Privacy
Privacy
notice.
How we collect, use and protect your personal information, and the rights you have. Last updated 4 November 2026.
1. Who we are
The Future Lawyer is run by Rifat Sheikh, trading as The Future Lawyer, based in London. Rifat Sheikh is the controller of the personal information described here. Contact: [email protected] or the enquiry form.
2. What we collect, why, and for how long
| What | Information | Why | Lawful basis | How long |
|---|---|---|---|---|
| Enquiries, call and Zoom bookings | Name, email, phone (if you choose an audio call), organisation, role, your message, preferred times | To reply and arrange the call | Legitimate interests; or steps before a contract at your request | Two years after our last contact |
| Free resource library | Name, email, location, the description you choose, organisation (optional), which resources you download | To give you the resources and keep a record of downloads | Legitimate interests | Two years after your last download |
| Free updates | Name and email | To send news about new resources, events and programmes | Consent (tick box). Withdraw at any time | Until you unsubscribe |
| Coaching and payments | Name, email, booking details, payment confirmation (Stripe holds your card details) | To deliver the session and keep accounts | Contract; legal obligation for accounting records | Six years for financial records |
| The Hub (programme students) | Name, university email, attendance, uploaded evidence, Skills Record | To run the programme and record your skills | Contract, or legitimate interests where your university books the programme | Programme duration plus one year, unless you ask us to keep your Skills Record longer |
| Firm reader and website use | Technical data such as IP address, used briefly to limit requests | To keep the service secure and fair | Legitimate interests | Short-lived logs held by our hosting provider |
We only ask for what we need. Please do not send confidential client matters or sensitive personal information, such as health details, through the forms.
3. Who handles your information for us
We use trusted service providers who act on our instructions:
- Cloudflare: website hosting and our database.
- Web3Forms: delivers form submissions to us by email.
- Our email provider: our mailbox.
- Stripe: payments. Stripe processes your card details; we never see them.
- Zoom: video calls, under Zoom's own terms.
- MoodleCloud: The Hub, hosted in the EU (Ireland).
- Anthropic: an AI assistant that helps Rifat draft replies and organise bookings. Rifat reviews every reply before it is sent, and no decision about you is made by AI alone.
When you study through your university, the university may also receive attendance and Skills Record information under its agreement with us. We do not sell your information or share it for advertising.
4. Transfers outside the UK
Some providers above process information in the United States or the EU. Where they do, the transfer is protected by UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or by the UK International Data Transfer Agreement or Addendum.
5. Your rights
You can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. You can withdraw consent to updates at any time using the unsubscribe link or the enquiry form. We reply within one month. You also have the right to complain to the Information Commissioner's Office (ICO), at ico.org.uk/make-a-complaint, although we would welcome the chance to put things right first.
6. Cookies and browser storage
We do not use analytics, advertising or tracking cookies, so we do not show a cookie banner. When you unlock the resource library, we set one strictly necessary cookie (tfl_dl, kept for 12 months) so the resources stay open for you. The site also stores small settings in your browser, such as where you were on a page and answers to self-checks, which never leave your device.
7. Age
Our services are designed for adults: university students, graduates and professionals. If you are under 18, please ask a parent, guardian or your school or university careers team before sending us your details.
8. Security
Information is sent over encrypted connections and stored with access limited to Rifat. Resources are opened by a secure token rather than by your email address.
9. Changes
We will update this notice when how we use information changes. The date at the top shows the latest version.