CourtCorrect Terms & policies
Privacy Policy
Privacy Policy
Last update at: 08.01.2025 11:30:45
CourtCorrect takes the privacy and security of your personal information very seriously. This privacy policy sets out how we, our partners and suppliers process and store your personal data. This Privacy Policy applies to all personal data processed by CourtCorrect in connection with our platform, website, products, professional services, and all other business operations. It is intended to provide transparency as required under the UK GDPR and does not create any contractual rights beyond those required by law.
This website is not intended for children, and we do not knowingly collect or process children’s personal data.
You should read this Privacy Policy together with any other privacy notice or fair processing notice we may supply in specific contexts, as those documents will apply in addition to, but not instead of, this Privacy Policy.
If you have any questions about our processing activities, including requests to exercise your legal rights, please contact us using the details be
CourtCorrect takes the privacy and security of your personal information very seriously. This privacy policy sets out how we, our partners and suppliers process and store your personal data. This Privacy Policy applies to all personal data processed by CourtCorrect in connection with our platform, website, products, professional services, and all other business operations. It is intended to provide transparency as required under the UK GDPR and does not create any contractual rights beyond those required by law.
This website is not intended for children, and we do not knowingly collect or process children’s personal data.
You should read this Privacy Policy together with any other privacy notice or fair processing notice we may supply in specific contexts, as those documents will apply in addition to, but not instead of, this Privacy Policy.
If you have any questions about our processing activities, including requests to exercise your legal rights, please contact us using the details be
Important Information and Who We Are
Purpose of This Privacy Policy
Purpose of This Privacy Policy
Purpose of This Privacy Policy
This Privacy Policy explains how CourtCorrect Ltd collects, uses, stores and protects personal data in connection with our business operations, services and digital platforms.
This Privacy Policy is provided for informational purposes only. It does not create any contractual or legal rights or obligations beyond those required under applicable data protection laws, including the UK GDPR and the Data Protection Act 2018, unless expressly incorporated into an agreement between CourtCorrect and a Customer.
This Privacy Policy should be read together with any other privacy or fair processing notices we may provide in relation to specific processing activities. Those notices supplement, and do not override, this Privacy Policy.
This Privacy Policy explains how CourtCorrect Ltd collects, uses, stores and protects personal data in connection with our business operations, services and digital platforms.
This Privacy Policy is provided for informational purposes only. It does not create any contractual or legal rights or obligations beyond those required under applicable data protection laws, including the UK GDPR and the Data Protection Act 2018, unless expressly incorporated into an agreement between CourtCorrect and a Customer.
This Privacy Policy should be read together with any other privacy or fair processing notices we may provide in relation to specific processing activities. Those notices supplement, and do not override, this Privacy Policy.
Who We Are and Our Role Under Data Protection Law
Who We Are and Our Role Under Data Protection Law
Who We Are and Our Role Under Data Protection Law
CourtCorrect Ltd is a company registered in England and Wales (company number 12117945) with its registered address at 33 Percy Street, London, W1T 2DF, United Kingdom.
Depending on the nature of the relevant processing activity, CourtCorrect may act as a Controller or a Processor. CourtCorrect will determine its role for each processing activity in accordance with the UK GDPR based on whether CourtCorrect determines the purposes and essential means of processing
CourtCorrect as Controller
CourtCorrect as Controller
CourtCorrect as Controller
CourtCorrect acts as an independent Controller when processing personal data for purposes that CourtCorrect determines, including (without limitation):
(a) operating, maintaining and securing the CourtCorrect platform;
(b) logging, monitoring and auditing system usage;
(c) analysing usage data for service improvement, diagnostics and performance
optimisation;
(d) billing, account management and customer administration;
(e) marketing, communications and product development; and
(f) complying with our legal and regulatory obligations.
When acting as Controller, CourtCorrect processes personal data for its own legitimate interests or other lawful bases, as outlined in this Privacy Policy.
CourtCorrect acts as an independent Controller when processing personal data for purposes that CourtCorrect determines, including (without limitation):
(a) operating, maintaining and securing the CourtCorrect platform;
(b) logging, monitoring and auditing system usage;
(c) analysing usage data for service improvement, diagnostics and performance
optimisation;
(d) billing, account management and customer administration;
(e) marketing, communications and product development; and
(f) complying with our legal and regulatory obligations.
When acting as Controller, CourtCorrect processes personal data for its own legitimate interests or other lawful bases, as outlined in this Privacy Policy.
CourtCorrect as Processor
CourtCorrect as Processor
CourtCorrect as Processor
CourtCorrect acts as a Processor only when processing Case Data or end-user data strictly on the documented instructions of a Customer, including:
(a) case files, documents and evidence uploaded by Customers;
(b) structured or unstructured case information;
(c) data relating to claimants, complainants or other end-users submitted through
Customer workflows; and
(d) any data processed solely to provide the services purchased by the Customer.
Where CourtCorrect acts as a Processor, the Data Processing Agreement (DPA) governs the processing, and the Customer is responsible for determining the lawful basis, issuing any notices required to its own end-users, and fulfilling its controller obligations.
CourtCorrect acts as a Processor only when processing Case Data or end-user data strictly on the documented instructions of a Customer, including:
(a) case files, documents and evidence uploaded by Customers;
(b) structured or unstructured case information;
(c) data relating to claimants, complainants or other end-users submitted through
Customer workflows; and
(d) any data processed solely to provide the services purchased by the Customer.
Where CourtCorrect acts as a Processor, the Data Processing Agreement (DPA) governs the processing, and the Customer is responsible for determining the lawful basis, issuing any notices required to its own end-users, and fulfilling its controller obligations.
CourtCorrect does not act as Joint Controller
CourtCorrect does not act as Joint Controller
CourtCorrect does not act as Joint Controller
Unless expressly agreed in writing, CourtCorrect does not act as a joint controller with any Customer and does not jointly determine the purposes of any Customer’s processing activities. This ensures that CourtCorrect does not assume shared responsibility or liability for Customer decision-making.
Contact Details
Contact Details
Contact Details
Questions about this Privacy Policy or data protection matters may be directed to Data Protection Officer, responsible for overseeing compliance with this Privacy Policy
CourtCorrect Ltd
33 Percy Street, London W1T 2DF
Data Protection Registration (ICO): ZB564422
Email: hello@courtcorrect.com
Telephone: +44 330 1332 411
You have the right to make a complaint at any time to the Information Commissioner’s Office (“ICO”), the UK supervisory authority for data protection matters (www.ico.org.uk). CourtCorrect is registered with the ICO under registration number ZB564422.
We would, however, appreciate the opportunity to address your concerns before you contact the ICO, and we encourage you to reach out to us in the first instance.
Questions about this Privacy Policy or data protection matters may be directed to Data Protection Officer, responsible for overseeing compliance with this Privacy Policy
CourtCorrect Ltd
33 Percy Street, London W1T 2DF
Data Protection Registration (ICO): ZB564422
Email: hello@courtcorrect.com
Telephone: +44 330 1332 411
You have the right to make a complaint at any time to the Information Commissioner’s Office (“ICO”), the UK supervisory authority for data protection matters (www.ico.org.uk). CourtCorrect is registered with the ICO under registration number ZB564422.
We would, however, appreciate the opportunity to address your concerns before you contact the ICO, and we encourage you to reach out to us in the first instance.
The Data We Collect About You
Personal data means any information relating to an identified or identifiable individual.
It does not include anonymous or aggregated data.
CourtCorrect collects and processes two distinct categories of personal data:
1. Customer Data – personal data relating to our direct clients, users, and prospective users.
2. End-User / Case Data – personal data uploaded by our customers relating to their own clients, claimants, or case participants. CourtCorrect processes this data strictly on behalf of the Customer, in its role as processor, unless otherwise expressly stated.
Categories of Personal Data We Collect
We may collect, use, store and transfer the following types of data:
Customer Data (CourtCorrect as Controller)
● Identity Data – first name, last name, username, job title.
● Contact Data – email address, business address, billing address, telephone
numbers.
● Organisation Data - organisation name, address, members, logos, and other
details supplied for account creation or configuration.
● Financial Data – payment card details and billing information.
● Transaction Data – details of payments and services purchased.
● Technical Data – IP address, login data, browser type, device identifiers, time
zone settings, and other technical information.
● Profile Data – login credentials, your profile picture, purchases or orders made
by you, your interests, preferences, feedback and survey responses, including the
content you interact with on CourtCorrect.
● Marketing & Communications Data – marketing preferences and communication
choices.
● Usage Data - Information about how you interact with the Platform, including
feature usage, system logs, workflow interactions, timestamps, and actions taken
within the Platform.
End-User / Case Data (CourtCorrect as Processor)
● Case Data means any information uploaded, submitted or generated on the Platform by the Customer or its users in connection with case handling. CourtCorrect does not determine the nature, accuracy, or lawfulness of Case Data, and processes it solely in accordance with the Customer’s documented instructions and the DPA.
Aggregated and Statistical Data
We also collect, use and share Aggregated Data, such as usage statistics or performance metrics.
This data does not identify any individual and is not considered personal data. Where Aggregated Data is derived from personal data and could indirectly identify an individual, we will treat it as personal data.
Special Category Data
CourtCorrect does not intentionally collect or process special category data under data protection legislation (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. If Customers upload such data as part of Case Data, they do so at their own discretion and responsibility, and CourtCorrect processes it only as a processor in accordance with the DPA.
Failure to provide personal data
If required data is not provided where it is necessary for us to perform our contract or comply with a legal obligation, we may be unable to provide the relevant services, and we will inform you if this is the case.
Personal data means any information relating to an identified or identifiable individual.
It does not include anonymous or aggregated data.
CourtCorrect collects and processes two distinct categories of personal data:
1. Customer Data – personal data relating to our direct clients, users, and prospective users.
2. End-User / Case Data – personal data uploaded by our customers relating to their own clients, claimants, or case participants. CourtCorrect processes this data strictly on behalf of the Customer, in its role as processor, unless otherwise expressly stated.
Categories of Personal Data We Collect
We may collect, use, store and transfer the following types of data:
Customer Data (CourtCorrect as Controller)
● Identity Data – first name, last name, username, job title.
● Contact Data – email address, business address, billing address, telephone
numbers.
● Organisation Data - organisation name, address, members, logos, and other
details supplied for account creation or configuration.
● Financial Data – payment card details and billing information.
● Transaction Data – details of payments and services purchased.
● Technical Data – IP address, login data, browser type, device identifiers, time
zone settings, and other technical information.
● Profile Data – login credentials, your profile picture, purchases or orders made
by you, your interests, preferences, feedback and survey responses, including the
content you interact with on CourtCorrect.
● Marketing & Communications Data – marketing preferences and communication
choices.
● Usage Data - Information about how you interact with the Platform, including
feature usage, system logs, workflow interactions, timestamps, and actions taken
within the Platform.
End-User / Case Data (CourtCorrect as Processor)
● Case Data means any information uploaded, submitted or generated on the Platform by the Customer or its users in connection with case handling. CourtCorrect does not determine the nature, accuracy, or lawfulness of Case Data, and processes it solely in accordance with the Customer’s documented instructions and the DPA.
Aggregated and Statistical Data
We also collect, use and share Aggregated Data, such as usage statistics or performance metrics.
This data does not identify any individual and is not considered personal data. Where Aggregated Data is derived from personal data and could indirectly identify an individual, we will treat it as personal data.
Special Category Data
CourtCorrect does not intentionally collect or process special category data under data protection legislation (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. If Customers upload such data as part of Case Data, they do so at their own discretion and responsibility, and CourtCorrect processes it only as a processor in accordance with the DPA.
Failure to provide personal data
If required data is not provided where it is necessary for us to perform our contract or comply with a legal obligation, we may be unable to provide the relevant services, and we will inform you if this is the case.
How Is Your Personal Data Collected
We use different methods to collect data depending on the type of data and the nature of your interaction with CourtCorrect.
Direct Interactions (Customer Data)
CourtCorrect may collect Identity, Contact, Organisation, and Financial Data directly from you when you:
(a) create an Account;
(b) complete forms on the Platform;
(c) communicate with us by email, telephone, live chat or post;
(d) request support or submit feedback; or
(e) enter into contracts or make enquiries regarding our Services.
This includes instances where your organisation registers you as a User.
Customer Uploads (Case Data)
(a) Customers and their authorised Users may upload, input, or generate Case Data on the Platform.
(b) CourtCorrect does not independently collect Case Data.
(c) All Case Data is provided exclusively by the Customer or its authorised Users.
(d) CourtCorrect processes Case Data solely on behalf of the Customer and only in accordance with the Customer’s documented instructions and the Data Processing Agreement (DPA).
Automated Data Collection
CourtCorrect may automatically collect Technical Data and Usage Data when you access or use the Platform. Such data may include:
(a) device information, log files, and IP address;
(b) browser type, operating system, plug-ins, and device identifiers;
(c) interaction data, usage statistics, and diagnostic logs.
This information is collected through cookies, analytics tools, and other technologies necessary for security, performance, fraud prevention and service optimisation.
Data Received from Third Parties and Public Sources
CourtCorrect may receive personal data from third parties, including:
(a) Identity and Contact Data from publicly accessible sources such as Companies House, data brokers or aggregators;
(b) Technical Data from analytics or hosting providers;
(c) Organisation Data supplied by the Customer during onboarding.
CourtCorrect does not purchase personal data from third-party marketers.
Support and Issue Resolution
(a) When you contact CourtCorrect for support, we may collect information necessary to diagnose and resolve your issue.
(b) Support communications may be logged for security, training, and quality assurance.
(c) CourtCorrect does not access Case Data for support purposes unless explicitly authorised by the Customer. Any such access is strictly limited, logged, and controlled.
We use different methods to collect data depending on the type of data and the nature of your interaction with CourtCorrect.
Direct Interactions (Customer Data)
CourtCorrect may collect Identity, Contact, Organisation, and Financial Data directly from you when you:
(a) create an Account;
(b) complete forms on the Platform;
(c) communicate with us by email, telephone, live chat or post;
(d) request support or submit feedback; or
(e) enter into contracts or make enquiries regarding our Services.
This includes instances where your organisation registers you as a User.
Customer Uploads (Case Data)
(a) Customers and their authorised Users may upload, input, or generate Case Data on the Platform.
(b) CourtCorrect does not independently collect Case Data.
(c) All Case Data is provided exclusively by the Customer or its authorised Users.
(d) CourtCorrect processes Case Data solely on behalf of the Customer and only in accordance with the Customer’s documented instructions and the Data Processing Agreement (DPA).
Automated Data Collection
CourtCorrect may automatically collect Technical Data and Usage Data when you access or use the Platform. Such data may include:
(a) device information, log files, and IP address;
(b) browser type, operating system, plug-ins, and device identifiers;
(c) interaction data, usage statistics, and diagnostic logs.
This information is collected through cookies, analytics tools, and other technologies necessary for security, performance, fraud prevention and service optimisation.
Data Received from Third Parties and Public Sources
CourtCorrect may receive personal data from third parties, including:
(a) Identity and Contact Data from publicly accessible sources such as Companies House, data brokers or aggregators;
(b) Technical Data from analytics or hosting providers;
(c) Organisation Data supplied by the Customer during onboarding.
CourtCorrect does not purchase personal data from third-party marketers.
Support and Issue Resolution
(a) When you contact CourtCorrect for support, we may collect information necessary to diagnose and resolve your issue.
(b) Support communications may be logged for security, training, and quality assurance.
(c) CourtCorrect does not access Case Data for support purposes unless explicitly authorised by the Customer. Any such access is strictly limited, logged, and controlled.
How We Use Your Personal Data
General Principles
CourtCorrect shall process personal data only where permitted under Article 6 of the UK GDPR and only for the purposes set out in this Privacy Policy.
Processing shall be:
(a) lawful, fair, and transparent;
(b) limited to what is necessary;
(c) subject to appropriate security measures; and
(d) consistent with CourtCorrect’s commercial and compliance obligations.
Legal Bases for Processing
CourtCorrect relies on the following legal bases when processing personal data:
a) Performance of a Contract – where processing is necessary to provide the Services, operate the Platform, manage accounts, deliver support, or fulfil obligations under the Terms of Service or Order Form.
(b) Compliance with Legal Obligations – including obligations under tax law, accounting rules, data protection laws, security requirements, and regulatory reporting.
(c) Legitimate Interests – where processing is necessary for CourtCorrect’s legitimate business purposes, provided such interests are not overridden by the rights and freedoms of the data subject. These interests include:
– service optimisation, troubleshooting, analytics and performance monitoring;
– fraud detection and network security;
– training, quality assurance and improving our Services;
– responding to legal claims or preventing misuse of the Platform.
CourtCorrect will only rely on consent where required by law (for example, for marketing communications or optional features). You may withdraw your consent at any time by contacting us; withdrawal will not affect the lawfulness of processing already carried out but may affect your ability to use optional, non-essential features of the Services.
Purposes For Which We Will Use Your Personal Data
We have set out below a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
Note that we may process your personal data on more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us via email at hello@courtcorrect.com if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.
General Principles
CourtCorrect shall process personal data only where permitted under Article 6 of the UK GDPR and only for the purposes set out in this Privacy Policy.
Processing shall be:
(a) lawful, fair, and transparent;
(b) limited to what is necessary;
(c) subject to appropriate security measures; and
(d) consistent with CourtCorrect’s commercial and compliance obligations.
Legal Bases for Processing
CourtCorrect relies on the following legal bases when processing personal data:
a) Performance of a Contract – where processing is necessary to provide the Services, operate the Platform, manage accounts, deliver support, or fulfil obligations under the Terms of Service or Order Form.
(b) Compliance with Legal Obligations – including obligations under tax law, accounting rules, data protection laws, security requirements, and regulatory reporting.
(c) Legitimate Interests – where processing is necessary for CourtCorrect’s legitimate business purposes, provided such interests are not overridden by the rights and freedoms of the data subject. These interests include:
– service optimisation, troubleshooting, analytics and performance monitoring;
– fraud detection and network security;
– training, quality assurance and improving our Services;
– responding to legal claims or preventing misuse of the Platform.
CourtCorrect will only rely on consent where required by law (for example, for marketing communications or optional features). You may withdraw your consent at any time by contacting us; withdrawal will not affect the lawfulness of processing already carried out but may affect your ability to use optional, non-essential features of the Services.
Purposes For Which We Will Use Your Personal Data
We have set out below a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
Note that we may process your personal data on more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us via email at hello@courtcorrect.com if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.
Marketing and Cookies
CourtCorrect may use your Personal Data to assess what products, features or services may be relevant or of interest to you. You may receive marketing communications from us if you have requested information or purchased services from us and have not opted out of receiving such communications.
We will obtain your express opt-in consent before sharing your personal data with any third party outside CourtCorrect for their own marketing purposes. You may opt out of receiving marketing messages from us at any time by using the unsubscribe link contained in those communications or by contacting us at hello@courtcorrect.com. Opting out of marketing will not affect service-related or operational messages necessary for the management of your account or our services.
You may configure your browser to refuse some or all cookies or to alert you when cookies are used. Please note that disabling or refusing cookies may cause parts of our website or platform to become inaccessible or function incorrectly. Further information on the cookies we use is available in our Cookie Policy.
Change Of Purposes
Where CourtCorrect intends to use personal data for a purpose materially different from that for which it was originally collected, CourtCorrect will:
(a) assess compatibility under Article 6(4) UK GDPR;
(b) update this Privacy Policy where required.
We may use your personal data for any compatible purpose, or for other purposes where permitted by law, including internal analytics, compliance, or risk management activities. CourtCorrect may continue processing where required or permitted by law without further notice or consent. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us via email at hello@courtcorrect.com
Marketing and Cookies
CourtCorrect may use your Personal Data to assess what products, features or services may be relevant or of interest to you. You may receive marketing communications from us if you have requested information or purchased services from us and have not opted out of receiving such communications.
We will obtain your express opt-in consent before sharing your personal data with any third party outside CourtCorrect for their own marketing purposes. You may opt out of receiving marketing messages from us at any time by using the unsubscribe link contained in those communications or by contacting us at hello@courtcorrect.com. Opting out of marketing will not affect service-related or operational messages necessary for the management of your account or our services.
You may configure your browser to refuse some or all cookies or to alert you when cookies are used. Please note that disabling or refusing cookies may cause parts of our website or platform to become inaccessible or function incorrectly. Further information on the cookies we use is available in our Cookie Policy.
Change Of Purposes
Where CourtCorrect intends to use personal data for a purpose materially different from that for which it was originally collected, CourtCorrect will:
(a) assess compatibility under Article 6(4) UK GDPR;
(b) update this Privacy Policy where required.
We may use your personal data for any compatible purpose, or for other purposes where permitted by law, including internal analytics, compliance, or risk management activities. CourtCorrect may continue processing where required or permitted by law without further notice or consent. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us via email at hello@courtcorrect.com
5. Disclosures Of Personal Data
5. Disclosures Of Personal Data
5. Disclosures Of Personal Data
CourtCorrect may disclose personal data only where such disclosure is necessary for the purposes set out in this Privacy Policy, required by law, or otherwise permitted under the UK GDPR. CourtCorrect ensures that any third party receiving personal data processes such data strictly in accordance with CourtCorrect’s instructions and applicable law.
CourtCorrect may disclose personal data to the following categories of recipients:
● Service Providers (Processors):
CourtCorrect may disclose personal data to third-party service providers acting as processors. These include hosting, infrastructure, analytics, security, AI tooling, and communications providers. Such processors are permitted to process personal data solely for the purposes of providing services to CourtCorrect and are bound by contractual data protection obligations.
● Professional Advisers and Authorities:
CourtCorrect may disclose personal data to professional advisers (including legal, financial, audit or insurance advisers) and to HMRC, regulatory authorities, law enforcement bodies, or other government entities where required by law or where reasonably necessary to protect CourtCorrect’s rights or comply with regulatory obligations.
● Third parties involved in corporate transactions:
CourtCorrect may disclose personal data in connection with any business sale, merger, acquisition, financing, restructuring, or similar corporate event. Any such party will be required to use personal data in a manner consistent with this Privacy Policy.
● Other CourtCorrect Users:
CourtCorrect may disclose personal data to other users only where required for the performance of services requested by you. Case Data submitted by you will not be shared with other users unless you expressly instruct or authorise us to do so. CourtCorrect requires all third-party service providers and partners who process personal data on its behalf to maintain appropriate confidentiality, security, and data protection measures. Such third parties are strictly prohibited from using personal data for their own purposes and may process personal data solely in accordance with CourtCorrect’s documented instructions and only for the specific purposes for which they have been engaged.
CourtCorrect does not sell personal data, and CourtCorrect does not share personal data with third parties for their independent commercial benefit, advertising purposes, or any form of data monetisation.
CourtCorrect may allow personal data to be accessed or processed by certain approved subprocessors located outside the United Kingdom or European Economic Area, but only where such transfers are permitted under the UK GDPR. Where data is transferred internationally, CourtCorrect implements appropriate safeguards. Further details of our subprocessors and applicable transfer mechanisms are set out in our Data Processing Agreement (DPA)
6. Data Security
6. Data Security
6. Data Security
Security Measures
CourtCorrect implements appropriate technical and organisational measures designed to protect personal data against accidental, unlawful, or unauthorised destruction, loss, alteration, access, disclosure, or use. These measures include access controls, encryption where appropriate, network and infrastructure security, monitoring, and internal governance protocols. The specific measures applied depend on the nature of the data and the risks identified.
Access Restrictions
Access to personal data is strictly limited to authorised employees, contractors, agents, and subprocessors who have a legitimate business need to access such information. All such individuals are subject to confidentiality obligations and are required to process personal data strictly in accordance with CourtCorrect’s instructions and applicable law.
Security Limitations
While CourtCorrect maintains security measures that meet or exceed industry standards, no method of data transmission or storage is entirely secure. CourtCorrect cannot guarantee absolute security of personal data processed through its systems, and the Customer acknowledges that residual risks may remain inherent in all digital systems.
Breach Management
CourtCorrect has established procedures to detect, investigate, and respond to personal data breaches. Where required by applicable law, CourtCorrect will notify the Customer and relevant supervisory authorities without undue delay following confirmation of a personal data breach.
Customer Responsibilities
The Customer is responsible for maintaining the security and confidentiality of any user credentials, access tokens, or authentication mechanisms provided for use of the Services, and for ensuring that its Users comply with all security requirements communicated by CourtCorrect. CourtCorrect is not responsible for unauthorised access resulting from the Customer’s failure to secure its own systems or credentials
Security Measures
CourtCorrect implements appropriate technical and organisational measures designed to protect personal data against accidental, unlawful, or unauthorised destruction, loss, alteration, access, disclosure, or use. These measures include access controls, encryption where appropriate, network and infrastructure security, monitoring, and internal governance protocols. The specific measures applied depend on the nature of the data and the risks identified.
Access Restrictions
Access to personal data is strictly limited to authorised employees, contractors, agents, and subprocessors who have a legitimate business need to access such information. All such individuals are subject to confidentiality obligations and are required to process personal data strictly in accordance with CourtCorrect’s instructions and applicable law.
Security Limitations
While CourtCorrect maintains security measures that meet or exceed industry standards, no method of data transmission or storage is entirely secure. CourtCorrect cannot guarantee absolute security of personal data processed through its systems, and the Customer acknowledges that residual risks may remain inherent in all digital systems.
Breach Management
CourtCorrect has established procedures to detect, investigate, and respond to personal data breaches. Where required by applicable law, CourtCorrect will notify the Customer and relevant supervisory authorities without undue delay following confirmation of a personal data breach.
Customer Responsibilities
The Customer is responsible for maintaining the security and confidentiality of any user credentials, access tokens, or authentication mechanisms provided for use of the Services, and for ensuring that its Users comply with all security requirements communicated by CourtCorrect. CourtCorrect is not responsible for unauthorised access resulting from the Customer’s failure to secure its own systems or credentials
7. Data Retention
7. Data Retention
7. Data Retention
CourtCorrect retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, regulatory, accounting, or reporting requirements, resolving disputes, enforcing agreements, and maintaining the integrity and security of the Service.
When determining appropriate retention periods, CourtCorrect considers:
(a) the nature, scope, and sensitivity of the personal data;
(b) the potential risk of harm from unauthorised use or disclosure;
(c) the purposes for which the data is processed and whether those purposes can be achieved by other means; and
(d) applicable legal, regulatory, and operational requirements.
Case Data Retention
Case Data processed within the CourtCorrect platform in connection with dispute resolution or case management is retained for as long as the Customer (or any other party to the case) maintains an active account, unless the Customer requests deletion earlier and deletion is legally permissible. CourtCorrect acts solely on the Customer’s documented instructions regarding the retention or deletion of Case Data and does not determine retention periods for such data. Where deletion is requested, CourtCorrect will delete the data unless it is required to retain it under applicable law.
General Personal Data
Identity, Contact, Billing, Technical, Usage and other account-related data are retained for as long as necessary to manage the Customer’s account, operate the platform, comply with legal and regulatory obligations, resolve disputes, maintain security records, or establish, exercise or defend legal claims. Basic customer information (including Identity, Contact, Financial and Transaction Data) will be retained for at least six (6) years after the customer relationship ends, in accordance with UK tax and financial record-keeping requirements.
Deletion and Anonymisation
The Customer may delete data directly through the platform or request deletion from CourtCorrect. CourtCorrect will comply with such requests unless retention is required by law or otherwise permitted under the UK GDPR. Personal data may be anonymised so that it no longer identifies any individual; anonymised data may be retained and used indefinitely for analytics, system improvement and other legitimate business purposes.
CourtCorrect retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, regulatory, accounting, or reporting requirements, resolving disputes, enforcing agreements, and maintaining the integrity and security of the Service.
When determining appropriate retention periods, CourtCorrect considers:
(a) the nature, scope, and sensitivity of the personal data;
(b) the potential risk of harm from unauthorised use or disclosure;
(c) the purposes for which the data is processed and whether those purposes can be achieved by other means; and
(d) applicable legal, regulatory, and operational requirements.
Case Data Retention
Case Data processed within the CourtCorrect platform in connection with dispute resolution or case management is retained for as long as the Customer (or any other party to the case) maintains an active account, unless the Customer requests deletion earlier and deletion is legally permissible. CourtCorrect acts solely on the Customer’s documented instructions regarding the retention or deletion of Case Data and does not determine retention periods for such data. Where deletion is requested, CourtCorrect will delete the data unless it is required to retain it under applicable law.
General Personal Data
Identity, Contact, Billing, Technical, Usage and other account-related data are retained for as long as necessary to manage the Customer’s account, operate the platform, comply with legal and regulatory obligations, resolve disputes, maintain security records, or establish, exercise or defend legal claims. Basic customer information (including Identity, Contact, Financial and Transaction Data) will be retained for at least six (6) years after the customer relationship ends, in accordance with UK tax and financial record-keeping requirements.
Deletion and Anonymisation
The Customer may delete data directly through the platform or request deletion from CourtCorrect. CourtCorrect will comply with such requests unless retention is required by law or otherwise permitted under the UK GDPR. Personal data may be anonymised so that it no longer identifies any individual; anonymised data may be retained and used indefinitely for analytics, system improvement and other legitimate business purposes.
8. Your Legal Rights
8. Your Legal Rights
8. Your Legal Rights
Subject to applicable law, individuals have the following rights in relation to their personal data processed by CourtCorrect:
Right of Access: You may request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification: You may request correction of inaccurate personal data or completion of incomplete data. CourtCorrect may ask for evidence to verify the accuracy of any corrected information.
Right to Erasure: You may request deletion of your personal data where there is no lawful basis for us to continue processing it. CourtCorrect may refuse deletion where retention is required by law or necessary to establish, exercise, or defend legal claims.
Right to Object: You may object to processing carried out on the basis of our legitimate interests, where your particular circumstances justify objection, as you feel it impacts on your fundamental rights and freedoms. You may also object at any time to the use of your personal data for direct marketing.
Right to Restrict Processing: You may request that we restrict the processing of your personal data in circumstances permitted under the UK GDPR, for example where you contest the accuracy of the data, where processing is unlawful and you prefer restriction to deletion, where you need the data for legal claims, or where you have objected to processing and we are considering whether our legitimate grounds override your interests.
Right to Data Portability: You may request a copy of certain personal data in a structured, commonly used, machine-readable format, and may request that we transfer such data to another controller where technically feasible. This right applies only to automated processing based on consent or contract.
Right to Withdraw Consent: Where we rely on consent for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
Exercising Your Rights
Requests to exercise these rights may be submitted by contacting us at hello@courtcorrect.com. CourtCorrect may require additional information to verify your identity and ensure your right to access your personal data before responding. CourtCorrect does not charge a fee for exercising your rights. However, we may charge a reasonable fee or refuse to act where a request is manifestly unfounded, excessive, or repetitive. We will respond to all valid requests within the time limits set out in the UK GDPR, usually within one month. Complex or numerous requests may take longer; if so, we will notify you.
Subject to applicable law, individuals have the following rights in relation to their personal data processed by CourtCorrect:
Right of Access: You may request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification: You may request correction of inaccurate personal data or completion of incomplete data. CourtCorrect may ask for evidence to verify the accuracy of any corrected information.
Right to Erasure: You may request deletion of your personal data where there is no lawful basis for us to continue processing it. CourtCorrect may refuse deletion where retention is required by law or necessary to establish, exercise, or defend legal claims.
Right to Object: You may object to processing carried out on the basis of our legitimate interests, where your particular circumstances justify objection, as you feel it impacts on your fundamental rights and freedoms. You may also object at any time to the use of your personal data for direct marketing.
Right to Restrict Processing: You may request that we restrict the processing of your personal data in circumstances permitted under the UK GDPR, for example where you contest the accuracy of the data, where processing is unlawful and you prefer restriction to deletion, where you need the data for legal claims, or where you have objected to processing and we are considering whether our legitimate grounds override your interests.
Right to Data Portability: You may request a copy of certain personal data in a structured, commonly used, machine-readable format, and may request that we transfer such data to another controller where technically feasible. This right applies only to automated processing based on consent or contract.
Right to Withdraw Consent: Where we rely on consent for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
Exercising Your Rights
Requests to exercise these rights may be submitted by contacting us at hello@courtcorrect.com. CourtCorrect may require additional information to verify your identity and ensure your right to access your personal data before responding. CourtCorrect does not charge a fee for exercising your rights. However, we may charge a reasonable fee or refuse to act where a request is manifestly unfounded, excessive, or repetitive. We will respond to all valid requests within the time limits set out in the UK GDPR, usually within one month. Complex or numerous requests may take longer; if so, we will notify you.
9. Administrative Provisions
9. Administrative Provisions
9. Administrative Provisions
Changes to This Privacy Policy
CourtCorrect keeps this Privacy Policy under regular review and may update it from time to time. Any changes will be published on our website and will take effect upon publication unless stated otherwise. Continued use of our services after an update constitutes your acceptance of the revised Privacy Policy.
Your Duty to Inform Us of Changes
It is important that the personal data we hold about you is accurate and up to date. Please notify us of any changes to your personal information during your relationship with us.
Third-Party Links
Our website and platform may contain links to third-party websites or services. Clicking on those links may allow third parties to collect or share information about you. CourtCorrect does not control these websites and is not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party site you visit
Changes to This Privacy Policy
CourtCorrect keeps this Privacy Policy under regular review and may update it from time to time. Any changes will be published on our website and will take effect upon publication unless stated otherwise. Continued use of our services after an update constitutes your acceptance of the revised Privacy Policy.
Your Duty to Inform Us of Changes
It is important that the personal data we hold about you is accurate and up to date. Please notify us of any changes to your personal information during your relationship with us.
Third-Party Links
Our website and platform may contain links to third-party websites or services. Clicking on those links may allow third parties to collect or share information about you. CourtCorrect does not control these websites and is not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party site you visit
10. Glossary
“Personal Data” means any information relating to an identified or identifiable natural person, as defined under the UK GDPR.
“Case Data” means any data, documents, files, evidence, or other information uploaded, submitted, or generated by Customers or their end-users through the CourtCorrect platform in connection with a claim, case, or matter.
“Customer Data” means the personal data that CourtCorrect collects from or about its direct clients, users, or prospective users in connection with account creation, access to the platform, customer support, communications, billing, or the general use of the Services.
“Controller” means the natural or legal person who determines the purposes and means of processing personal data.
“Processor” means the natural or legal person who processes personal data on behalf of a Controller.
“Sub-processor” means any third party appointed by CourtCorrect to process personal data on CourtCorrect’s behalf when CourtCorrect acts as a Processor.
“Legitimate Interest” means CourtCorrect’s interest in operating, improving and securing its services and business. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. CourtCorrect will not rely on legitimate interests where such interests are overridden by your fundamental rights and freedoms.
“Performance of a Contract” means processing that is necessary for entering into, or performing, a contract to which you are a party.
“Legal or Regulatory Obligation” means processing personal data where it is necessary for compliance with a legal or regulatory obligation to which CourtCorrect is subject.
“Special Category Data” means personal data requiring additional protection under the UK GDPR (such as health, biometric, race, ethnicity, or political opinions). CourtCorrect does not intentionally collect such data.
“Aggregated Data” means data that does not identify an individual and is compiled for statistical or analytical purposes. Aggregated Data is not considered Personal Data.
“Data Subject” means an identified or identifiable natural person whose personal data is processed.
“International Transfer” means the transfer of personal data outside the UK or EEA under Chapter V of the UK GDPR.
“UK GDPR” means the UK General Data Protection Regulation, as incorporated into UK law following Brexit