Privacy Policy
Last updated: April 2026
Who we are
Kestrel is operated by Kestrel Solutions Limited, registered in England and based in Newcastle-upon-Tyne. We are the data controller for personal data processed through the Kestrel platform.
What we collect
Free tools (no account): We do not collect personal data when you use our free tools without signing in. Calculations and document generation happen in your browser.
Account holders: When you create an account, we collect your email address, display name, and business details you choose to provide.
Dispute resolution: When you file or respond to a dispute, we process the information you submit, including evidence files and communications.
How we use your data
We process your data to provide our dispute resolution and business tools services. Our lawful basis is legitimate interests (providing the service you signed up for) and, where appropriate, your consent.
We do not use your data for marketing, sell it to third parties, or use it to train AI models.
Data retention
Account data: Retained for the lifetime of your account plus 30 days after deletion.
Dispute records:Retained for 6 years after dispute closure (England & Wales limitation period for contract claims).
Unsigned documents: 90 days for unauthenticated users.
Your rights
Under UK GDPR, you have the right to access, correct, delete, and port your personal data. You can exercise these rights through your account settings or by contacting privacy@kestrel.law.
Third parties
We use Supabase (database and authentication), Vercel (hosting), and Resend (transactional email). All have signed data processing agreements. Your data is stored within the EU/UK.
Contact
For data protection enquiries: privacy@kestrel.law