Privacy Policy

Last updated: 14 August 2026 · Version 1.0 · EYA Srl

    In summary: LegisBox collects only the data strictly necessary to respond to your enquiry and provide the service. We do not sell data to third parties. We do not use invasive tracking systems. The website uses essential technical cookies and, only with your explicit consent, anonymous analytics cookies.
  

1. Data controller

EYA Srl
Email: hello@legisbox.uk
London, England

2. Data collected and purposes

2.1 Contact form / demo request

When you complete the demo request form on the website, we collect:

Full name
Professional email address
Firm name
Bar / Regulator (optional)
Number of solicitors
Free-text message (optional)

Purpose: to respond to your demo request and contact you with information about LegisBox.
Legal basis: consent (Article 6(1)(a) UK GDPR).
Retention: up to 24 months from the last contact.

Form data is processed via Formspree Inc. (USA), covered by appropriate safeguards under UK GDPR Chapter V. See Formspree's privacy policy.

2.2 Technical cookies

The website uses technical cookies necessary for its operation, including memorising your theme preference (light/dark) and cookie consent. These do not require your consent under the UK GDPR and PECR.

2.3 Analytics cookies (with consent only)

Only if you explicitly accept via the cookie banner may we use anonymous analytics cookies to understand how visitors interact with the site. No personal data is transmitted to third parties.

2.4 Server logs

As with any website, our server automatically records the IP addresses of visitors, browser type, pages visited and access time. These data are retained for security purposes for a maximum of 30 days.

3. Your rights

Under Articles 15 to 22 of the UK GDPR and the Data Protection Act 2018, you have the following rights:

Access: to know what data we process about you
Rectification: to correct inaccurate data
Erasure: to request deletion of your data ("right to be forgotten")
Portability: to receive your data in a structured format
Objection: to object to processing for direct marketing purposes
Withdrawal of consent: at any time, without prejudice to prior processing
Restriction: to request restriction of processing in certain circumstances

To exercise your rights, write to hello@legisbox.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

4. Data transfers

Data collected via the contact form is processed by Formspree Inc. (USA) with appropriate safeguards under UK GDPR Chapter V. No other transfers outside the UK are made in connection with the website.

The LegisBox product itself is entirely self-hosted: client files and case data never leave the law firm's premises. No transfer of client data takes place at any point.

5. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. The website is served entirely over HTTPS with SSL/TLS certification.

6. Minors

The LegisBox website is exclusively intended for adult legal professionals. We do not knowingly collect data relating to individuals under the age of 18.

7. Changes to this policy

Any updates will be published on this page with the revision date indicated. We encourage you to check it periodically.

8. Contact

For any question relating to the processing of your personal data:
EYA Srl — hello@legisbox.uk