This Privacy Policy explains how BITSLEGAL LTD (“BITS LEGAL”, “we”, “us”) collects and uses personal information when you visit bits.legal, contact us, or otherwise interact with us through this website.
This notice is intended to be clear and transparent about our processing, in line with the information requirements under applicable data protection laws (including the UK GDPR). We may update this policy from time to time; the “Last updated” date will show the latest version.
Last updated: 3 February 2026
1. Who we are
BITSLEGAL LTD (Company No. 16805682) operates the website bits.legal. For the purposes of this Privacy Policy, we are the “controller” of the personal information described here.
Registered office: 128 City Road, London, EC1V 2NX, United Kingdom
Email: hello@bits.legal
2. What data we collect
We may collect the following categories of personal information:
- Contact and enquiry details — such as your name, email address, telephone number, company/role (if provided), and the content of your enquiry when you contact us via forms, email, or other channels.
- Communications — records of correspondence and follow-up communications with you.
- Technical data — such as IP address, device and browser type, referral source, pages visited, and timestamps (typically collected via server logs for security and performance).
Please do not send confidential or sensitive information via the website unless and until engagement terms are agreed. If you choose to include sensitive information in your message, we will process it only as necessary to handle your enquiry.
3. How we use your data
We use your personal information for the following purposes:
- To respond to enquiries and provide information you request, including scheduling consultations.
- To operate, secure, and maintain the website, including monitoring for suspicious activity, preventing abuse, and troubleshooting.
- To improve the website and our communications (for example, understanding which pages are most useful and improving content).
- To comply with legal obligations where applicable, and to establish, exercise, or defend legal claims.
4. Legal bases for processing
We rely on one or more of the following legal bases, depending on the context:
- Legitimate interests — for example, responding to enquiries, operating and securing our website, and improving our services. We only rely on this basis where our interests are not overridden by your rights.
- Steps prior to entering a contract — where you ask us to provide information or take steps towards providing services.
- Legal obligation — where we must process information to meet a legal requirement.
- Consent — where required (for example, for certain non-essential cookies or specific marketing communications). Where we rely on consent, you may withdraw it at any time.
5. Sharing your data
We may share personal information with:
- Service providers who help us run the website and communications (e.g., hosting, email, IT/security), acting under our instructions or as independent controllers where appropriate.
- Professional advisers (such as lawyers, accountants, insurers) where necessary.
- Authorities, regulators, or law enforcement if we are required to do so by law or to protect rights and safety.
- Business transfers — if we reorganise, merge, or sell assets, personal information may be transferred as part of that process.
We do not sell personal information.
6. International transfers
Some of our service providers may be located outside the UK (or may allow access from outside the UK). Where this involves a “restricted transfer” under the UK GDPR, we use appropriate safeguards (for example, adequacy regulations or contractual safeguards such as approved clauses), as required.
7. Retention
We retain personal information only for as long as necessary for the purposes described in this policy, and to meet legal, accounting, or reporting requirements.
As a general guide:
- Enquiry data and correspondence — typically retained for up to 24 months from our last interaction, unless a longer period is needed (e.g., if you become a client, or for compliance/claims).
- Technical logs — typically retained for a shorter period (often days to months) for security and operational purposes.
8. Your rights
Depending on your location and applicable law, you may have rights to:
- Request access to your personal information
- Request correction of inaccurate or incomplete information
- Request deletion (erasure) in certain circumstances
- Request restriction of processing in certain circumstances
- Object to processing in certain circumstances (including where we rely on legitimate interests)
- Request data portability in certain circumstances
- Withdraw consent (where processing is based on consent)
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.
To exercise your rights, contact us using the details below. We may need to verify your identity before responding.
9. Contact
Email: privacy@bits.legal
Address: 128 City Road, London, EC1V 2NX, United Kingdom