Legal

Privacy Policy

Last updated: August 2026

1. Who we are

This notice explains how Juris Labs Ltd ("Juris Labs", "we", "our", "us") collects and uses personal data when you visit jurislabs.ai, download our research, or get in touch.

For the purposes of the UK GDPR and the Data Protection Act 2018, Juris Labs Ltd is the data controller for the personal data described in this notice.

Registered name: Juris Labs Ltd

Company number: 17162059 (registered in England and Wales)

Registered office: 2 Lakeview Stables, St. Clere, Sevenoaks, TN15 6NL, United Kingdom

Data protection contact: legal@jurislabs.ai

ICO registration: ZC212939

We are not required to appoint a Data Protection Officer. Our data protection contact above is responsible for privacy matters and will handle any request or complaint.

2. The short version

  • We collect contact details only when you give them to us — a whitepaper download, the contact form, or a demo request.
  • We do not sell personal data, and we do not buy contact lists.
  • We use analytics cookies only if you accept them. Declining costs you nothing.
  • We only send marketing if you tick the optional box asking for it, and you can stop it at any time.
  • You can ask us for a copy of your data, or ask us to delete it, by emailing legal@jurislabs.ai.

3. What personal data we collect

We collect the following, depending on how you interact with us:

  • Details you give us in a form: first and last name, work email address, phone number, company name, job role, and industry. Our forms accept business email addresses only; we do not knowingly collect personal email addresses.
  • The content of your message: anything you choose to write in the contact form or in an email to us.
  • Whitepaper activity: which document you requested and when.
  • Technical and usage data: IP address, browser type, device type, approximate location derived from IP, pages viewed, and referring page. Detailed analytics of this kind are collected only where you have accepted analytics cookies.
  • Server logs: our hosting provider records request metadata, including IP address, for security and troubleshooting.

We do not collect special category data (such as health, ethnicity, political opinions or biometric data) through this website, and we ask that you do not include such information in form messages.

4. Why we use it, and our lawful basis

UK GDPR requires us to have a lawful basis for every use of personal data. Ours are set out below.

What we do Data used Lawful basis
Send you the whitepaper you asked for Name, work email, document requested Legitimate interests — delivering the document you requested. Without this we cannot fulfil your request.
Reply to your enquiry or demo request Name, work email, phone, company, role, message Legitimate interests, and steps prior to entering a contract where you are asking about buying our product.
Keep a record of who has requested our research, so our team knows who they are speaking to Name, work email, company, role, industry, document requested Legitimate interests — running and developing a business-to-business software company. We have assessed that this is not overridden by your interests, because the data is limited to professional contact details in a business context.
Send you marketing emails about Juris Labs Name, work email, company Consent — only if you tick the optional marketing box. You can withdraw at any time.
Save your details in your browser so forms prefill next time Name, work email, phone, company, role, industry Consent — the required checkbox on the download form. Stored on your device only. See section 9.
Measure how the site is used and improve it IP address, pages viewed, device and browser data Consent for analytics cookies under PECR; legitimate interests in understanding and improving our website.
Keep the site secure and diagnose faults IP address, request logs Legitimate interests — protecting our service and our users.
Meet our legal and regulatory obligations Whatever is relevant to the obligation Legal obligation, and legitimate interests in establishing or defending legal claims.

Where we rely on legitimate interests, you have the right to object — see section 12. You can ask us for our legitimate interests assessment by emailing legal@jurislabs.ai.

5. How long we keep it

Record Retention period
Contact record in our CRM 24 months from your last interaction with us, then deleted or anonymised
Whitepaper download records 24 months from download
Contact form messages and email correspondence 24 months from the end of the conversation
Marketing consent records For as long as you are subscribed, plus 24 months as proof of consent
Google Analytics data 14 months
Email delivery logs held by our email provider Approximately 30 days
Web server and security logs Approximately 30 days
Form prefill data stored in your own browser 90 days, then automatically discarded (see section 9)

We may keep data for longer where we need to in order to establish, exercise or defend a legal claim, or where the law requires it.

6. Who we share it with

We do not sell personal data. We share it with the service providers below, who process it on our instructions under a written contract that meets Article 28 UK GDPR.

Provider What they do for us Where
Vercel Inc. Website hosting, form processing, privacy-friendly traffic measurement USA / global edge
HubSpot, Inc. Customer relationship management EU data centre, US parent
Resend Sending transactional email, such as your download link Ireland
Cloudflare, Inc. Private storage of whitepaper PDFs USA / global
Google (Analytics) Website analytics — only if you accept analytics cookies USA / EU
Google Workspace Our business email USA / EU
Calendly LLC Booking calls, if you use the booking page USA

We may also disclose personal data:

  • to our professional advisers, such as lawyers and accountants, where they need it to advise us;
  • where we are required to by law, court order, or a regulator; and
  • to a buyer or successor if we sell or reorganise our business, in which case this notice will continue to apply.

7. Sending data outside the UK

Some of our providers are based in, or store data in, the United States. When personal data leaves the UK, we make sure it stays protected by relying on one of the following safeguards:

  • the recipient country has UK adequacy regulations in place;
  • for US recipients, certification under the UK Extension to the EU–US Data Privacy Framework; or
  • the ICO's International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, supported by a transfer risk assessment.

You can ask us which safeguard applies to a particular provider, and request a copy of the relevant clauses, by emailing legal@jurislabs.ai.

8. Cookies and similar technologies

Cookies are small files stored on your device. Similar technologies include local storage. We use them as follows.

Type Purpose Consent needed?
Your cookie choice Remembers whether you accepted or declined, so we stop asking No — strictly necessary
Form prefill storage Saves your details on your device so downloads prefill (section 9) Yes — the checkbox on the form
Google Analytics Tells us which pages are read and how people arrive Yes — the cookie banner
Vercel Analytics and Speed Insights Aggregate page performance. Sets no cookies and does not identify you No

Google Analytics does not load until you press Accept. If you decline, or simply ignore the banner, no analytics cookies are set. Declining does not reduce your access to any part of this site.

To change your mind later, clear this site's data in your browser settings and the banner will appear again on your next visit. You can also block or delete cookies through your browser's own settings, though some parts of the site may then behave unexpectedly.

9. Prefill storage on your device

When you download a whitepaper, we offer to save your submission locally in your browser so you don't have to re-enter it next time. This storage lives entirely on your device — it is never transmitted to our servers or any third party. Expand below for the full technical disclosure.

Show technical details of what is stored, where, and for how long

With your consent — the required checkbox on our whitepaper download form — we store the following fields in your browser's localStorage:

  • First name and last name
  • Work email address
  • Phone number
  • Company name
  • Role (e.g., Chief Compliance Officer)
  • Industry

The data is stored under the key juris.whitepaper.lead.v1 along with a timestamp, and is retained for up to 90 days. After 90 days the entry is automatically discarded by the site on your next visit.

This data never leaves your browser unless you submit the form again. It is used solely to pre-populate the fields on future whitepaper downloads, so you don't need to re-type the same information. We do not read this data for analytics, advertising, or any other purpose.

You can remove it at any time by:

  • Clicking “Not you? Clear” on the whitepaper download form
  • Clearing your browser's site data for this domain
  • Opening your browser's developer tools → Application → Local Storage and deleting the juris.whitepaper.lead.v1 entry

10. Marketing

We only send marketing email to people who have asked for it. Downloading a whitepaper or sending us a message does not on its own sign you up — there is a separate, optional box you must tick.

Every marketing email we send identifies us and carries a one-click unsubscribe link. You can also opt out at any time by emailing legal@jurislabs.ai. We will action it without delay and without asking why.

Opting out of marketing does not stop us replying to a question you have asked us, or sending you a document you have requested.

11. Automated decision-making

This website does not make decisions about you by automated means that produce legal effects or similarly significantly affect you. We do not carry out profiling of website visitors beyond the aggregate analytics described in section 8. Where Juris Labs provides its platform to a client organisation, that client is the controller for the data processed in it, and their own privacy notice will apply.

12. Your rights

Under UK data protection law you have the right to:

  • Be informed about how we use your data — this notice.
  • Access a copy of the personal data we hold about you.
  • Rectification of data that is inaccurate or incomplete.
  • Erasure of your data in certain circumstances.
  • Restrict how we use your data while a concern is resolved.
  • Object to processing based on legitimate interests. Where you object to direct marketing, we must stop — there is no balancing test and no exception.
  • Data portability — receive data you gave us in a machine-readable format.
  • Withdraw consent at any time, where we rely on consent. This does not affect processing carried out before you withdrew.

To exercise any of these, email legal@jurislabs.ai. We will respond within one month. There is no charge. We may ask you to confirm your identity before we act, so that we do not disclose your data to someone else.

13. How to complain

If you are unhappy with how we have handled your personal data, please tell us — we would rather hear it directly and put it right.

Our complaints procedure

  1. Email legal@jurislabs.ai with the subject line "Data protection complaint", or write to us at the registered office in section 1. Please tell us what happened and what you would like us to do.
  2. We will acknowledge your complaint within 30 days of receiving it.
  3. We will investigate and give you a substantive response, normally within one month of acknowledgement. If it is complex and we need longer, we will tell you why and give you a date.
  4. If you are still unhappy, you can escalate to the Information Commissioner's Office.

You do not have to complain to us first. You can go straight to the Information Commissioner's Office, the UK's independent data protection regulator, at any time:

Website: ico.org.uk/make-a-complaint

Helpline: 0303 123 1113

Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

14. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit and at rest, access control on a least-privilege basis, private storage for gated documents accessible only through short-lived signed links, and secrets held outside our source code. No system is perfectly secure, but if a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will report it to the ICO within 72 hours and tell you directly where the law requires it.

15. Other websites

Our site links to other websites, and our booking page embeds a third-party scheduling tool. We are not responsible for their privacy practices. Please read their own privacy notices before giving them your data.

16. Children

This website is aimed at business professionals and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us their data, email legal@jurislabs.ai and we will delete it.

17. Changes to this notice

We may update this notice from time to time. The "Last updated" date at the top shows when it last changed. If we make a change that materially affects how we use your data, we will take reasonable steps to tell you.

18. Contact us

For any question about this notice or your personal data:

Email: legal@jurislabs.ai
Post: Juris Labs Ltd, 2 Lakeview Stables, St. Clere, Sevenoaks, TN15 6NL, United Kingdom