Privacy notice · pilot version

How CasePoint uses your information

Last updated 9 September 2026. This is a pilot notice and will be finalised before public launch; the operating entity and ICO registration details will be added here.

Who we are

CasePoint (casepoint.uk) is a legal information and introduction service for England and Wales. We are the data controller for the information described below.

What we collect, and why

• Reading and searching. No account is needed. We keep standard server logs and aggregate analytics; we do not use advertising trackers.
• The case check. Your answers (claim type, dates, value band, evidence held, steps taken, an optional summary), your name and email, and optionally phone and postcode. We use these to generate and send your CasePoint Report. Lawful basis: performance of a contract with you (providing the report) and our legitimate interest in operating the service.
• Introduction to a solicitor. Only if you tick the consent box, we share your CasePoint Report and contact details with one solicitor firm on our panel whose practice area matches your claim, so they can contact you. Lawful basis: your consent, which you can withdraw at any time by emailing us. We do not share your details with more than one firm without asking you again.
• Preparation checklists. Payment is processed by Stripe; we receive your email address and a record of the purchase. We do not see or store card details.
• Panel accounts (solicitors). Name, firm, SRA ID, business address, practice areas, content you submit, and subscription status. SRA ID and business address are published alongside content you choose to publish.

What we do not do

• We do not sell your information, and we do not pass it to third parties for their marketing.
• We do not make unsolicited calls or send marketing messages. We will only contact you about the report or introduction you asked for.
• We do not ask for, and ask you not to provide, health or other special-category information. Our practice areas do not require it.

Who processes data on our behalf

Supabase (database and authentication, hosted in London), Vercel (hosting), Stripe (payments). Each acts under contract as our processor.

How long we keep it

Case-check submissions that are not introduced to a solicitor are deleted after 12 months. Introduced enquiries are kept for 6 years, in line with limitation periods, unless you ask us to delete them sooner. Purchase records are kept for 6 years for tax purposes.

Your rights

You can ask for a copy of your information, ask us to correct or delete it, withdraw consent to an introduction, or object to our processing. Email us at the address on the complaints page. You can also complain to the Information Commissioner’s Office at ico.org.uk.