Privacy Policy

Last updated: 29 June 2026

1. Who we are

CrossGate Legal Ltd is a limited company registered in England and Wales. We provide AI-powered trade risk intelligence services to UK importers. When you use our website or services, we act as the data controller of your personal information.

If you have any questions about this policy or how we handle your data, contact us at admin@crossgatelegal.com.

2. Information we collect

We collect information you provide directly when you:

Submit a supplier verification request through our contact form
Communicate with us by email, phone, or other channels
Sign up for updates or reports

This information includes your name, company name, work email address, phone number, and details about your supplier (company name, registration number, jurisdiction).

We also collect technical information automatically when you visit our website, including your IP address, browser type, operating system, referring URLs, and pages visited. This is collected via cookies and similar technologies.

3. How we use your information

We use your personal information for the following purposes:

To process and respond to your supplier verification requests
To connect you with vetted local counsel where requested
To communicate with you about your inquiry and our services
To improve our website and services through analytics
To comply with legal obligations

4. Legal basis for processing

Under UK GDPR, we rely on the following lawful bases:

Consent: Where you have explicitly agreed to receive communications from us
Contractual necessity: To take steps at your request before entering into a service agreement
Legitimate interests: To operate and improve our services, prevent fraud, and ensure network security
Legal obligation: Where we are required to retain or disclose information by law

5. Data sharing and disclosure

We do not sell your personal data to third parties. We may share your information only in the following circumstances:

With vetted local counsel specifically to fulfil a lawyer referral request you have made
With service providers who help us operate our business (e.g., email hosting, cloud storage) — all bound by contractual data protection obligations
Where required by law, regulation, or legal process

6. International transfers

Your data may be transferred to and processed in countries outside the UK, including Pakistan and China, for the purpose of fulfilling supplier verification requests. Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

7. Data retention

We retain your personal information only as long as necessary to fulfil the purposes for which it was collected, or as required by law. Typically:

Inquiry data: Retained for 12 months after the inquiry is closed
Service data: Retained for the duration of the service relationship plus 6 years
Analytics data: Retained for 26 months

8. Your rights

Under UK data protection law, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (subject to legal obligations)
Object to processing based on legitimate interests
Request restriction of processing
Data portability
Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal)

To exercise any of these rights, email admin@crossgatelegal.com. We will respond within 30 days.

9. Cookies

Our website uses minimal cookies essential for operation and analytics. We do not use advertising or tracking cookies. You can manage cookie preferences through your browser settings.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption in transit (TLS) and restricted access to personal data.

11. Complaints

If you believe we have handled your data inappropriately, please contact us at admin@crossgatelegal.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK data protection regulator.

12. Changes to this policy

We may update this policy from time to time. Material changes will be notified on our website. Continued use of our services after changes constitutes acceptance of the updated policy.