Privacy Policy

Last updated: 26 October 2025

1. Introduction

DEER TREE LTD (Company Number: 15035899) ("we", "our", or "us") operates antlaw.ai (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Data Controller

DEER TREE LTD is the data controller responsible for your personal data. Our contact details are:

  • ā€¢ Address: 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF
  • ā€¢ Email: [email protected]
  • ā€¢ Phone: 020 4553 8879

3. Information We Collect

3.1 Personal Information

When you register for an account or use our Service, we may collect:

  • Name and contact details (email address, phone number)
  • Account credentials (username, password)
  • Profile information (qualification status, study preferences)
  • Payment information (processed securely through Stripe; we do not store card details)
  • Communication data (messages sent through our platform, support enquiries)

3.2 Usage Data

We automatically collect information about how you interact with our Service:

  • Study progress and performance data (questions attempted, scores, time spent)
  • Device information (IP address, browser type, operating system)
  • Log data (access times, pages viewed, clickstream data)
  • Cookies and similar tracking technologies (see our Cookie Policy)

3.3 Information from Third Parties

If you choose to sign in using Google or Apple OAuth, we receive basic profile information (name, email address) from these providers in accordance with their privacy policies.

4. How We Use Your Information

We process your personal data for the following purposes and on the following legal bases:

4.1 Contract Performance

  • To provide and maintain our Service
  • To manage your account and subscriptions
  • To process payments and prevent fraud
  • To provide customer support
  • To deliver the educational content and features you have purchased

4.2 Legitimate Interests

  • To improve and personalise your learning experience
  • To analyse usage patterns and enhance our Service
  • To send service-related communications and updates
  • To detect, prevent, and address technical issues and security threats
  • To enforce our Terms of Service

4.3 Legal Obligations

  • To comply with applicable laws and regulations
  • To respond to lawful requests from public authorities

4.4 Consent

  • To send marketing communications (you may opt out at any time)
  • To use cookies and similar technologies (see our Cookie Policy)

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

5.1 Service Providers

We engage trusted third parties to support our Service:

  • Stripe: Payment processing
  • SendGrid: Email delivery
  • Twilio: SMS verification and notifications
  • Alibaba Cloud: Infrastructure and database hosting
  • Qwen (Dashscope): AI-powered study assistance
  • Google Analytics: Website analytics
  • Intercom: Customer support and communication

These providers are contractually bound to process your data only for specified purposes and in compliance with data protection laws.

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal processes, or to protect the rights, property, or safety of our company, users, or others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred. We will notify you of any such change and the choices you may have.

6. International Data Transfers

Your information may be processed in countries outside the United Kingdom, including China (Alibaba Cloud for database hosting). Where we transfer data internationally, we ensure appropriate safeguards are in place through:

  • Standard contractual clauses approved by the UK Information Commissioner's Office
  • Adequacy decisions where applicable
  • Other legally approved transfer mechanisms

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

  • Account data: Until you request deletion or after 3 years of inactivity
  • Study progress data: For the duration of your subscription plus 12 months
  • Payment records: 7 years (UK tax law requirement)
  • Communication records: 3 years from last interaction

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

  • SSL/TLS encryption for data in transit
  • Encryption for sensitive data at rest
  • Regular security assessments and updates
  • Access controls and authentication measures
  • Regular backups and disaster recovery procedures

However, no method of transmission or storage is 100% secure. Whilst we strive to protect your personal data, we cannot guarantee absolute security.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access: Request a copy of your personal data
  • Right to rectification: Correct inaccurate or incomplete data
  • Right to erasure: Request deletion of your data (subject to legal obligations)
  • Right to restrict processing: Limit how we use your data
  • Right to data portability: Receive your data in a structured, commonly used format
  • Right to object: Object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent: Withdraw consent where processing is based on consent
  • Right to lodge a complaint: Complain to the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request.

10. Children's Privacy

Our Service is intended for individuals preparing for professional legal qualifications. We do not knowingly collect personal information from individuals under 18 years of age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

11. Marketing Communications

With your consent, we may send you marketing communications about our products, services, and events. You can opt out at any time by:

  • Clicking the "unsubscribe" link in our emails
  • Adjusting your preferences in your account settings
  • Contacting us directly at [email protected]

12. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or through a prominent notice on our Service. The "Last updated" date at the top of this policy indicates when it was last revised.

14. Contact Us and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

  • ā€¢ Email: [email protected]
  • ā€¢ Phone: 020 4553 8879
  • ā€¢ Post: DEER TREE LTD, 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters:

  • ā€¢ Website: ico.org.uk
  • ā€¢ Phone: 0303 123 1113
  • ā€¢ Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF