Privacy Policy

1. Introduction

Cora Law ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect information when you visit our website at coralaw.co.uk (the "Website"), watch our YouTube videos, purchase our digital guides, or interact with us in any way.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our Website, you agree to the practices described in this policy.

2. Data Controller

Cora Law is the data controller for personal data collected through this Website. If you have any questions about this Privacy Policy or how your data is handled, you may contact us at: hello@coralaw.co.uk

3. Information We Collect

We may collect the following types of personal data:

Information you provide directly:

• Name and email address (when you subscribe to our newsletter)
• Name, email address, and message content (when you use our contact form)
• Email address (when you complete our quiz and opt in)
• Payment information (processed by Gumroad when you purchase a guide — we do not store payment details)

Information collected automatically:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on the Website
• Referring website URL
• Cookies and similar tracking technologies (see Section 8)

4. How We Use Your Information

We use your personal data for the following purposes:

• To send you our newsletter and legal updates (with your consent)
• To respond to your contact form messages
• To deliver digital products you have purchased
• To improve our Website, content, and user experience
• To analyse website traffic and usage patterns
• To comply with legal obligations

5. Legal Basis for Processing

We process your personal data under the following legal bases as defined by the UK GDPR:

• Consent (Article 6(1)(a)): When you subscribe to our newsletter or submit your email through our quiz
• Contract (Article 6(1)(b)): When you purchase a digital guide from us
• Legitimate Interests (Article 6(1)(f)): To improve our Website and content, and to respond to your enquiries

6. Data Sharing

We do not sell your personal data. We may share your data with the following third parties only as necessary:

• Gumroad: Our digital product platform, which processes payments and delivers purchased guides
• Vercel: Our website hosting provider
• Google (YouTube): When you interact with embedded YouTube videos on our site
• Email service providers: To deliver our newsletter

7. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this policy. Newsletter subscriber data is retained until you unsubscribe. Contact form messages are retained for up to 12 months. Purchase records are retained as required by UK tax law (typically 6 years).

8. Cookies

Our Website uses cookies and similar technologies to:

• Ensure the Website functions correctly (essential cookies)
• Understand how visitors use our Website (analytics cookies)
• Remember your preferences

You can control cookies through your browser settings. Disabling certain cookies may affect your experience on the Website.

9. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at hello@coralaw.co.uk. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our Website uses HTTPS encryption. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. International Transfers

Some of our third-party service providers may process your data outside of the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your data in accordance with UK GDPR requirements.

12. Children's Privacy

Our Website is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when this policy was last revised. We encourage you to review this policy periodically.

14. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Telephone: 0303 123 1113

ico.org.uk

15. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us at: hello@coralaw.co.uk