Privacy Notice

Last updated: September 2026

1. Data Controller

Law by Equivalent Means is the data controller for the personal data collected through this service, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We collect the following personal data:

  • Full name and email address (at registration)
  • Payment information (processed securely by our payment provider)
  • Access logs and usage data

3. How We Use Your Data

Your data is used to:

  • Provide and manage your access to the toolkit
  • Process payments
  • Apply watermarks to protect intellectual property
  • Send service-related communications

4. Legal Basis

We process your data on the basis of contractual necessity (to provide the service you have purchased) and legitimate interests (to protect our intellectual property and prevent unauthorised distribution).

5. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter for legal and business purposes. Payment records are retained as required by law.

6. Your Rights

Under the UK GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure of your data
  • Object to processing
  • Data portability

7. Security

We take appropriate technical and organisational measures to protect your personal data, including encrypted storage, secure authentication, and access controls.

8. Cookies

We use essential cookies required for authentication and session management. No third-party tracking cookies are used.