This policy explains what personal information Naelar collects, why, and what you can do about it. It covers visitors to naelar.com, people who contact us, and the work we do on behalf of law firm clients.
1. Who we are
Naelar provides marketing, technology and automation services to law firms. Naelar is operated by Naelar Ltd, a company registered in England and Wales under company number 16414218, whose registered office is at 13 Henley Wood Road, Earley, Reading, England, RG6 7EE. We are the controller for information about our own site visitors and clients, and a processor for information we handle on behalf of law firms.
Naelar is not a law firm and does not give legal advice.
2. Information we collect
Information you give us. When you fill in a form, email us or book a call: your name, firm, role, email address, phone number and anything you choose to tell us about your firm and its intake.
Free tools. Most of our free tools run in your browser, and what you type stays on your device. If you ask us to email you a result, we receive your name, firm, email address and that result, and we treat them like any other enquiry. The AI visibility checker sends only the practice area and city to DataForSEO, a search data provider, which puts the question to ChatGPT and Perplexity. Your firm name and website stay on our server. We log the firm name and city of each check to keep track of costs. To stop misuse we keep a scrambled (hashed) form of your IP address for up to two days.
Information collected automatically. When you visit naelar.com: IP address, browser and device type, pages viewed, referring site and approximate location, collected through cookies and similar technologies described in section 7.
Information about client contacts. If your firm is a client, we hold business contact details, account and billing information, and records of our communications and work together.
We do not knowingly collect information from anyone under 18.
3. How we use it
- To reply to your enquiry and arrange calls or proposals.
- To provide, invoice and support the services a firm has engaged us for.
- To run, secure and improve naelar.com.
- To send occasional updates about our services where you have agreed to receive them. You can opt out at any time.
- To meet legal, regulatory and accounting obligations.
We do not sell personal information.
4. Lawful basis
Under UK GDPR we rely on: contract, to deliver services a firm has engaged us for; legitimate interests, to answer enquiries, run our business and secure our site, where those interests are not overridden by yours; consent, for non-essential cookies and marketing emails; and legal obligation, for tax and accounting records.
5. Who we share it with
Service providers who help us run the business, under contracts that restrict what they can do with the information: hosting, email, CRM, analytics, scheduling, search data, payment and accounting. Professional advisers where necessary. Authorities where the law requires. A buyer or successor if the business is sold, on the same terms as this policy.
6. Work we do for law firms
When we generate cases, run landing pages, send follow-up sequences or set up a CRM for a law firm, the people who enquire are the firm's prospective clients. The firm decides what is collected and why; we act on its written instructions as a processor and do not use that information for our own purposes or pass it to any other firm.
If you enquired with a law firm through a page or sequence we built, the firm's own privacy notice applies. Please contact the firm directly to exercise your rights; we will help the firm respond.
7. Cookies
Essential cookies make the site work and remember your cookie choice. Analytics cookies help us understand how the site is used. Marketing cookies measure our own advertising. Analytics and marketing cookies are only set with your consent, which you can change at any time via "Cookie Settings" in the footer or your browser settings.
8. Retention and security
Enquiries we don't take further are deleted within 24 months. Client records are kept for the length of the engagement and for six years afterwards to meet accounting and legal obligations. Analytics data is retained for no more than 26 months.
We use encryption in transit and at rest, access controls, and providers that meet recognised security standards. No system is completely secure; if a breach affects you, we will tell you and the relevant authority as the law requires.
9. Your rights
You can ask us to access, correct, delete or restrict your information, object to our use of it, receive a copy in a portable format, and withdraw consent where we rely on it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, though we would welcome the chance to resolve any concern first. We respond within one month, extendable where the law allows.
10. International transfers
Some providers are based outside the UK. Where information leaves the UK we rely on the UK Addendum to the EU Standard Contractual Clauses, the International Data Transfer Agreement, or an adequacy decision.
11. Changes
We will post any changes here and update the date at the top. If a change is significant, we will tell clients directly.
12. Contact
Email privacy@naelar.com or write to Naelar Ltd, 13 Henley Wood Road, Earley, Reading RG6 7EE, United Kingdom.