Legal
Last updated: March 2026 | Version 2.0
This website is operated by ImBrand Ltd, a company registered in England and Wales, trading as Lexl. Lexl is an AI-first strategic legal consultancy and compliant technology advisory firm. We are registered with the Information Commissioner's Office (ICO) and comply fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We collect the following categories of personal data:
When you contact us, book a Strategy Session, submit an enquiry form, or engage our services, we may collect:
We do not collect any special category data (e.g., health, ethnicity, political opinions).
| Purpose | Lawful Basis (UK GDPR) |
|---|---|
| To respond to your enquiry or contact form submission | Legitimate interests (Article 6(1)(f)) |
| To provide our consultancy services to you | Performance of a contract (Article 6(1)(b)) |
| To send you information you have requested | Consent (Article 6(1)(a)) |
| To send marketing communications (where you have opted in) | Consent (Article 6(1)(a)) |
| To improve our website and services | Legitimate interests (Article 6(1)(f)) |
| To comply with legal obligations | Legal obligation (Article 6(1)(c)) |
| To protect our legal rights | Legitimate interests (Article 6(1)(f)) |
We will never sell your personal data to third parties. We will never use your data for purposes incompatible with those listed above without informing you first.
We do not sell your personal data. We share data only with the following categories of service providers, and only where necessary with appropriate safeguards:
| Provider | Purpose | Location |
|---|---|---|
| Google Workspace | Document storage, email | USA (adequacy safeguards) |
| Brevo (Sendinblue) | Email marketing and transactional emails | EU/France (UK adequate) |
| Notion | Project management and internal operations | USA (SCCs) |
| n8n Cloud | Workflow automation | Germany (EU adequate) |
We require all third-party processors to comply with UK GDPR and to process your data only on our documented instructions. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including UK adequacy decisions and standard contractual clauses approved by the ICO.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
| Data Type | Retention Period |
|---|---|
| Enquiry form submissions | 12 months from last contact |
| Client engagement records | 6 years from end of engagement (legal requirement) |
| Marketing consent records | Until consent is withdrawn |
| Website analytics data | 26 months (anonymised) |
| Financial records | 6 years (HMRC requirement) |
After the retention period expires, your data is securely deleted or anonymised.
Under UK GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month, as required by UK GDPR.
Lexl uses artificial intelligence models as part of its service delivery and internal operations. All AI-generated outputs are reviewed through our internal quality assurance process (the Maker/Checker Protocol) before being delivered to clients. AI models receive only the minimum data necessary to perform the requested task, and client data is anonymised wherever possible.
We do not use AI to make automated decisions that produce legal effects concerning you without human oversight.
Cookies are small text files placed on your device when you visit our website. They help the website function correctly and can provide information to the website owner.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| Session cookie | Strictly necessary | Maintains your session while browsing | Session |
| Analytics (anonymised) | Performance | Helps us understand how visitors use our site | 26 months |
We do not use advertising or retargeting cookies, third-party tracking cookies, or social media tracking pixels.
You can control cookies through your browser settings. Disabling strictly necessary cookies may affect website functionality. For more information on managing cookies, visit aboutcookies.org.
Our website may contain links to external websites. We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policy of every website you visit.
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.
If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.
If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:
This privacy policy was drafted by Lexl in accordance with UK GDPR and the Data Protection Act 2018. It is reviewed quarterly and updated as required.