Privacy Policy

1. Who We Are

LawBoard is operated by LawBoard Ltd. Our contact email is hello@lawboard.co.uk. For the purposes of UK data protection law, LawBoard Ltd is the data controller for personal data collected through LawBoard.

2. What We Collect

Candidates: name, email address, professional details (job title, employer, qualifications, PQE, practice areas), career preferences (salary expectations, working pattern, location preferences), employment history, education, CV uploads, and visibility/privacy settings.

Firms: firm name (from SRA register), contact details, claimant name and email, role at firm, and any branding content uploaded after claiming.

Recruiters: company name, contact name, email, phone, specialisms, and subscription details.

All users: IP address, browser type, pages visited, and cookies (see our Cookie Policy).

Email captures: email address, source (salary estimator, landing page, etc.), and estimator inputs where applicable.

3. How We Use Your Data

To provide the LawBoard service: displaying your profile to firms or recruiters based on your visibility settings, processing profile sends, enabling firm claims, and delivering salary estimates.

To communicate with you: account confirmations, password resets, profile completion notifications, firm response notifications, and (where you have opted in) career updates and opportunity alerts.

To improve the platform: aggregated, anonymised usage data to understand how the platform is used and identify improvements.

To prevent misuse: detecting and preventing fraudulent or abusive behaviour.

4. Legal Basis for Processing

Contract: processing necessary to provide the LawBoard service you have signed up for.

Consent: marketing emails and recruiter contact preferences, which you can withdraw at any time.

Legitimate interests: platform security, fraud prevention, and service improvement.

5. Who We Share Data With

Firms: only the data you choose to share, based on your visibility settings and profile send actions. Free tier firms see anonymised data only. Paid tier firms see full details only where you have opted in.

Protected firms: firms on your protected list will never receive any of your data, anonymised or otherwise.

Recruiters: only if you have explicitly opted in to recruiter contact.

Service providers: Supabase (database hosting), Vercel (website hosting), Brevo (transactional email). These providers process data on our behalf under appropriate agreements.

We do not sell your personal data to any third party. We do not share your data with advertisers.

6. Data Retention

Your data is retained for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days. Anonymised, aggregated data may be retained for analytics purposes.

Email captures from non-registered users are retained for 12 months, after which they are deleted unless the user has created an account.

7. Your Rights

Under UK GDPR, you have the right to access your personal data, rectify inaccurate data, erase your data (“right to be forgotten”), restrict processing, data portability, object to processing, and withdraw consent at any time.

To exercise any of these rights, email hello@lawboard.co.uk. We will respond within 30 days.

You can also delete your account and all associated data at any time through Settings in your candidate or firm dashboard.

8. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), row-level database security, hashed passwords, and access controls. CV uploads are stored in private, access-controlled storage.

9. International Transfers

Your data is stored on servers within the EEA (Supabase and Vercel infrastructure). Where data is processed outside the EEA, appropriate safeguards are in place.

10. Children

LawBoard is not intended for use by anyone under 18 years of age. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be notified by email to registered users.

12. Contact

For privacy questions or to exercise your data rights, email hello@lawboard.co.uk.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.