Privacy policy

Who is responsible for your data

ClaimGavel is operated by Costart Projects Ltd (company number 14812412), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are the "controller" of the personal data described in this policy, and we are registered with the Information Commissioner's Office (ICO) under reference ZB861504.

For any privacy question, or to exercise your rights, contact us at privacy@claimgavel.com.

The personal data we collect

• Assessment information — the description of what happened that you enter, the approximate date, and the jurisdiction. This may include sensitive information (for example about your health, employment or finances) depending on what you choose to tell us.
• Contact details — if you ask to be connected with a solicitor, your name, email address and phone number, and your consent to be contacted.
• Account information — if you create an account, your email address. We use one-time email codes to sign you in rather than passwords.
• Solicitor and partner accounts — for firms that work with us: contact name, firm details, and billing information needed to run the partnership.
• Technical data — your approximate location (country and region) derived from your IP address, and basic technical information your browser sends, such as device and browser type. We use only strictly necessary cookies and do not track you for analytics or advertising — see our cookie policy.

How and why we use your data

We use your personal data on the following legal bases:

• To produce your assessment — on the basis of your consent and our legitimate interest in operating the service you have requested.
• To connect you with a solicitor — on the basis of your explicit consent, given when you ask to be contacted.
• To operate accounts and partnerships — to perform a contract with you, or to take steps at your request before entering one.
• To improve, secure and maintain the service — on the basis of our legitimate interests, balanced against your rights.
• To meet legal obligations — for example accounting, fraud prevention, and responding to lawful requests.

AI processing of your description

Your assessment is generated with the help of a third-party AI provider (currently the Google Gemini API). The description you enter is sent to that provider to produce your result. Because of this, please do not include more personal or sensitive detail than is necessary to describe your situation.

Sensitive information

Legal claims often reveal special category data, such as information about your health. Where you provide such information, we process it on the basis of your explicit consent, and/or because it is necessary for the establishment, exercise or defence of legal claims.

Who we share your data with

• Independent solicitors and law firms — when you ask to be connected, we share the relevant details with a solicitor so they can contact you. That firm is an independent controller of your data and handles it under its own privacy policy.
• Service providers (processors) — we use trusted providers to run ClaimGavel, including our AI provider (Google), hosting and infrastructure, email delivery, and payment processing for partner firms (Stripe). They may only use your data on our instructions.
• Authorities and advisers — where we are required to by law, or to protect our rights.

We do not sell your personal data, and we do not share it with solicitors unless you ask us to.

International transfers

Some of our providers process data outside the UK. Where that happens, we rely on appropriate safeguards, such as a UK adequacy decision or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.

How long we keep it

We keep personal data only as long as we need it for the purposes above, including any period required to meet legal, accounting or reporting obligations, after which it is deleted or anonymised. If you ask us to delete your data, we will do so unless we are required to keep it.

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to certain processing;
• data portability;
• and to withdraw any consent at any time, without affecting processing already carried out.

To exercise any of these, email privacy@claimgavel.com. You also have the right to complain to the ICO, the UK supervisory authority, at ico.org.uk, though we would welcome the chance to resolve your concern first.

Cookies and security

We use only strictly necessary cookies, with no tracking or analytics — see our cookie policy. We take appropriate technical and organisational measures to protect your data, though no method of transmission or storage is completely secure.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last reviewed. Material changes will be reflected here.