audlex.co.uk/privacy

Privacy Policy

Version 4.0 · 3 November 2026 · AudLex

1. Who We Are

The data controller is Oscar Gregory Nyoni, trading as AudLex, Manchester, United Kingdom. Contact: audlex.co.uk/contact

2. What Information We Collect

Information you provide directly: your name, email address, immigration history, nationality, family circumstances, housing and employment situation, documents you share, and the content of your conversations with Vera, AudLex's AI legal assistant.

Images shared in chat: if you choose to share an image with Vera during a conversation, such as a photograph or screenshot of a letter, form, or document, Vera will tell you at the time that it is used only to inform her response to that message. It is not stored by AudLex, and is not retained in the conversation once she has replied, so it does not carry forward to later messages or to any future conversation.

Information collected automatically: IP address, browser type, operating system, pages visited, and time spent on the platform.

Special category data: some information we collect — nationality, ethnic origin, immigration status, health information where relevant — is classified as special category data under UK GDPR. We only collect this where necessary to provide the guidance service, and we obtain your explicit consent before processing it.

Email requests within chat: if you ask Vera to email you a copy of your assessment summary, or to email a payment link for one of AudLex's private ancillary services, we collect the email address you provide for that specific request only, once you have confirmed it is correct.

Information you submit through our website forms: the enquiry form (your name, email address, the type of enquiry, a short subject, whether it is urgent, and whether you would like a callback); the speaking enquiry form; the newsletter sign-up (your email address); and the testimonial form (your name, email address, the service that helped you, your own words, how you would like your name to appear, where you are happy for your words to be used, and a record of your consent). Please do not put details of your immigration case in a form. Use Vera, or tell us when we reply.

Messages and voice notes you send us on WhatsApp: our WhatsApp Business account receives your phone number, your name if it is shown, the content of your messages, and, if you send a voice note, the recording. If you send a voice note to share your experience, we turn it into text and send the text back to you to approve. Please do not describe the details of your immigration case in a WhatsApp message or voice note.

3. Why We Use Your Information

We use your information to provide the guidance service (lawful basis: performance of contract), process payments, respond to enquiries and callback requests submitted through our forms and to messages sent to our WhatsApp Business account, send the Growth and Justice newsletter if you have subscribed (lawful basis: consent), keep and publish a testimonial only where you have given your consent (lawful basis: consent, and you may withdraw it at any time), maintain platform security, and comply with legal obligations.

4. Who We Share Your Information With

We do not sell your personal data. We share your data only with service providers acting on our behalf:

Anthropic (Claude API) — AI processing for the chat guidance service, including any image you choose to share with Vera during a conversation, for the single response it informs. Formspree — delivery of our enquiry, speaking and testimonial forms to us. Google reCAPTCHA — spam protection on the website; Google's Privacy Policy and Terms of Service apply. WhatsApp (Meta) — messaging through our WhatsApp Business account. Messages sent through the WhatsApp Business app are end-to-end encrypted, but WhatsApp also processes information such as your phone number and when you message, and its own privacy policy applies. Brevo — newsletter distribution (if subscribed), and transactional email delivery when you ask Vera to email you an assessment summary or an ancillary service payment link. Calendly — appointment booking. Stripe — payment processing. Netlify — website hosting. Cloudflare — privacy-friendly, cookie-less website analytics; no personal data is collected. We share your information with third parties only with your explicit consent, or where required by law.

5. How Long We Keep Your Information

Case records and documents: 6 years from case conclusion. Enquiry and speaking form submissions: 2 years. Testimonial submissions that are published: for as long as they are published or until you withdraw your consent, together with the written record of your consent. Testimonial submissions that are not published: deleted within 6 months of receipt. Voice notes sent to share your experience: deleted once you have approved or declined the text we send back, and in any event within 30 days. Other WhatsApp messages: kept for as long as needed to deal with your message, and no longer than 2 years. Newsletter subscriber data: until you unsubscribe. Payment records: 7 years (HMRC requirement). Chat conversation logs: 6 months unless linked to a case record. Email addresses provided for an assessment summary or ancillary service payment link: held only within Brevo's transactional email log, not stored elsewhere on the platform; retention is governed by Brevo's own transactional log settings, not independently by AudLex. Images shared in chat are treated differently from the rest of the conversation: they are used only to generate the response to the message they were shared with, and are not retained afterward, whether by AudLex or within the ongoing conversation history, so the 6-month chat log retention above does not apply to them.

6. Your Rights

Under UK GDPR, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to withdraw consent at any time. If you have given us a testimonial, whether through our form or by voice note, you can withdraw your consent at any time and we will stop using your words and remove them from our website and our own channels. Copies that other people have already shared are outside our control. To exercise any of these rights, contact us through audlex.co.uk/contact. We will respond within 30 days. You have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.

7. Security

All data transmitted between your device and the AudLex platform is encrypted using HTTPS. Personal data is encrypted at rest. Access to case data is restricted to Oscar Gregory Nyoni. The AI chat assistant is accessed through a secure server-side proxy — your conversation data is not exposed in the website's public code.

8. Cookies

The AudLex website uses essential cookies only, to maintain your session and support platform security. We do not use analytics cookies, advertising cookies, or any tracking technology that requires your consent. Website analytics are provided by Cloudflare Web Analytics, which is cookie-less by design: it collects no personal data, sets no cookies, and stores no IP addresses. Because no non-essential cookies are used, no cookie consent banner is shown on this site.

9. Children's Data

AudLex's services are intended for adults aged 18 and over. In immigration matters involving children — EU Settlement Scheme, family route, asylum claims — a parent or guardian may provide information about their minor children. This is handled with the same care as all personal data.

10. Contact

For any questions about this Privacy Policy or to exercise your data rights: audlex.co.uk/contact · Information Commissioner's Office: ico.org.uk · 0303 123 1113

Privacy Policy · Version 4.0 · 3 November 2026 · Supersedes Version 3.0 (1 November 2026) · AudLex · See also: AI Use & Accountability Statement · Terms of Service