Privacy Policy

1. Who We Are

247AI Ltd ("247AI", "we", "us", or "our") provides AI-powered client acquisition and operational systems to law firms and professional service providers. We are registered in England & Wales and operate from the United Kingdom.

For the purposes of UK data protection law, 247AI acts as a Data Controller for the personal data we collect through this website and as a Data Processor for personal data we handle on behalf of our law firm clients.

2. Data We Collect

Through this website and our services, we may collect:

• Contact information — your name, email address, phone number, and law firm details when you book an audit or contact us.
• Usage data — information about how you interact with our website, including pages visited and referral sources.
• Technical data — IP address, browser type, device information, and cookie data as described in our Cookie Policy.

We do not collect special category data through this website. Our law firm clients are responsible for their own data collection practices and privacy notices.

3. How We Use Your Data

We process personal data on the following lawful bases:

• Consent — when you voluntarily provide your details to book an audit or receive communications.
• Legitimate interest — to respond to enquiries, improve our website and services, and protect our business interests.
• Contractual necessity — to provide services to our law firm clients.

4. Data Sharing

We do not sell personal data. We may share data with:

• Service providers who help us operate our website and business (hosting, analytics, communications).
• Professional advisers where necessary for legal or regulatory purposes.
• Law enforcement or regulatory bodies where required by law.

Where data is transferred outside the UK, we ensure adequate safeguards are in place in accordance with UK data protection law.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry data is retained for up to 24 months after your last interaction unless you request earlier deletion. Contractual data is retained for the duration of the client relationship plus the applicable statutory limitation period.

6. Your Rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data where applicable.
• Object to or restrict certain processing.
• Data portability where technically feasible.
• Withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us at the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Our systems are designed with privacy by design and default principles. For law firm clients, data is encrypted in transit and at rest, with strict access controls, audit logging, and tenant isolation.

8. Contact

For privacy-related enquiries or to exercise your rights:

Email: privacy@247ai.business

Data Controller: 247AI Ltd, registered in England & Wales.

We aim to respond to all privacy requests within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated prominently. The latest version will always be available on this page.