Let's Get Legally Real (“LGLR”) Privacy Policy
Last updated: 30 September 2026
Let’s Get Legally Real (“LGLR”) is an unincorporated initiative. It is not a limited company or separate incorporated legal entity. LGLR is operated by Sally Sano, Ashna Ramdin and Aizere Assylbek. For data protection purposes, we jointly determine how and why personal information is processed in connection with LGLR.
This privacy policy explains how Let's Get Legally Real ("LGLR", "we", "us" or "our") collects, uses, stores and shares personal information when you use our website, create or use a Learning Hub account, sign up for updates, contact us, or take part in our workshops and content as a guest or collaborator.
LGLR is the controller of the personal information described in this policy. Our platform is currently free to use. If our services or data practices materially change, we will update this policy.
1. Contact details
Email: hello@letsgetlegallyreal.com
Website: www.letsgetlegallyreal.com
2. What information we collect and why
Learning Hub, workshops and educational resources
We may collect or use the following information to provide and operate our free Learning Hub, workshops and educational resources:
Name and contact details, including email address.
Account and registration information, including account creation and service history.
Information used for account security and authentication.
User-generated Learning Hub content, such as saved notes, reflections, worksheets or learning progress, where those features are used.
Website-use information, including IP address, device/browser information, user journeys and cookie-related information where applicable.
The Learning Hub is currently free and we do not currently collect payment details through it.
Newsletter and service updates
If you sign up to our newsletter or other updates, we may use:
Your email address and any other contact details you provide.
Your marketing preferences, including whether you are subscribed or have unsubscribed.
Records of your consent, where appropriate.
You can unsubscribe from marketing emails at any time using the unsubscribe option in the message or by contacting us.
Queries, complaints and claims
If you contact us with a question, complaint or claim, we may use:
Your name and contact details.
Relevant account or service information.
Correspondence and information you provide about the issue.
Records needed to investigate, respond to or keep an appropriate record of the matter.
Guests, collaborators and platform administration
Where you take part in LGLR content as a guest or collaborator, or contact us about participating, we may use information such as:
Name, contact details, professional role, biography and publicly available professional information.
Correspondence and planning information relating to workshops, interviews or collaborations.
Photographs, audio or video recordings, and other content created for publication, where relevant and agreed with you.
We also use limited technical and usage information to administer, maintain and improve our website and Learning Hub and to understand how the platform is used.
We do not intentionally ask ordinary website users or Learning Hub members to provide special-category information (such as health information, racial or ethnic origin, political opinions, religion or sexual orientation). Please avoid including sensitive personal information about yourself or other people in saved notes or messages unless it is genuinely necessary.
3. Children and young people
Our services may be used by people under the age of 18, including students exploring legal careers. We aim to explain our privacy practices clearly and in a way that younger users can understand.
If you are under 18 and are unsure about anything in this policy, you can contact us at hello@letsgetlegallyreal.com. You may also wish to ask a parent, guardian or another trusted adult to help you understand it.
4. Our lawful bases for using personal information
Under UK data protection law, we must have a lawful basis for each way we use personal information. The main lawful bases we currently rely on are set out below.
Purpose
Providing the Learning Hub, workshops and educational resources
Lawful basis
Legitimate interests - to operate our free platform, provide requested features and make practical legal-career learning available, while limiting the information used to what is necessary.
Purpose
Creating and operating Learning Hub accounts
Lawful basis
Contract - where processing is necessary to create, administer and provide the account and features requested by the user.
Purpose
Newsletter and marketing updates
Lawful basis
Consent - where you have actively chosen to receive our updates. You can withdraw consent at any time.
Purpose
Responding to queries, complaints or claims
Lawful basis
Legitimate interests - to respond, investigate relevant issues, maintain appropriate records and protect the rights and interests of LGLR and its users.
Purpose
Administering and improving the website and Learning Hub
Lawful basis
Legitimate interests, and consent where required for non-essential cookies or similar technologies.
Purpose
Managing guests and collaborators
Lawful basis
Legitimate interests in organising and administering our content and collaborations; consent may also be used where we specifically ask for agreement to a particular use.
5. Where we get personal information from
Directly from you, for example when you create an account, save notes, subscribe to updates, contact us, or take part as a guest or collaborator.
Publicly available sources, such as professional profiles, law firm or chambers websites, LinkedIn and other public professional sources, where relevant to guest or collaborator outreach.
Our suppliers and service providers, for example where they provide account, security, analytics or technical information to us as part of the services they provide.
6. Cookies and website analytics
Our website and service providers may use cookies and similar technologies to operate the website, keep it secure and understand how it is used. Where UK law requires consent for non-essential cookies or similar technologies, we will ask for that consent through our cookie controls. For more information about the cookies and similar technologies we use, including how to manage your preferences, please see our Cookie Policy at https://www.letsgetlegallyreal.com/cookie-policy.
7. How long we keep personal information
We do not keep personal information for longer than we need it. The periods below are our current retention schedule and are reviewed at least annually and whenever our services materially change.
Information
Learning Hub account details
Current retention approach
While the account is active. After account closure, or where an account has been inactive for an extended period, we aim to delete or anonymise the information within 12 months unless we need to keep it for a specific legal, security or dispute-related reason.
Information
Saved notes, reflections and learning progress
Current retention approach
While the relevant Learning Hub account is active. We aim to delete this information when the account is deleted, subject to temporary technical backups and any specific legal requirement.
Information
Newsletter subscriber details
Current retention approach
Until you unsubscribe or we stop the mailing list. We may keep a minimal suppression record so that we can respect your request not to receive further marketing.
Information
General enquiries
Current retention approach
Normally up to 12 months after the enquiry has been resolved, unless there is a reason to keep the information longer.
Information
Complaints or claims
Current retention approach
For as long as necessary to handle the matter and, where reasonably necessary to establish, exercise or defend legal claims, for up to 6 years after the matter is closed.
Information
Guest and collaborator records
Current retention approach
For the duration of the collaboration and then reviewed periodically. Permissions or release records may be kept while the relevant content remains published and for a reasonable period afterwards where needed to evidence permission.
Information
Website analytics and technical logs
Current retention approach
For the period configured in the relevant service, and no longer than reasonably necessary for security, troubleshooting and understanding website use.
Some service providers may retain temporary backup copies for a limited period after deletion. Where this applies, access is restricted and the information is removed in accordance with the provider's backup cycle.
8. Who we share personal information with
We use trusted service providers to process personal information on our behalf where necessary to operate LGLR. Our current principal processors include:
Processor
Squarespace Ireland Limited
What they do for LGLR
Website hosting and website management, including member/account functionality, website forms, communications with website users, analytics and website security.
Processor
Supabase Pte. Ltd.
What they do for LGLR
Backend database and related technical services for the Learning Hub, including storing and processing account information and Learning Hub data such as saved notes, reflections or progress, where applicable.
Processor
Google Cloud EMEA Limited (Google Workspace)
What they do for LGLR
Business email and related cloud productivity services, including sending, receiving and storing emails, enquiries, correspondence and attachments.
Processor
CookieYes Limited
What they do for LGLR
This data processor does the following activities for us: Provides cookie consent management services, including displaying and managing our cookie consent banner, recording visitors’ cookie choices and consent preferences, and supporting our compliance with cookie and privacy requirements.
We may also share personal information with organisations where we are legally required to do so.
For guest and collaborator content, we may publish agreed information publicly on our website, social media and other information or marketing channels, for example a guest's name, professional role, biography, photograph, voice, video or workshop content. We do not publish ordinary Learning Hub member account information.
9. Sharing information outside the UK
Some of our service providers are based outside the UK or use subprocessors in other countries. Where personal information is transferred outside the UK, we take steps designed to ensure the transfer complies with UK data protection law.
Our current arrangements include:
Recipient / location
Squarespace Ireland Limited - Ireland
Transfer approach
Ireland is covered by UK adequacy regulations.
Recipient / location
Google Cloud EMEA Limited - Ireland
Transfer approach
Ireland is covered by UK adequacy regulations.
Recipient / location
Supabase Pte. Ltd. - Singapore
Transfer approach
Supabase's Data Processing Addendum incorporates the UK Addendum to the EU Standard Contractual Clauses for relevant UK transfers.
Recipient / location
Supabase project hosting - AWS eu-west-1 (Ireland)
Transfer approach
Our current Supabase project region is eu-west-1 (Ireland). Ireland is covered by UK adequacy regulations.
Recipient / location
Certain US subprocessors used by our providers
Transfer approach
Where applicable, providers may rely on the UK Extension to the EU-US Data Privacy Framework for recipients with active certification, or on another valid UK transfer safeguard.
Service providers and their subprocessor lists may change over time. We review these arrangements periodically and update this policy where a change is material to how we handle personal information.
10. Your data protection rights
Depending on the circumstances and the lawful basis we rely on, you may have rights including:
Access - to ask for a copy of your personal information and information about how it is used.
Rectification - to ask us to correct information that is inaccurate or incomplete.
Erasure - to ask us to delete your personal information in certain circumstances.
Restriction - to ask us to limit how we use your personal information in certain circumstances.
Objection - to object to certain processing, including processing based on legitimate interests.
Data portability - in certain circumstances, to receive information you provided to us in a portable format or ask us to transfer it to another organisation.
Withdrawal of consent - where we rely on consent, you can withdraw it at any time. This will not affect processing that took place before you withdrew consent.
To exercise a data protection right, email hello@letsgetlegallyreal.com. We will respond without undue delay and, in any event, within the time required by applicable data protection law.
11. Data protection complaints procedure
Last updated: 30 September 2026
At Let’s Get Legally Real (“LGLR”), we take the protection of personal information seriously. If you have concerns about how we have collected, used, stored or otherwise handled your personal information, you can raise a data protection complaint with us.
How to make a complaint
Please contact us at:
When contacting us, it is helpful if you include:
your name and contact details;
a brief description of your concern;
any relevant dates, correspondence or other information that may help us understand the issue; and
what you would like us to do to resolve the matter, if applicable.
You do not need to use legal terminology or refer to specific data protection legislation when making a complaint. The ICO confirms that a complaint can simply explain the concern about how personal information has been handled.
If you are making a complaint on behalf of someone else, we may ask you to provide evidence that you are authorised to act for them.
What happens after you complain
We will:
Acknowledge your complaint within 30 days of receiving it.
Review and investigate your concerns without undue delay, including making any enquiries reasonably necessary.
Keep you informed of the progress of our investigation where appropriate.
Explain the outcome of our investigation and any action we have taken or propose to take.
These steps reflect the current requirements for handling data protection complaints in the UK.
We may contact you if we need further information to understand or investigate your complaint.
If you are not satisfied
We hope to resolve any concerns directly with you. However, you also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK regulator for data protection.
You can find information about making a complaint to the ICO on the ICO website.
12. Changes to this policy
We may update this privacy policy when our services, systems, suppliers or legal obligations change. The latest version will be published on our website with the date it was last updated.
Questions about this policy? Email hello@letsgetlegallyreal.com.