Privacy notice

We collect information needed for booking, payment, video conference, and e-signature (identity, contact details, PDFs, audit logs). Documents are stored privately and accessed via signed URLs. Completed cases are retained 90 days; rejected/cancelled/expired cases 30 days, then anonymized (unless legal hold). Providers: Stripe, Google Meet/Calendar, Sign.com, optional email service. For access requests or privacy incidents, contact the team via the commissioner incident register.