Privacy Policy

Who we are

Consent-Order.com is operated by ExD Legal Services Ltd, 86–90 Paul Street, London, EC2A 4NE. ExD Legal Services Ltd is the controller of the personal data described in this policy. You can contact us about your data at support@exdlegalservices.co.uk.

How we use your personal data

We process personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. We may process the following categories of data:

• Usage data: Information about how you use our website, such as pages viewed, referral source, browser and device type. We use this to monitor and improve our website. Legal basis: our legitimate interests.
• Service data: The personal and financial information you provide in your online questionnaire and supporting documents. We use this to prepare your documents, provide your service and communicate with you. Legal basis: performance of our contract with you.
• Transaction data: Details of the services you purchase and your payment status. We use this to supply your service, process refunds and keep proper records. Legal basis: performance of a contract and our legal obligations.
• Message data: The content of emails and other messages you send us. We use this to respond to you and keep records. Legal basis: our legitimate interests in communicating with customers and prospective customers.

We may also process any of your personal data where necessary to establish, exercise or defend legal claims, to comply with a legal obligation, or to protect your vital interests or those of another person.

Sharing your personal data

Payments are handled by our payment provider, Stripe. We share transaction data with Stripe only as needed to process payments and refunds and to deal with related queries. We do not see or store your full card details. Stripe's privacy policy is available at stripe.com/gb/privacy.

Where you choose our Fully Managed upgrade, we share the information needed for your application with the court (HMCTS) on your behalf.

We may share personal data with our insurers and professional advisers where reasonably necessary, and where required to comply with a legal obligation. We do not sell your personal data.

International transfers

Some of our service providers may store or process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as approved standard data protection clauses.

How long we keep your data

We keep personal data only for as long as necessary, and then delete or anonymise it:

• Usage data: up to 30 months from collection.
• Service data: for as long as your service is active and up to 7 years after the end of the year in which it ends.
• Transaction data: up to 7 years after the end of the year in which the transaction took place.
• Message data: up to 7 years after the end of the year in which the message was sent.

We may keep data for longer where needed to comply with a legal obligation.

Your rights

Under data protection law, your rights include:

• The right to access your personal data
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to object to processing
• The right to data portability
• The right to withdraw consent, where processing is based on consent
• The right to complain to the Information Commissioner’s Office (ICO)

To exercise any of these rights, or to ask us to correct or update your information, email support@exdlegalservices.co.uk. If you are unhappy with how we handle your data, you can complain to the ICO at ico.org.uk.

Cookies

For information about cookies and similar technologies, please read our Cookie Policy.

Third-party websites

Our website includes links to third-party websites. We are not responsible for their privacy policies or practices.

Changes to this policy

We may update this policy by publishing a new version on this page, and may notify you of significant changes by email.