Book a Demo

Privacy Policy

Last Updated: 1 November 2025

1. Introduction

Welcome to www.casey.legal, a 108 AI solution. At 108 AI we take a considered approach to privacy and are committed to protecting your personal data with care and respect.

This policy outlines how we process and safeguard your information in accordance with global data protection regulations, including (but not limited to) the General Data Protection Regulation 2016/679 of April 27, 2016 (GDPR), the ePrivacy Directive 2002/58/EC, and other applicable national legislation in force, including any future updates and modifications from time to time.

2. Data Controller

108 AI Ltd, registered in England and Wales under number 15237275, is the data controller responsible for managing your personal data.

3. Data Collection

We collect data to enhance our services and provide you with the best user experience. This includes:

  • Personal details such as your name and job title;
  • Contact information, including email addresses and telephone numbers;
  • Technical data like IP addresses, browser types, and operating systems, which are collected automatically when you interact with our site; and
  • Any documents that you upload on our platform.

If you are making a job application or inquiry and submit a CV or other relevant information, we may use this for considering your application. We may retain this information unless you request otherwise.

The data we collect and how we use it varies depending on your interaction with our services.

Your data is securely stored on servers in the European Union with protections to prevent unauthorised access or disclosure.

4. How We Collect Data

We collect your data through direct interactions (such as registration or communication) and through automated technologies such as cookies.

5. Use of Your Data

We process your data thoughtfully and responsibly to:

  • Deliver, enhance and maintain our services;
  • Personalise and enhance your experience on our website;
  • Verify your credentials;
  • Communicate with you about updates, renewals and offerings; and
  • Ensure the security of our platform and protect against fraud.

For direct marketing via e‑mail, we require your consent via opt‑in or soft opt‑in:

  • Soft opt‑in applies when you have previously engaged with us. We may email you unless you opt out;
  • For other e‑marketing, we require explicit consent via an affirmative action (e.g., ticking a box).

6. Legal Basis for Processing

We handle your data based on:

  • Your consent, which you may withdraw at any time;
  • The necessity of fulfilling our service commitments; and
  • Legitimate interests such as improving services and ensuring platform security.

7. Sharing Your Data

We may share your data only when required with:

  • Our group companies and affiliates to streamline services;
  • Trusted third‑party service providers for operational support;
  • Payment processors for secure transactions; and
  • Legal and regulatory authorities when required by law.

8. Data Retention

We retain personal data only for as long as necessary based on legal and operational requirements.

9. Your Rights

You have rights over your personal data, including the right to:

  • Access, update, or delete the data we hold about you; and
  • Restrict processing or object to how we handle your data.

10. Cookies

We use cookies to optimise website performance. See www.casey.legal/cookies for more information.

11. Security Measures

We use robust technical and organisational safeguards to protect your information from unauthorised access, loss, or misuse.

12. International Data Transfers

We transfer data internationally only where adequate protections are in place.

13. Changes to This Policy

We may update this policy to reflect changes in law or our practices. Please check it periodically.

14. Contact Us

If you have any questions or wish to exercise your data rights, email us at hello@casey.legal.

15. Complaints

If you are unhappy with how we handle your data, contact us. You may also lodge a complaint with a relevant data protection authority.