PRIVACY POLICY

WHO WE ARE AND WHAT WE DO

Lawtificial Integrity Ltd. (“Lawtificial Integrity”, “we”, “us”, “our”) is a company registered in England and Wales under company number 16189879.

We are an edtech company offering specialist courses on the legal, regulatory, and ethical aspects of artificial intelligence (AI) technologies.

PURPOSE AND SCOPE OF THIS POLICY

We have developed this privacy policy (“Privacy Policy”) to demonstrate our commitment to protecting and upholding the personal data of our customers and/or users (“you”, “your”) who access and use our website (“Site”) and educational courses (“Courses”). In this Privacy Policy, the Site and Courses are collectively referred to as our services (“Services”). Personal data refers to any information relating to an identified or identifiable natural person (“Personal Data”).

This Privacy Policy documents the methods in which we collect, use, preserve, maintain and disclose Personal Data we gather from you. It does not apply to your Personal Data collected by a third party, including through any application or content (including advertising) that may link to or be accessible from or through the Services.

Please read this Privacy Policy carefully to understand our practices in relation to your Personal Data, and how we will treat it. If you do not agree with our practices, please discontinue your use of the Services. We may change this Privacy Policy from time to time. Your continued use of the Services after we make changes is deemed to be acceptance of those changes. We encourage you to periodically review this Privacy Policy to stay informed of any updates.

PRIVACY OF MINORS

Our Services are not directed at anyone under the age of sixteen. We do not knowingly collect Personal Data from children under sixteen. If you are under sixteen, do not use or provide any information on the Services, through any features of the Services, register for, purchase, use or access our Services, use any of the interactive or public comment features of the Services, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or username you may use. If we learn we have collected or received Personal Data from a child under sixteen without verification of parental consent, we will delete that Personal Data. If you believe we might have any Personal Data from or about a child under sixteen, please contact us at privacy@lawtificialintegrity.ai.

WHAT PERSONAL DATA DO WE PROCESS

We may process the following types of Personal Data:

Identity data, including your given name and surname, complete address and location, and other personally identifiable information.
Profile data, including your username, e-mail addresses and password, and preferences.
Transaction data, including your credit card information, billing information, services and products you have purchased from us, order history, and other transactional information.
Contact data, including billing and/or delivery address, email address, and telephone numbers (where required).
Information that you provide by filling in forms on our Site. This includes information provided at the time of registering to use our Site, subscribing to our Courses, accessing and using our Services. We may ask you for information when you reach out to us in relation to our Services.
Correspondence data, including records and copies of your correspondence (including email addresses) if you contact us.
Technical data such as your login data, internet protocol (IP) address, browser type(s) and version(s), operating system and platform, time zone setting and location.
Usage data on how you use our Services using tracking identifiers which are specific to each customer through the use of cookies or other similar means.
Marketing data includes your preferences in receiving marketing from us and preferred method of communication.

We do not collect any sensitive Personal Data (this includes information about your race or ethnicity, political opinions, religious or philosophical beliefs, trade union membership, information about health and genetic and biometric data, and sex life or sexual orientation). Nor do we collect any information about criminal convictions and offences.

HOW WE COLLECT YOUR PERSONAL DATA

We collect Personal Data from you when you create an account with us, submit online data entry forms for subscribing to our Courses, communicate with us, provide feedback, subscribe to our emails, participate in community forums, and other instances where you can volunteer your Personal Data.
We may also collect and receive your Personal Data from yourself (including your device) as well as from our third-party service providers.

WHAT IS OUR LEGAL BASIS TO PROCESS YOUR PERSONAL DATA

We will only process your Personal Data where we have a valid lawful basis, mainly to:

Perform a contract we are about to enter into or have entered into with you, which includes but is not limited to processing purchases of and delivering our Services,
Provide our Services, including delivery of access to the Site and Courses,
Comply with our legal obligations, including but not limited to tax, accounting, and regulatory obligations to which we are subject,
Process your Personal Data where you have given us your consent for one or more specific purposes, where your consent is legally required. You have the right to withdraw consent to marketing at any time by contacting us and you can unsubscribe from any such marketing communications at any time, and
Where it is necessary for our legitimate business interests (or those of a third party) and your interests and fundamental rights do not override those interests.

PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA

We may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data. Please contact us for more information on the legal bases we rely on to process your personal data.

Purpose	Type(s) of data	Lawful basis for processing, including basis of legitimate interest
To create your account as a new customer	(a) Contact (b) Identity	Performance of a contract with you
To process and deliver your order including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us	(a) Contact (b) Correspondence (c ) Identity (e) Transaction	(a) Performance of a contract with you (b) Necessary for our legitimate interests (to recover monies due to us)
To administer and protect our Site and Services (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	(a) Contact (b) Correspondence (c ) Identity (d) Technical	(a) Necessary for our legitimate interests (for running our business, to prevent fraud, provision of administration and IT services, network security, and in the context of a business reorganisation or group restructuring exercise) (b) Necessary to comply with a legal obligation
To manage our relationship with you, which will include: (a) Notifying you about changes to our Terms or Privacy Policy (b) Asking you to leave a review or take a survey	(a) Contact (b) Identity (c ) Correspondence (d) Profile (e) Marketing	(a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c ) Necessary for our legitimate interests (to keep our records updated and to study how customers use our Services)
To deliver relevant content through our Site and/or Services	(a) Contact (b) Identity (c ) Profile (d) Usage (e) Technical	(a) Consent, where legally required (b) Necessary for our legitimate interests (to understand how customers use our Services, to develop our Services)
To use data analytics to improve our Services, marketing, customer relationships and experiences	(a) Correspondence (b) Marketing (c ) Usage (d) Technical	Necessary for our legitimate interests (to define types of customers for our Services, to keep our website updated and relevant, manage errors on our Site, develop our business and to inform our marketing strategy)
To track sales and manage our Referral Program	(a) Technical	Necessary for our legitimate interests (to monitor the performance of referral links, track conversions, and allocate commissions to Referrers)

CHANGE OF PURPOSE

We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

WHO WILL ACCESS YOUR PERSONAL DATA

Based on the purposes of processing, we may share your Personal Data with the following:

Our officers and employees: We may make your Personal Data accessible by our officers and employees whose roles require access to your Personal Data. Our officers and employees are subject to confidentiality obligations that extend to your Personal Data.
Third-party service providers: We use third-party service providers to store information, host our Services, manage accounts, content and online subscriptions, process payments, accreditation, and certification service providers, etc.
Please note that your payment details are processed by our third-party payment processors, Stripe and PayPal. We do not have access to your payment information / credit card number. You can learn more about Stripe and PayPal’s use of your data here: https://stripe.com/gb/privacy and here: https://www.paypal.com/uk/legalhub/privacy-full.
Third party service providers, such as Google Analytics, to assist in the measurement of visitor traffic, Site engagement, insights and visitor analytics.
Investors/Partners: We reserve the right to disclose deidentified data to investors and/or possible partners. In the event of a merger, acquisition, or any form of sale of some or all of our assets, we will ensure that the acquiring organization agrees to protect Personal Data in accordance with this Privacy Policy, and that the acquiring organization will provide notice before Personal Data, customer information, or business information becomes subject to a different privacy policy.
Judicial and Legal Authorities: We may be required, either by law or regulation, to disclose Personal Data. These disclosures are subject to our good-faith belief that such action is necessary, or we are required to comply with a current judicial proceeding, a court order or legal process.
Consultants/Advisors: We may, on occasion, interact with third-party advisors, consultants, IT professionals, where it may become necessary to disclose your data.

We require all third parties to safeguard your personal data and handle it in compliance with the law. Our third-party service providers are not permitted to use your personal data for their own purposes; they may only process it for the purposes we specify and strictly according to our instructions.

We do not sell your Personal Data to third parties.

COOKIES AND TRACKING TECHNOLOGIES

We use cookies or similar tracking technologies on our Site and in referral links. This information helps us monitor your session on our Site, track and manage referral sales, and may also be used to personalize website content to enhance your individual experience. For more information about how we use cookies, please see our Cookie Notice.

YOUR PRIVACY RIGHTS

If you are located in the UK or EEA, we are the data controller in respect of your Personal Data. If you are located in California, we are the service provider in respect of your Personal Data. That means we are responsible for determining the purposes and means of processing your Personal Data.

Due to our commitment to privacy, we extend the following data subject rights (available only to persons located in the UK, EEA, or California) to our customers and users in all jurisdictions. You have the following rights in relation to your Personal Data:

Your right of access
If you ask us, we will confirm whether we are processing your Personal Data and, if necessary, provide you with a copy of that Personal Data.
Your right to rectification
If the Personal Data we hold about you is inaccurate or incomplete, you are entitled to request to have it rectified.
Your right to erasure
You can ask us to delete or remove your Personal Data in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable).
Your right to restrict processing
You can ask us to ‘block’ or suppress the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of that Personal Data or you object to us processing your Personal Data.
Your right to data portability
You have the right, in certain circumstances, to obtain Personal Data you have provided us with (in a structured, commonly used and machine-readable format) and to reuse it elsewhere, or ask us to transfer this to a third party of your choice.
Your right to object
You can ask us to stop processing your Personal Data, and we will do so, if we are:
- relying on our own or a third party’s legitimate interests to process your Personal Data, except if we can demonstrate compelling legal grounds for the processing; or
- processing your Personal Data for direct marketing purposes.
Your right to withdraw consent
If we rely on your consent (or explicit consent) as our legal basis for processing your Personal Data, you have the right to withdraw that consent at any time.
Your right to lodge a complaint with the supervisory authority
If you have a concern about any aspect of our privacy practices, including the way we have handled your Personal Data, you can report it to the relevant Supervisory Authority.
Your right not to be subject to solely automated decision-making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Please note that some of these rights may be limited where we have an overriding interest or legal obligation to continue to process the data or where data may be exempt from disclosure.

You can submit a request to exercise your privacy rights to privacy@lawtificialintegrity.ai. In order to respond to your request, we will need to verify your identity. The Personal Data that we use to verify your identity will be used by us for the sole purpose of identity verification.

DATA RETENTION

We retain the Personal Data of our customers, or subscribers to our Courses, for at least six years from the date of our last interaction with that customer and in compliance with our obligations under the EU General Data Protection Regulation or similar legislation around the world, or for longer as we are required to do so according to our legal and/or regulatory obligations. We may then destroy such files without further notice or liability.

We retain the Personal Data of Site visitors for at least three years from the date of our last interaction with such visitor and in compliance with our obligations under the EU General Data Protection Regulation or similar legislation around the world, or for longer if we are required to do so according to our legal and/or regulatory obligations.

YOUR RESPONSIBILITY TOWARDS YOUR LOGIN CREDENTIALS

To maintain the security of your Personal Data, it’s important that you take an active role in safeguarding your account credentials. Below are some essential guidelines to help you keep your account secure:

The protection of your account information significantly depends on your actions.
If you have been assigned or created a username and password to access our services, it is your responsibility to keep them private and secure.
Never share your password with anyone.
After accessing sections of our Site that require login credentials, always remember to log out.
As a safety measure, completely close your web browser once you log out, and reopen it before browsing other parts of the internet.

OUR SECURITY MEASURES

To prevent unauthorized access, safeguard data accuracy, and maintain the appropriate use of information, we have put in place appropriate physical, technical, and administrative procedures to protect the Personal Data you submit. We make every effort to ensure the integrity and security of our network and systems. Unfortunately, the transmission of information via the internet is not completely secure. As new technology evolves and emerges, we cannot guarantee that our security measures will prevent third-party interferences from illegally obtaining or tampering with your Personal Data transmitted to our website. Any transmission of Personal Data, therefore, is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site, including the illegal acts of third parties (such as criminal hacking).

INTERNATIONAL DATA TRANSFERS

We provide Services to customers globally. Accordingly, we may need to transfer your Personal Data to locations outside the jurisdiction in which you provide it. If you are based within the United Kingdom (UK) or the European Economic Area (EEA), please note that where necessary to deliver the Services we will transfer Personal Data to countries outside the UK and the EEA.

Whenever we transfer your personal data out of the UK and EEA, we ensure a similar degree of protection is afforded to it by implementing at least one of the following appropriate safeguards:

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for processing of personal data pursuant to adequacy regulations made in accordance with applicable data protection laws.
We enter into agreements with service providers in the form of Standard Contractual Clauses approved in accordance with applicable data protection laws and which give personal data the same protection it has in the UK and EEA.

HOW TO CONTACT US

If you have any questions about this Privacy Policy, how we handle your personal data, or wish to exercise your rights set out in this Privacy Policy, please contact us by sending an email to: privacy@lawtificialintegrity.ai.

CONTACT THE APPROPRIATE AUTHORITY

Should you wish to report a complaint or if you feel that we have not addressed your concern in a satisfactory manner, you have the right to contact a regulatory body or data protection authority in relation to your complaint.

The Information Commissioner’s Office (ICO) in the UK is located at:
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Last Updated: January 2026