Privacy notice

1. Who we are

Counsel is a trading name of Whole Bunch Advisory Ltd, a company registered in England and Wales (company number 13128303). We are the controller of your personal data under UK data protection law.

This notice covers counsel-law.com, our launch list, and people we contact about our services, including through LinkedIn. You can reach us at hello@counsel-law.com or by post at our registered office.

2. What we collect

If you join our launch list: your email address, first name and company. You can also tell us your role and details about your legal desk, but you don’t have to.

We keep a record of your consent (the wording you saw, the version of this notice and when you agreed), plus campaign or referral tags showing how you found us.

We don’t store your IP address. To stop abuse of our form, we keep a one-way code derived from it for up to a day.

Please don’t send us confidential information or details of a legal matter through our website. Nothing on this site is legal advice.

If we contact you on LinkedIn: your name, job title, employer, LinkedIn profile link, and the messages we exchange. We get this from LinkedIn and from business data tools that help us find relevant companies and people and check that profiles are up to date.

3. How we use it, and why we’re allowed to

• Launch and news emails. Basis: your consent, which you can withdraw at any time.
• Understanding what you might need from us, using your role and legal desk details. Basis: your consent.
• Keeping consent records and protecting our form from spam. Basis: our legitimate interests in running our list properly and securely.
• Introducing our services to professionals who may find them useful, through LinkedIn messages. Basis: our legitimate interests in growing our business. We only contact people in a business capacity, and you can ask us to stop at any time (see section 7).

We don’t add people we contact on LinkedIn to our launch list unless they sign up themselves.

We use AI tools to help prepare our contact lists and to sort replies to our LinkedIn messages. They don’t make decisions about you with legal or similarly significant effects.

We don’t sell your data or share it for anyone else’s marketing.

4. Who handles it for us

We use a small number of providers, who act only on our instructions under contract:

• Website and launch list: Supabase (database), Vercel (website hosting), Make (sign-up processing) and PostHog (visitor analytics, set up to store nothing on your device and keep no IP addresses).
• Email and documents: Microsoft 365 and Google. Microsoft will send our launch news.
• LinkedIn outreach: HeyReach (sending messages and sorting replies, using OpenAI), Clay (finding relevant companies and people) and Apify (checking profiles are up to date).
• AI assistant: Claude, by Anthropic, which helps us build our website and prepare our outreach lists.

We only disclose your data to anyone else if the law requires it. If our providers change, we’ll update this notice.

5. Where it’s kept

We keep data in the UK where we can, and in the EU where a UK option isn’t available:

• UK (London): our website and launch list database.
• EU: sign-up processing and website analytics. UK law recognises the EU as giving adequate protection.
• United States: our LinkedIn outreach tools, emails and AI assistant.

Where data is transferred to the United States, we protect it with approved safeguards: the UK International Data Transfer Addendum to the EU Standard Contractual Clauses or, where a provider is certified, the UK-US data bridge. Contact us if you’d like more detail.

6. How long we keep it

Launch list: until you unsubscribe or ask us to remove you, or 24 months after our last contact, whichever comes first. After you unsubscribe, we keep only a note of your opt-out so we don’t contact you by mistake.

LinkedIn outreach: 12 months after our last contact, unless you become a client or ask us to keep in touch. If you ask us to stop contacting you, we keep only a note of that so we don’t contact you again.

Rate-limit codes are deleted within a day. If you become a client, we’ll give you a separate notice about how we handle client data.

7. Your rights

Your right to object. Where we rely on legitimate interests, including when we contact you on LinkedIn, you can object at any time. If you object to direct marketing, we will stop, no questions asked. Just reply “stop” to any message or email hello@counsel-law.com.

Where they apply, you also have the right to access, correct, delete, restrict or move your data, and to withdraw consent. Every launch email has an unsubscribe link.

Requests are free and we’ll reply within one month. Email hello@counsel-law.com.

If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.

8. Changes to this notice

If we make material changes to how we use your data, we’ll tell you before they take effect.