Legal
Privacy Notice
This notice explains how we handle personal data when you visit the NeoLaw website at neolaw.ai, and what rights you have under the EU General Data Protection Regulation (GDPR).
Who we are
The website is operated by Bolton Technologies, [TO CONFIRM: registered company name and legal form], company registration number [TO CONFIRM: company registration number], registered office [TO CONFIRM: registered office address] (“we”, “us”). We decide how and why the personal data described here is used, which makes us its controller under the GDPR.
Contact us about privacy at info@neolaw.ai.
What this notice covers
This notice covers the website neolaw.ai only. The NeoLaw service at chat.neolaw.ai has its own terms and privacy notice, which apply when you register. When you click Request access or Sign in, you leave this website, and the service’s documents apply to anything you enter there.
What we collect and why
This website has no forms and no user accounts. We do not use the data below for advertising, and we do not sell it.
Request logs
When you visit, the servers that deliver the site record technical details of each request: your IP address, the date and time, the page or file requested, your browser and device type, and the page that linked to us. These logs are kept by our hosting provider and by Cloudflare, which runs our domain’s DNS and protects and delivers the site. We use them to deliver the site, keep it secure and investigate faults or abuse.
Legal basis: our legitimate interest in running a working, secure website (GDPR Article 6(1)(f)).
Analytics, only if you accept
If you click Accept in the cookie bar, we use Google Analytics 4 to see how the site is used: which pages are visited, how visitors arrive, roughly where they are (country or city), which device and browser they use, and whether they click Request access. Google Analytics sets cookies to tell visits apart (see our Cookie Policy). According to Google, Google Analytics 4 does not log or store IP addresses; it uses them to estimate a location and then discards them.
If you do not accept, Google’s script is not loaded and no analytics data is collected.
Legal basis: your consent (GDPR Article 6(1)(a)), which you can withdraw at any time.
Your cookie choice
Your Accept or Decline choice is saved in your browser so that we do not ask on every page. It stays on your device and is not sent to us.
Emails you send us
If you email us, we use your email address and your message to reply and to keep a record of the conversation.
Legal basis: our legitimate interest in answering you (GDPR Article 6(1)(f)), or steps you ask us to take before entering into a contract (Article 6(1)(b)).
Who receives the data
We use these service providers. They process the data on our behalf, under data processing terms.
| Provider | What they do for us | Data |
|---|---|---|
| Our hosting provider, Vercel Inc. or Cloudflare, Inc. [TO CONFIRM] | Hosts and delivers the website | Request logs |
| Cloudflare, Inc. | DNS, security and content delivery | Request logs |
| Google Ireland Limited and Google LLC | Google Analytics, only if you accept | Analytics data and cookie identifiers |
| Microsoft (Microsoft 365) | Our email | Emails you send us |
We may also disclose personal data where the law requires it, for example to a court or a public authority.
Transfers outside the EU
Some of these providers are based in the United States or may process data there. Where this applies, the transfer relies on the EU-US Data Privacy Framework, for providers certified under it, or on the European Commission’s Standard Contractual Clauses.
How long we keep it
- Request logs: [TO CONFIRM: how long the hosting provider and Cloudflare keep request logs].
- Analytics data: Google Analytics keeps it for [TO CONFIRM: Google Analytics data retention setting, 2 or 14 months], then deletes it. The analytics cookies expire after two years at most.
- Your cookie choice: 12 months, then we ask again. You can clear it sooner in your browser.
- Emails: as long as we need them to deal with your message and any follow-up.
Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you (access)
- correct it (rectification)
- delete it (erasure)
- limit how we use it (restriction)
- give it to you, or to another organisation, in a machine-readable format (portability)
You can also object at any time to any use based on our legitimate interests.
You can withdraw your consent to analytics whenever you like, through (also at the bottom of every page). Withdrawing consent does not affect what was collected before you withdrew it.
To use any of these rights, email info@neolaw.ai. We will reply within one month.
Complaints
If you think we have not handled your data properly, please tell us first so we can put it right. You also have the right to complain to the Office of the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy), or to the data protection authority where you live or work.
Changes to this notice
We will update this notice when the website or the law changes. The date at the top shows the current version.