Plain-English privacy.

Effective date: July 14, 2026. Lawthentics Limited (“we,” “us”) operates lawthentics.com. This policy describes what information we collect through this website and how we use it.

What we collect

Contact form. Name, firm name, email address, phone number, and anything you write in your message.

Free SB 37 scan. The website address you submit, your email address, your IP address, your browser's user-agent string, and your confirmation that you're authorized to request the scan. The scan itself reads only the public pages of the website you submit.

Free ad exposure check. Your email address, your answers to the nine questions about your firm's marketing, and your IP address. Nothing is scanned — the summary is computed from your answers alone.

Payments. Audit payments are processed by Stripe on Stripe's own pages. We never see or store your card number. Stripe's handling of your payment details is governed by Stripe's privacy policy.

Analytics (only if you accept). If — and only if — you click “Accept” on the cookie banner, Google Analytics records which pages are visited, roughly where visitors come from, and what device and browser they use. It runs in aggregate: we look at pages, not people. If you decline, none of it is collected.

How we use it

To deliver what you asked for: scan and exposure-check results to your email, replies to your enquiries, and audit reports to audit customers. If you run a free scan or exposure check, we may follow up by email about our compliance services. That's it — we do not sell your information, and we do not share it with anyone for their marketing.

Who processes it for us

Service providers that run parts of this site under our instructions: Cloudflare (hosting, security and scan infrastructure), Resend (email delivery), Stripe (payments), and Google (analytics if you accept it, and automated classification of scan findings — only excerpts of the public web pages being scanned are sent, never your contact details). Each receives only what it needs to do its job.

Cookies — one question, honestly answered

Cookies that just make the site work (no consent needed, nothing tracked): Cloudflare Turnstile sets a functional cookie on the free-scan and exposure-check forms to block bots, and if you answer the cookie banner we set a single lx_consent cookie so we don't ask you again. Neither identifies you or follows you anywhere.

The one optional cookie: Google Analytics (cookies named _ga and _ga_…) — and it only exists if you click “Accept” on the banner. Decline, or simply ignore the banner, and analytics never loads; the site works exactly the same. You can change your mind any time via “Cookie Preferences” in the footer — declining after accepting also removes the analytics cookies we can reach.

Privacy signals: if your browser sends a Global Privacy Control signal, we treat it as an automatic “Decline” and don't even show you the banner. Older “Do Not Track” signals never got a settled meaning, so we do something stricter instead: analytics simply never runs without your explicit consent. There are no advertising trackers on this site, and we don't track you across other sites.

Retention & your choices

Scan records and enquiries are kept while they're useful for delivering and improving the service, then deleted. You can ask us to review, correct, or delete the information we hold about you — email [email protected] and we'll respond within a reasonable time.

Your California privacy rights

Wherever you are, but especially if you're a California resident, you can ask us: what information we hold about you, to correct it, or to delete it. Email [email protected] with your request; we may need to verify it's really you before acting on it, and we'll never treat you differently for exercising these rights. We do not sell your personal information, and we do not share it with anyone for cross-context behavioral advertising — so there's nothing to opt out of on that front.

Changes

If this policy changes, we'll post the new version here with a new effective date. Material changes will be noted on this page.

Lawthentics Limited is a marketing agency, not a law firm. Nothing on this site is legal advice, and submitting a form here does not create an attorney-client or agency relationship.