.3If you are unhappy with how we use your information, please tell us first so that we can try to put it right. You also have the right to complain to the Information Commissioner's Office, at ico.org.uk or on 0303 123 1113.
9. Children
9.1Our services are not intended for anyone under 18.
10. Changes to this notice
10.1We will update this notice when our use of your information changes, and show the date of the latest version at the top.