PRIVACY POLICY
Effective Date: September 28, 2024
Last Updated: March 6, 2026
At Law Spark, we are committed to protecting your privacy and maintaining the confidentiality of your personal information. This Privacy Policy (the “Policy”) describes how Law Needs Tech Inc., doing business as Law Spark, (“Law Spark”, “we,” “us,” or “our”) collects, uses, stores, discloses, and protects personal information in connection with our Services.
1. Application and Scope
This Policy applies to all individuals (“Users,” “you,” or “your”) who access or interact with:
-
our website at www.lawspark.co (the “Website”);
-
our client portal at www.portal.lawspark.co (the “Client Portal”); or
-
our related services, products, communications, and interactions (collectively, the “Services”).
This Policy is also not intended to override any contract you have with us or any rights you may have under applicable data privacy laws.
BY ACCESSING OUR WEBSITE, CLIENT PORTAL, OR USING OUR SERVICES, YOU CONSENT TO THE COLLECTION, USE, DISCLOSURE, AND STORAGE OF YOUR PERSONAL INFORMATION IN ACCORDANCE WITH THIS POLICY. IF YOU DO NOT AGREE, PLEASE DO NOT USE OUR SERVICES.
2. Personal Information We Collect
A. Information You Provide Directly
We may collect personal information you provide to us directly, including:
-
name;
-
email address;
-
phone number, if provided;
-
company, firm, or organization name;
-
meeting booking details;
-
project or service request information;
-
any other information you choose to share when communicating with us.
For clients and authorized portal users, we may also process project details and service requests.
B. Payment Information
If you purchase pre-built solutions or other paid offerings, payments are processed by Stripe. We may receive limited transaction-related information, such as:
-
billing name;
-
billing email;
-
billing address, if applicable;
-
payment status; and
-
limited transaction metadata.
We do not store full payment card numbers.
C. Information Collected Automatically
When you use our Website or Client Portal, we and our service providers may automatically collect certain technical and usage information, including your IP address, browser type, device type, operating system, general location (derived from IP address), pages viewed, referring URLs, and timestamps. This information helps us operate, secure, maintain, and improve our Services.
For more information about cookies and similar tracking technologies, please refer to our Cookie Policy or Cookie Notice, where applicable.
D. Information We Do Not Intend to Collect
We do not intend to collect:
-
sensitive personal information through general website forms;
-
personal information from children under the age of 13; or
-
special categories of personal data, except where specifically and knowingly provided in an appropriate service context and as permitted by law.
3. How We Collect Personal Information
We collect personal information:
-
directly from you when you submit forms, book meetings, request resources, subscribe, purchase, or contact us;
-
automatically through website technologies, analytics tools, and server logs;
-
from service providers and platforms we use to operate our business;
-
through our internal onboarding, intake, and project management processes for client and portal data; and
-
in limited cases, from publicly available business sources or referrals, where permitted by law.
4. Why We Use Personal Information
We may use personal information for the following purposes.
A. To Provide and Operate Our Services
-
Operate lawspark.co and portal.lawspark.co;
-
respond to inquiries and requests;
-
schedule consultations and discovery calls;
-
assess automation needs;
-
provide requested resources;
-
process, fulfill, and support purchases of pre-built solutions;
-
manage client relationships and service delivery; and
-
allow client access to portal content and project information.
B. To Communicate With You
-
Send administrative messages and booking confirmations;
-
respond to messages and inquiries;
-
deliver service-related communications; and
-
send newsletters, updates, and marketing communications where permitted by law or with your consent.
C. To Improve and Secure Our Services
-
Understand website usage and improve performance;
-
troubleshoot issues;
-
maintain security and integrity; and
-
detect, prevent, or investigate fraud, misuse, unauthorized access, or other harmful activity.
D. To Process Payments and Business Transactions
-
Process purchases;
-
manage invoices, payment records, and related accounting functions; and
-
comply with tax, financial reporting, and audit obligations.
E. To Comply With Legal Obligations
-
Comply with legal, regulatory, tax, accounting, and contractual obligations;
-
enforce our policies; and
-
establish, exercise, or defend legal claims.
5. Legal Bases for Processing
Depending on where you are located, our legal bases for processing personal information include:
-
your consent;
-
performance of a contract or steps requested before entering into a contract;
-
compliance with legal obligations; and
-
our legitimate interests in operating, improving, securing, marketing, and administering our Services, where those interests are not overridden by your rights.
Where required by applicable law, we will seek your consent before sending marketing communications.
6. How We Disclose Personal Information
We do not sell personal information.
We may disclose personal information to the following categories of recipients where necessary for the purposes described in this Policy.
A. Service Providers
We may share personal information with trusted vendors and service providers that help us operate our Services, such as:
-
Wix – website hosting and infrastructure; Wix may collect technical data such as IP addresses, cookie data, and usage statistics when you visit our Website;
-
Calendly – appointment scheduling; Calendly may collect your name, contact information, and appointment details;
-
Typeform – forms, surveys, and assessments; Typeform may collect information you submit through our forms;
-
Stripe – payment processing; Stripe collects and processes payment information necessary to complete transactions and adheres to strict data security standards;
-
Softr – client portal infrastructure;
-
Mailchimp or similar tools – email and marketing communications;
-
Wix Analytics – website analytics; and
-
project management, CRM, operations, bookkeeping, or cloud software providers we use internally.
Each service provider is authorized to use personal information only as necessary to provide services to us or as otherwise permitted by law. We encourage you to review each provider’s privacy policy for further information.
B. Professional Advisors
We may share personal information with our legal, accounting, tax, insurance, or compliance advisors where reasonably necessary.
C. Legal and Safety Reasons
We may disclose personal information where required or permitted by law, including to comply with legal process or lawful requests from public authorities, to protect our rights, safety, property, and systems, to investigate fraud or security issues, or in connection with legal claims or dispute resolution.
D. Business Transfers
If we are involved in a merger, acquisition, reorganization, sale of assets, financing, or similar business transaction, personal information may be disclosed as part of that process, subject to appropriate safeguards where required by law.
We do not sell personal information and do not knowingly share personal information for cross-context behavioural advertising.
7. Newsletter and Marketing Communications
We may offer newsletters, updates, or similar communications. If you subscribe, we may use your name and email address to send those communications. You may unsubscribe at any time by:
-
clicking the unsubscribe link in any message; or
-
contacting us at anja@lawspark.co.
Even if you opt out of marketing communications, we may still send transactional or service-related messages where necessary.
8. Retention of Personal Information
We only retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide Services, maintain business and client records, comply with legal and regulatory requirements, resolve disputes, and enforce agreements.
Unless a longer period is required or justified by law, we generally aim to retain relevant records for no longer than seven (7) years, subject to the nature of the information. For example:
-
inquiry or lead information may be retained for follow-up, relationship management, and recordkeeping;
-
newsletter information may be retained until you unsubscribe or request deletion, subject to lawful recordkeeping obligations; and
-
client and transaction records may be retained for legal, accounting, tax, and contractual purposes.
9. Security
We use reasonable administrative, technical, and organizational measures appropriate to the nature of the information to help protect personal information against unauthorized access, use, loss, alteration, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
10. Your Privacy Rights
Depending on where you are located, you may have the following rights regarding your personal information, subject to legal limitations and exceptions:
-
request access to personal information we hold about you;
-
request correction of inaccurate personal information;
-
request deletion of personal information;
-
withdraw consent where processing is based on consent;
-
object to or request restriction of certain processing;
-
request portability of certain personal information, where applicable; and
-
lodge a complaint with a privacy regulator.
To exercise your rights, please contact us at anja@lawspark.co. We may request information necessary to verify your identity before responding to your request.
11. Additional Information for California Residents
If you are a California resident, you may have rights under California privacy law, subject to exceptions, including the right to:
-
know what categories of personal information we collect, use, disclose, and retain;
-
request access to specific pieces of personal information;
-
request deletion or correction of personal information;
-
receive information about our sources, purposes, and disclosure practices; and
-
not be discriminated against for exercising your privacy rights.
Categories of Personal Information Collected
Depending on your interactions with us, we may collect:
-
identifiers, such as name, email address, IP address, and online identifiers;
-
commercial information, such as records of products or services purchased;
-
internet or other electronic network activity information;
-
general geolocation information derived from IP address;
-
professional or employment-related information, such as company or firm details; and
-
inferences drawn from assessment responses or interactions related to business needs.
Authorized Agents
Where permitted by applicable law, you may designate an authorized agent to make a privacy request on your behalf. We may require proof of authorization and identity verification before fulfilling such requests.
12. Additional Information for Individuals in the EEA, UK, and Similar Jurisdictions
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar rights, you may have the right to:
-
access your personal data;
-
rectify inaccurate personal data;
-
erase personal data in certain circumstances;
-
restrict or object to processing;
-
request data portability in certain circumstances;
-
withdraw consent where processing is based on consent; and
-
lodge a complaint with a relevant supervisory authority.
We process personal data only where we have a valid legal basis, as described in Section 7 above.
13. Third-Party Links and External Services
Our Website, Client Portal or Services may contain links to or integrations with third-party websites, booking tools, forms, payment pages, and other external resources. We are not responsible for the privacy, security, or content practices of those third party platforms. We encourage you to review their privacy policies before providing personal information.
14. Changes to This Privacy Policy
We may update this Policy from time to time to reflect changes in our business, Services, technologies, legal requirements, or privacy practices. When we do, we will post the updated version on our Website and update the “Last Updated” date at the top of this document. Your continued use of our Services after an update becomes effective constitutes your acknowledgment of the revised Policy, to the extent permitted by law.
15. Contact Us
If you have questions, requests, or complaints regarding this Policy or our privacy practices, please contact:
Law Needs Tech Inc.
Attn: Privacy Officer – Anja-Sara Lahady
Email: anja@lawspark.co
