Privacy Policy
Last updated: February 2026
Summary: We collect only what's needed to generate your documents. We don't sell your data. You can request deletion at any time.
1. Who We Are
This policy explains how we collect, use, and protect your personal information when you use worktribunal.co.uk.
2. What We Collect
Contact information: Name, email address, postal address, phone number (optional)
Employment details: Employer name and address, job title, employment dates, employment status
Claim details: Claim type, grounds, description of events, timeline, incident date, ACAS certificate number
Payment: Processed by Stripe — we don't store card details
3. How We Use Your Data
- Generate your Particulars of Claim and supporting documents
- Process payments through Stripe
- Send your documents by email
- Allow you to retrieve your documents later
- Provide customer support
We do not use your data for marketing, profiling, or any purpose unrelated to providing the service.
4. Legal Basis (UK GDPR)
- Contract: To provide the service you purchased (document generation, delivery, retrieval)
- Legal obligation: To retain payment records as required by UK tax and accounting regulations
5. Who We Share Data With
Stripe: Payment processing
Anthropic: Document generation (your claim details are processed to generate your documents)
OpenAI: Backup document generation if our primary provider is unavailable
Resend: Email delivery
Cloudflare: Hosting and security
We do NOT sell your data to third parties.
6. Data Retention
- Claim data (employment details, claim details, generated documents): 90 days
- Payment records: 7 years (legal requirement)
You can request early deletion at any time.
7. Your Rights
Under UK data protection law, you have the right to:
- Access — request a copy of your data
- Rectification — correct inaccurate data
- Erasure — request deletion
- Portability — get data in machine-readable format
- Object — object to certain processing
Contact: support@worktribunal.co.uk
8. Cookies
We use essential cookies only:
- Session cookies for form progress
- Cloudflare security cookies
We don't use tracking, analytics, or advertising cookies.
9. Security
- All data encrypted in transit (HTTPS/TLS)
- Payment processing by Stripe (PCI-DSS Level 1 certified)
- Claim data automatically deleted after 90 days
- Access restricted to authorised personnel only
10. Complaints
If unhappy with how we've handled your data, you can complain to:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113