Privacy Policy

LexOps Limited ("LexOps", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal information when you:

• visit or use our website at https://lexopsltd.com/;
• contact us about our services;
• communicate with us by email, telephone or other means;
• engage us to provide services;
• work for or represent one of our clients, suppliers or business contacts; or
• otherwise interact with us in the course of our business.

LexOps provides legal operations, compliance, risk and operational support services to litigation funders and law firms, including file audits and reviews, portfolio and progress reporting, panel firm onboarding, due diligence and operational support.

This Privacy Policy should be read alongside any other privacy information we may provide to you at the point we collect your personal data.

The data controller responsible for your personal data is:

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Email: info@lexopsltd.com

Depending on how you interact with LexOps, we may collect and process the following categories of personal information:

Contact information

This may include:

• your name;
• job title or position;
• business or organisation name;
• email address;
• telephone number;
• postal or business address; and
• other professional contact details.

Business and professional information

Where relevant to our services, we may process information relating to your professional role, organisation, legal practice, litigation funding activities or other business activities.

Information contained within documents and files

When providing our services to litigation funders or law firms, we may have access to information contained within case files, funding documentation, correspondence, reports and other documents.

Such information may include personal data relating to claimants, clients, solicitors, barristers, experts, defendants, witnesses and other individuals involved in litigation.

We only process such information where it is necessary to provide our contracted services or otherwise permitted by applicable data protection law.

Communications

We may keep records of communications between you and LexOps, including emails, telephone calls, meeting notes and other correspondence.

Website and technical information

When you visit our website, we may automatically collect certain technical information, such as:

• IP address;
• browser type and version;
• operating system;
• device information;
• approximate location derived from IP address;
• pages visited;
• how you interact with our website; and
• information about the date and time of your visit.

This information may be collected through cookies and similar technologies.

We may collect personal information:

• directly from you;
• when you contact us;
• when you submit an enquiry through our website;
• when you engage our services;
• when you communicate with us in connection with an existing engagement;
• from your employer or organisation where you act on its behalf;
• from our clients, including litigation funders and law firms;
• from publicly available sources;
• from professional or regulatory databases where appropriate; and
• automatically through your use of our website.

Where we receive personal information from a third party rather than directly from you, we will take appropriate steps to provide you with the relevant privacy information where required by law.

We may use personal information for the following purposes:

Providing our services

We may use personal information to:

• conduct file audits and reviews;
• undertake due diligence;
• provide portfolio and progress reporting;
• support panel firm onboarding;
• provide operational and compliance support;
• monitor case progression and performance;
• communicate with clients and professional contacts;
• prepare reports and recommendations; and
• perform our contractual obligations.

Managing business relationships

We may use personal information to:

• communicate with clients, prospective clients, suppliers and professional contacts;
• respond to enquiries;
• arrange meetings;
• manage contracts and engagements;
• maintain business records; and
• provide information requested by you.

Compliance and risk management

We may process personal information where necessary to:

• comply with legal and regulatory obligations;
• undertake appropriate due diligence;
• identify and manage operational risks;
• prevent fraud, misuse or other unlawful activity;
• maintain appropriate records; and
• protect the rights, property and interests of LexOps and others.

Website management

We may use technical information to:

• operate and maintain our website;
• monitor website performance;
• identify technical problems;
• improve website functionality and user experience; and
• maintain the security of our website.

Marketing

Where permitted by law, we may use your business contact information to send you information about LexOps and our services.

Where consent is required for electronic marketing, we will obtain that consent before sending marketing communications.

You can opt out of marketing communications at any time by contacting us or using the unsubscribe facility provided in the relevant communication.

Under UK data protection law, we must have a lawful basis for processing personal data.

Depending on the circumstances, we may rely on one or more of the following lawful bases:

Contract

We may process personal data where this is necessary to enter into or perform a contract with you or the organisation you represent.

Legitimate interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.

Our legitimate interests may include:

• operating and managing our business;
• providing professional services;
• maintaining relationships with clients and professional contacts;
• conducting due diligence and risk assessments;
• improving our services;
• maintaining the security of our systems;
• protecting our business and clients; and
• communicating with business contacts.

Legal obligation

We may process personal data where necessary to comply with a legal or regulatory obligation.

Consent

In certain circumstances, we may rely on your consent to process personal data, for example where consent is required for certain marketing or non-essential cookies.

Where we rely on consent, you have the right to withdraw it at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Some information contained within litigation or legal files may constitute "special category data" under UK data protection law.

This may include information relating to matters such as health, biometric information, racial or ethnic origin, religious or philosophical beliefs, or other categories protected under applicable data protection legislation.

Where LexOps processes special category data, we will only do so where an appropriate condition for processing applies under applicable data protection law.

In many cases, LexOps will process such information on behalf of a client, such as a litigation funder or law firm, rather than determining the purposes for which that information is processed.

Where information relating to criminal convictions or offences is contained within documents or files provided to us as part of our services, we will only process that information where permitted by applicable law and where appropriate safeguards are in place.

We may share personal information where necessary to operate our business and provide our services.

This may include sharing information with:

• our clients;
• law firms and legal professionals;
• litigation funders;
• professional advisers, including accountants, auditors, insurers and legal advisers;
• IT, hosting and software providers;
• document management and communications providers;
• professional service providers assisting us with our business;
• regulators, government bodies, courts or law enforcement agencies where required or permitted by law; and
• other third parties where necessary to provide our services or where you have otherwise authorised us to do so.

We do not sell personal data to third parties.

Where we appoint a third party to process personal data on our behalf, we will take appropriate steps to ensure that the processor is subject to suitable contractual and security obligations.

Some of our service providers or technology providers may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK, we will ensure that the transfer is carried out in accordance with applicable UK data protection law.

Where required, we will use an appropriate legal safeguard, such as an adequacy regulation or decision, the International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another lawful transfer mechanism.

You can contact us using the details above if you would like further information about the safeguards used for a particular international transfer.

We will retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, regulatory, accounting, contractual or reporting requirements.

The precise retention period will depend on the nature of the information and the purpose for which it is processed.

Factors we may consider when determining retention periods include:

• the length of our relationship with you;
• contractual requirements;
• legal and regulatory obligations;
• limitation periods;
• the nature of the information;
• whether a dispute or investigation is ongoing; and
• whether the information may be required to establish, exercise or defend legal claims.

When personal information is no longer required, we will securely delete or anonymise it where appropriate.

We take the security of personal information seriously.

We use appropriate technical and organisational measures designed to protect personal information against:

• unauthorised access;
• accidental loss;
• destruction;
• alteration;
• disclosure; and
• other unlawful or unauthorised processing.

Access to personal information is limited to those who have a legitimate business need to access it.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

Depending on the circumstances and subject to applicable legal exemptions, you may have rights in relation to your personal data, including the right to:

• access your personal data;
• correct inaccurate or incomplete personal data;
• request erasure of your personal data;
• request restriction of processing;
• object to certain processing, including processing based on legitimate interests;
• object to direct marketing;
• request portability of certain personal data; and
• withdraw consent where we rely on consent as our lawful basis.

You also have rights relating to certain forms of automated decision-making and profiling where applicable.

These rights are not absolute and may be subject to legal conditions and exemptions.

If you wish to exercise any of these rights, please contact us using the contact details provided above.

We may need to request additional information from you to verify your identity before dealing with your request.

You can ask us to stop sending you marketing communications at any time.

You can do this by:

• using the unsubscribe option included in our marketing communications; or
• contacting us using the details provided in this Privacy Policy.

You have an absolute right to object to the processing of your personal data for direct marketing purposes.

Our website may use cookies and similar technologies.

Cookies are small text files placed on your device when you visit a website. They can be used for purposes including:

• enabling the website to function;
• remembering preferences;
• understanding how visitors use the website;
• monitoring website performance; and
• improving our website and services.

Where cookies are not strictly necessary for the operation of our website, we will seek consent where required by applicable law.

You can manage or disable cookies through your browser settings and, where applicable, our cookie consent mechanism.

You should be aware that disabling certain cookies may affect the functionality of the website.

Our website may contain links to third-party websites or services.

This Privacy Policy applies only to LexOps and our website.

We are not responsible for the privacy practices, content or security of third-party websites. We recommend that you review the privacy policy of any third-party website before providing personal information.

Our website and services are intended for businesses and professional users and are not directed at children.

We do not knowingly collect personal information from children through our website.

If you believe that a child has provided us with personal information, please contact us so that we can take appropriate action.

If we become aware of a personal data breach, we will assess the incident and take appropriate action in accordance with applicable data protection law.

Where legally required, we will notify the Information Commissioner's Office and/or affected individuals within the applicable statutory timescales.

If you have concerns about how we have handled your personal information, we would encourage you to contact us first so that we can investigate and try to resolve your concerns.

You also have the right to complain to the UK's data protection regulator.

The regulator is the Information Commissioner's Office (ICO).

You can find information about the ICO and how to make a complaint on its website:

Information Commissioner's Office

We may update this Privacy Policy from time to time to reflect changes in our business, services, technology or applicable legal and regulatory requirements.

The latest version will be published on our website.

We recommend checking this page periodically to ensure that you are aware of any changes.

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we use your personal information, please contact:

Email: info@lexopsltd.com

Company number: 16925960