Privacy notice
Your privacy matters to us, and we understand that many of the matters you bring to us are deeply personal. This notice explains what information we collect, why, and how we keep it safe.
Last updated 29 September 2026
Who we are
The data controller responsible for your personal information is LawFiq Ltd, a company registered in England and Wales under company number 17408508. Registered office: Conductor, 8 Westfield Avenue, London E20 1NW.
Contact for anything about your personal information: info@lawfiq.com or 020 3930 1088.
Our partner firm, Invictus Law (Invictus Professionals Ltd), may carry out regulated legal work for you. For that work Invictus Law is a separate controller, and its own privacy notice applies.
The information we collect
- Contact details: your name, phone number, email address, town, preferred language, and when it is safe to contact you.
- What you tell us about your matter: in enquiries and online applications, for example details of your marriage, divorce, family, estate, business or dispute.
- Information about other people that you give us, such as a spouse, family members, heirs or the other party in a dispute.
- Technical information: a scrambled (hashed) version of your internet address, and a delivery log for each form (see “How our website forms work”).
Nothing you enter into our free tools (the nikah check and the faraid calculator) is saved or sent to us.
Sensitive information
Because of the services we offer, the information you give us may include special category information under UK data protection law: in particular information that reveals your religious beliefs, and sometimes information about your health or sex life. Information you give us about abuse or harm may also include information about criminal offences or allegations.
We only ask for what we need, and we handle this information under the conditions set out in the table below.
How we use your information, and the legal basis
We only use your information for the purposes below. We do not use it for marketing, and we do not sell it.
| Why we use it | Information | Legal basis (UK GDPR Article 6) | Condition for sensitive information | How long |
|---|---|---|---|---|
| Responding to your enquiry | Contact details; what you tell us | Article 6(1)(b): steps you ask us to take before providing a service | Article 9(2)(a): your explicit consent, given when you press “Agree and send” | See “How long we keep it” |
| Handling an online application (Islamic divorce, will instructions, mediation, expert instructions) | Contact details; your answers; information about other people | Article 6(1)(b): steps before, and performance of, a service you ask for | Article 9(2)(a): your explicit consent, given when you press “Agree and send”. For expert instructions, and where a matter may lead to court, we also rely on Article 9(2)(f) (legal claims). | See “How long we keep it” |
| Information about other people in your matter (for example your husband or other heirs) | Names and contact details you provide | Article 6(1)(f): legitimate interests in dealing with your matter fairly | We limit sensitive information about other people to what your matter needs. Where we hold it, we rely on Article 9(2)(f) (legal claims) if the matter may lead to legal proceedings. Otherwise we rely on the safeguarding condition below where there is a risk of harm. | As for your matter |
| Keeping people safe (safeguarding) | Answers about safety; information you give us about abuse or harm | Article 6(1)(d): vital interests, where someone’s life or safety is at serious risk; otherwise Article 6(1)(f): legitimate interests in protecting people from harm | Data Protection Act 2018, Schedule 1, paragraph 18 (safeguarding), under our appropriate policy document. Article 9(2)(c) (vital interests) where the person cannot give consent. | As for your matter |
| Protecting our website and forms from misuse | Hashed internet address; delivery log | Article 6(1)(f): legitimate interests in keeping the service secure and working | Not applicable | 24 hours (hashed address); 12 months (delivery log) |
| Referring regulated legal work to Invictus Law, if you ask us to | Contact details; relevant matter details | Article 6(1)(b): steps you ask us to take | Article 9(2)(a): your explicit consent | As for your matter |
| Handling a complaint | Your complaint and related records | Article 6(1)(f): legitimate interests in resolving complaints and improving our service | Article 9(2)(f): legal claims, where the complaint contains sensitive information | 6 years after the complaint is closed |
Where we rely on your explicit consent, you can withdraw it at any time by contacting us. This does not affect anything we did before you withdrew it, but we may not be able to continue helping you with that matter.
How our website forms work
When you send a form, it goes over an encrypted connection to our website server. From there it goes to our Microsoft 365 account. Our team reads it by email and it is kept in our records.
To keep the forms working and to stop misuse, our website server also keeps:
- a delivery log with the time, the type of form, its reference and whether it was delivered. It contains no names, contact details or answers, and is kept for 12 months;
- a scrambled (hashed) version of your internet address, used only to limit repeated submissions, and deleted after 24 hours;
- if a form cannot be delivered straight away, an encrypted copy of it, kept only until it is delivered and then deleted.
How long we keep it
- Hashed internet address (spam protection): 24 hours.
- Website delivery log: 12 months.
- Undelivered form copies: until delivered, then deleted.
- Enquiries that do not lead to further work: 12 months after our last contact with you.
- Records of matters we handle (applications, advice, mediation and safeguarding records): 6 years after the matter ends.
- Scholars’ panel decisions and certificates: a record of each decision and certificate is kept for 25 years, so that we can confirm it later if you or an authority asks (for example on remarriage or inheritance).
- Expert instructions and opinions: 6 years after the proceedings or our work ends, whichever is later.
- Complaints: 6 years after the complaint is closed.
When a period ends, we delete the information or anonymise it.
Who we share it with, and where it is stored
We share your information only where needed for the purposes above:
- Microsoft (Microsoft 365: Outlook, SharePoint and Power Automate) stores and delivers our email and records as our processor. Under Microsoft’s product terms, our email and SharePoint content is stored in the United Kingdom, where our account is set up. Some supporting services may process data in other locations under Microsoft’s Data Protection Addendum.
- Hostinger hosts our website and its form server as our processor. Hostinger International Ltd is based in Cyprus, and Hostinger stores and processes data in the United Kingdom, the Netherlands, Lithuania and Cyprus.
- Invictus Law, our partner law firm, if you ask for regulated legal work. It acts as a separate controller.
- Interpreters who help us advise you in your language, under a duty of confidentiality.
- The police or other authorities, only where the law requires it or someone is at serious risk of harm.
Transfers outside the UK: transfers to the European Economic Area are covered by UK adequacy regulations. If Hostinger or its sub-processors move data outside the UK and the EEA, its data processing agreement uses the EU standard contractual clauses with the UK International Data Transfer Addendum. Where Microsoft processes data outside the UK, the safeguards in Microsoft’s Data Protection Addendum apply.
Confidentiality and legal privilege
We keep what you tell us confidential, and share it only as our privacy notice explains: with your agreement, with the people handling your matter, where someone is at risk of serious harm, or where the law requires it.
Legal professional privilege. LawFiq is not a law firm, so what you tell LawFiq is not protected by legal professional privilege. Privilege can apply to communications with a solicitor at our partner firm, Invictus Law, when they are advising you on regulated legal work.
If you contact us on WhatsApp
WhatsApp is run by WhatsApp (Meta). If you message us on WhatsApp, WhatsApp handles your messages and your account information under its own terms and privacy policy, not ours. Messages are end-to-end encrypted, but WhatsApp still collects information such as your phone number and when you use the service.
Only use WhatsApp to contact us if your phone is private and safe for you to use. If you are not sure, call us or use the form on this website instead.
Ask LawFiq, and AI summaries of enquiries
Ask LawFiq. Our Ask LawFiq page searches our published guidance inside your own browser. Your question is not sent to us or to anyone else, and it is not stored.
Summaries for our team. When you send an enquiry or application, its contents may also be sent to Anthropic. Anthropic produces a short summary for our team, showing how urgent it is and flagging any possible safeguarding concern. A member of our team always reads your full enquiry; the summary only helps us respond quickly and safely. The legal basis is our legitimate interest in handling enquiries efficiently and safely, and, for sensitive information, the explicit consent you give when you press “Agree and send”.
Anthropic processes this information on our behalf, under its commercial terms, which do not permit it to use the information to train its models. Anthropic is based in the United States, so this involves a transfer outside the UK, protected by the safeguards in its data processing terms.
Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you and receive a copy;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information, where there is no longer a good reason for us to keep it;
- ask us to restrict how we use your information, for example while a correction is checked;
- object to our use of your information where we rely on legitimate interests;
- receive information you gave us in a portable format, where we rely on your consent or a contract and use it by automated means;
- withdraw your consent at any time, where we rely on consent.
We do not make decisions about you by purely automated means.
To use any of these rights, email info@lawfiq.com. There is usually no charge. We will reply within one month. If your request is complex we may need up to two more months, and we will tell you within the first month. We may need to confirm your identity first. Some rights have exceptions, and we will explain if one applies.
Cookies
Our website does not set cookies, and it does not use analytics, advertising or tracking tools. See our cookie policy.
Complaints
If you are unhappy with how we have used your information, please contact us first at info@lawfiq.com. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113.