LAWBOXDATA
TRANSPARENCY
LAWBOX LTD (company number 17140259) is the data controller for personal data sent through this site. Founder public signature: RicoGPT5101. We are not a law firm and not a public authority.
UK GDPR (assimilated Regulation (EU) 2016/679) and the Data Protection Act 2018. PECR for electronic mail where it applies. Freedom of Information Act 2000 does not bind LAWBOX (we are not a public authority); we still publish a notice because we handle other people’s data.
Name, email, handle, request text, and optional case notes you type. We do not ask for copies of passports, driving licences or bills. Do not paste other people’s private data into forms.
Consent for subscribe / agent / SAR log forms. Legitimate interests for running an independent publisher and keeping a request log you asked us to keep. Contract if you later buy a paid desk product (none live yet).
Form logs: up to 24 months unless you ask for erasure sooner or a live complaint needs the file. Browser archive lives on your device until you clear it.
Access, rectification, erasure, restriction, objection, portability (Art 15–22 UK GDPR). Complain to LAWBOX first, then the ICO (ico.org.uk). From June 2026 controllers must acknowledge data-protection complaints within 30 days (Data (Use and Access) Act 2025).
Complain to that body, then the ICO. Compensation for material or non-material damage is UK GDPR Article 82 (and DPA 2018). The ICO does not award damages. A civil claim is issued in court. LAWBOX can log dates. LAWBOX cannot act as your solicitor or issue the claim.
To use your rights against LAWBOX, email dpo@lawbox.systems.