What this notice covers.
Lylo is still in development. This notice describes our current website, research and enquiry activity. It does not claim that live client-matter processing is already operational. Before any live client-data pilot, the relevant firm-specific contracts, data-processing terms, security controls and provider arrangements will need to be documented.
Information we may collect.
- Your name, email address, role and professional experience.
- Research questionnaire responses and feedback.
- Demo, pilot and other correspondence with Lylo.
- Basic technical information generated by website hosting, security or service logs.
How we use it.
- To respond to enquiries and arrange demonstrations.
- To conduct Lylo product research and guide product development.
- To discuss, plan and evaluate potential pilots.
- To operate, secure and improve the website and related services.
The appropriate lawful basis depends on the activity and context. Depending on the circumstances, this may include consent, legitimate interests, or steps taken at your request before entering into a contract.
UK data-protection framework.
Lylo’s current data-protection work is being developed with the UK GDPR and the Data Protection Act 2018 in mind. The Data (Use and Access) Act 2025 amended parts of the UK data-protection regime. The Privacy and Electronic Communications Regulations 2003 also apply in relevant areas such as electronic marketing, cookies and communications services.
Third-party services.
Lylo may use third-party services for functions such as website hosting, email and voice or telephony demonstrations. The voice receptionist is separate from Lylo’s proposed private legal-AI environment. We are documenting the full provider and processor inventory before any live client-data pilot so that firms can understand where information is processed and by whom.
How long we keep information.
We aim to keep personal information only for as long as it is needed for the purpose for which it was collected and for any legitimate legal, security or administrative needs. A formal written retention schedule is being completed before live client-data pilots.
Your rights.
Depending on the circumstances, you may have rights to access personal information we hold about you, correct it, request deletion, restrict or object to processing, and receive certain information in a portable form. You can also make a subject access request (SAR).
For now, privacy and data-rights requests can be sent to joshuasamstrath@gmail.com. You also have the right to complain to the Information Commissioner’s Office if you have concerns about how your personal information is handled.
Further work before live client-data pilots.
Lylo is completing a provider inventory, retention schedule, written data-protection policy, ICO fee/registration assessment, staff training records and firm-specific data-processing documentation. We will update this notice as those arrangements are finalised.