LegalScope / Legal
Privacy Policy
How LegalScope handles website scan data, contact details and payment information, and how to exercise your rights.
Last updated:
MINISAGE TECH LTDCompany no. 17229324 · Registered in England and WalesRegistered office and correspondence: 18 Crowthorp Road, Northampton, NN3 5DU, United Kingdomhello@minisage.co.uk1. Who is responsible for your information
LegalScope is operated by MINISAGE TECH LTD, a company registered in England and Wales under company number 17229324. We are the controller of personal information used to operate this website, deliver reports, manage payments and respond to enquiries. Our contact details appear above.
This notice covers legalscope.co.uk and the LegalScope service. It does not describe how the websites you choose to scan process their own visitors’ information. If you submit a website on behalf of an organisation, you remain responsible for your authority to do so and for personal information you choose to provide.
2. Information we collect and where it comes from
We collect information you submit, information observed on publicly accessible websites during a scan, and technical information generated when you use the service. Public information can still contain personal data, such as a sole trader’s name or a business contact address.
- Scan information: the submitted URL and selected market, visited URLs, page titles and text excerpts, public legal notices, form labels and field information, cookie names and domains, network destinations, browser security headers, accessibility signals, findings, scores and report identifiers.
- Contact information: an email address for a report or monitoring; and your name, email address, company and message if you send an enquiry or a remediation request.
- Payment information: the report being purchased, payer email, payment or checkout identifiers and payment status. Card entry is handled by Stripe. Our application does not receive or store your full card number or card security code.
- Operational information: scan progress, timestamps, errors, email delivery records and technical request information, such as IP address and browser information, processed by our hosting and security providers.
3. Why we use information and our lawful bases
We use submitted URLs and scan observations to run the requested assessment, generate and store the report, provide access and downloads, and investigate scan failures. We use payment and contact information to process purchases, deliver reports and answer requests. Where you are our customer, this processing is necessary to perform our contract or take steps you request before entering a contract.
Where you act for a business, or where a scan encounters publicly available personal information, we rely on our legitimate interests in providing the requested website assessment, communicating with business contacts and operating the service. We also rely on legitimate interests for security, abuse prevention, service reliability and resolving disputes. We consider the purpose of processing, what information is necessary and its effect on individuals.
We process records when necessary to meet applicable legal obligations, including accounting requirements and lawful requests. If we ask for consent for an optional purpose, we explain that purpose at the time and you may withdraw consent without affecting processing that was lawful beforehand. Buying a report or providing a support email does not enrol you in marketing.
We need a website URL to run a scan and an email address to deliver a purchased report or requested monitoring alerts. If required information is not provided, we may be unable to supply that feature. Do not submit passwords, private access links, payment card details, health information or other sensitive information in a URL or message.
5. International processing
Our service providers operate internationally, so information may be processed outside the United Kingdom. The location depends on the provider and service configuration; we do not promise that all processing remains in the UK.
Where UK data protection law requires a transfer mechanism, transfers must be covered by an applicable adequacy arrangement or appropriate safeguards, such as approved contractual terms. Contact us for information about the safeguards relevant to your information or to request an available copy. Provider privacy notices above explain their international operations.
6. How long information is kept
Scan reports and supporting records are stored to provide report access, investigate errors and support the service. There is currently no fixed automatic deletion period for reports or scan jobs. A scan finishing or a browser tab closing does not delete the stored record.
Retention is assessed by reference to whether a report or monitoring service is still needed, outstanding support matters, applicable record-keeping duties, and the need to establish, exercise or defend legal claims. Contact and payment records may need to be kept separately from scan evidence. Operational logs, provider records and backups can have different retention periods.
You can ask us to delete personal information or a report using the contact details above. Please include the relevant report URL or identifier without adding unnecessary sensitive information. We assess the request, may need to verify your authority, and explain any legal reason that prevents immediate deletion. We do not promise deletion from every backup at the instant a request is received.
7. Report links and security
A report URL contains a unique identifier. Anyone who has that URL may be able to view the report, including a full report once it is unlocked. Report links are not protected by an account login. Keep them private and share them only with intended recipients. Excluding a page from search engines is not access control.
We use HTTPS and application controls to protect the service, but no website, email or storage system can be guaranteed completely secure. Do not submit information that is unsuitable for processing in a public-website assessment. Contact us promptly if you believe a report link or personal information has been disclosed inappropriately.
9. Your rights and complaints
Depending on the circumstances and applicable law, you may ask for access to your personal information, correction, deletion, restriction of processing or a portable copy. You may withdraw consent for processing that relies on consent. These rights can be subject to legal conditions and exemptions.
You have the right to object to processing based on legitimate interests, taking account of your particular situation. Tell us what processing you object to so that we can assess it. Contact hello@minisage.co.uk to exercise your rights. We may request information needed to verify identity or authority and will respond within the applicable legal timeframe.
You may complain to the UK Information Commissioner’s Office or another supervisory authority available to you under applicable law. You do not have to contact us first, although we welcome the opportunity to address a concern.
10. Automated checks and updates
LegalScope automatically evaluates website signals and produces findings and scores. These are website assessments; they are not decisions about individuals that produce legal or similarly significant effects. The methodology page explains how to interpret a score and the limits of automated evidence.
We may update this notice when the service or our processing changes. The date at the top identifies the current version. We will provide further notice of material changes where required. Contact us if you need a previous version or more information about a particular use of data.
Questions about these documents? Contact MINISAGE TECH LTD.