How Sanctum Lex handles personal data. Matter-data handling depends on the deployment and model route agreed with the client; this notice primarily covers the website and our business contacts.
Last reviewed 21 August 2026
What this covers
This notice covers personal data we process as a controller: website visitors, people who contact us, and business contacts at client and prospective client organisations. It does not cover content inside a client enclave, which the client controls and we cannot access.
Client matter content
Matter-data handling is governed by the client agreement and deployment record. In a private-perimeter configuration with local inference and outbound paths denied, matter content remains inside the approved client environment. Governed external model routes are identified separately and remain subject to the agreed provider and retention terms.
Website data
We collect the information you submit through the demo and access forms, and basic technical data required to serve the site. We do not sell personal data or run third-party advertising trackers.
Cookies and analytics
Essential cookies support security, authentication, forms and privacy preferences. In jurisdictions where prior consent is required, optional analytics remain off until you choose to allow them. You can reject optional analytics or reopen Privacy choices from the site footer at any time.
Form submissions
Requests submitted through this site are delivered to our private office inbox and retained for as long as needed to respond and to keep a record of the enquiry.
Legal basis
Where the UK GDPR or EU GDPR applies, we rely on legitimate interests for business correspondence and on contract performance for client relationships.
Sharing
We share personal data with service providers who help us operate the site and our email, under written terms. We do not sell personal data.
Retention
Enquiry records are kept while a relationship is live and for a reasonable period afterwards, then deleted.
Your rights
Depending on your location you may have rights of access, correction, deletion, restriction, objection, and portability. Write to the private office and we will respond within the applicable period.
Contact
Questions about this notice can be sent to the private office address published on the contact page.
This page is a drafting starting point prepared for the site build. Have counsel review and adapt it, and insert the governing jurisdiction, before publication.
Questions about any of this?
The private office answers legal and compliance questions directly, and will put your reviewers in touch with the right person.