Privacy Policy

Who we are

We are Kali Legal (Monoceros Services Limited, company number 14910705), a fractional legal services provider registered in England and Wales. Our registered address is 167–169 Great Portland Street, 5th Floor, London, W1W 5PF.

This policy explains how we handle personal data in connection with our business: our website, our marketing, and the fractional legal services we provide to clients.

If you have questions about this policy, email us at saman@kali.legal.

Our role in processing personal data

We are the data controller for the personal data described in this policy. This includes personal data about the people we deal with directly: our clients’ contacts, prospective clients, and website visitors.

Where we see or receive personal data about our clients’ employees and other individuals connected to our clients in the course of delivering our fractional legal services, we are acting as processor of that data and the terms of such processing shall be set out under our agreement with the client.

Personal data we collect

• Contact and identity data: name, email address, phone number, job title and organisation, for our contacts, clients and prospective clients.
• Engagement data: personal data contained in documents, correspondence, contracts and other materials we review or produce while delivering legal services, which may include personal data about our clients’ employees and other individuals connected to a client.
• Communications: emails, calls and messages between us and our clients, contacts and suppliers.
• Billing data: contact and invoicing details. We do not store payment card numbers.
• Marketing data: contact details and engagement history for people who sign up to hear from us.
• Website and technical data: we will collect data such as IP address, browser type and usage data automatically, as described in our Cookie Policy at that time.

We do not, as a matter of standard practice, collect special category data, such as health or biometric data.

How we collect personal data

• Directly from you, when you contact us, engage us, apply for a role, or sign up for updates.
• In the course of delivering legal services, from documents and correspondence shared with us by clients or third parties.
• Automatically, through cookies and similar technologies.

How we use personal data and our legal bases

• To deliver our fractional legal services (legal basis: contract, and legitimate interests in providing professional advice)
• To manage our relationship with clients, contacts and suppliers (legitimate interests)
• To respond to enquiries and process new engagements (legitimate interests, and contract once engaged)
• To send marketing updates, with an easy opt-out (legitimate interests for existing contacts, consent for prospects where required)
• To meet our legal and regulatory obligations, including financial record-keeping (legal obligation)

How long we keep personal data

We retain personal information for as long as necessary to provide the services, comply with legal obligations, resolve disputes, and enforce our agreements.

How we share personal data

We do not sell your personal data. We share it only:

• With service providers who support our business, for example IT, hosting, and professional advisers, under appropriate confidentiality and data protection terms
• With regulators, law enforcement or legal advisers, where required or permitted by law
• With a successor entity, in the event of a merger, acquisition or restructuring, with notice to you where possible

A list of the tools and service providers we use is available on request by emailing saman@kali.legal.

International transfers

We are based in the UK. Some of the tools we use are based in the United States. When we transfer personal data outside the UK, we put an appropriate safeguard in place, such as the UK International Data Transfer Agreement, the Standard Contractual Clauses, or reliance on an adequacy decision, depending on the recipient. You can ask us which safeguard applies to a particular transfer by emailing saman@kali.legal.

Cookies

We do not currently utilise any cookies or similar technologies.

AI use

We use AI tools, including tools provided by Anthropic, to help us deliver our services efficiently, for example drafting, reviewing and summarising documents. We only share the minimum personal data necessary with these tools, and we do not use AI to make decisions about individuals without human review. We do not permit these tools to use our data, or our clients’ data, to train their underlying models, subject to the terms we agree with each provider.

Security

We take security seriously. Our measures include encryption of data in transit and at rest, access controls limiting who can see personal data, multi-factor authentication, and regular reviews of our security practices.

Children’s privacy

Our services are for businesses, not children. We do not knowingly collect personal data from anyone under 18. If you believe we have, please email saman@kali.legal and we will delete it.

Your rights

If you are in the UK, you have the following rights:

• Access: ask us for a copy of the personal data we hold about you.
• Correction: ask us to fix data that is wrong or out of date.
• Deletion: ask us to delete your data. We will do so unless we have a legal reason to keep it.
• Restriction: ask us to pause processing your data in certain circumstances.
• Portability: get a machine-readable copy of data you have provided to us, where processing is based on consent or contract.
• Object: object to processing based on legitimate interests at any time. For direct marketing, we will always stop.
• Withdraw consent: where we rely on consent, you can withdraw it at any time.
• Complain: raise a complaint with the Information Commissioner’s Office (ico.org.uk).

To exercise any of these rights, email saman@kali.legal. We will respond within 30 days and may need to verify your identity first.

Changes to this policy

We will update this policy when things change. For material changes, we will let you know via a notice on our website or by email.