1. About this policy
This policy explains how the AskLex team (“Lex”, “we” or “us”) handles information on our public website, asklex.law, and the lex.lk addresses that lead to it. It covers browsing, the legal heritage journey, and support and callback requests.
Account-based research, Chambers, Lex Translate and the WhatsApp assistant involve additional processing. Review the information provided within the relevant service before submitting research queries, client records or documents. This public-site policy does not promise particular retention, AI-training or hosting arrangements for those services. Contact us if you need those details before using them.
2. Information you provide
When you send a support request, we receive your name, email address, subject, message and any phone number you provide. A callback request includes your contact details and the callback information you enter. We use these details to respond and follow up on your request.
Only include information needed to explain the issue. Do not send passwords, access tokens, payment-card details, privileged documents or unnecessary client information through a public contact form.
3. Browsing and service information
Delivering and protecting the website involves technical information such as IP addresses, requested URLs, browser information and request timing. Our hosting and delivery provider, Cloudflare, processes connection information to serve the site and help protect it.
The contact endpoint uses a time-limited, keyed identifier derived from an IP address to count submissions and reduce abuse. The rate-limit database stores identifiers, counts and expiry times, rather than the message itself. This does not mean an IP address is absent from infrastructure or provider logs.
4. Cookies, analytics and local storage
The site uses Google Analytics to measure page visits and completion of the heritage journey. Analytics can use cookies and browser/device information. Our analytics configuration disables Google signals and advertising-personalisation signals. The page-view event we configure uses the page address without its query string; we do not deliberately include contact-form messages in that event.
Analytics currently loads automatically; this website does not present a consent-choice banner. Browser settings, tracking protection and content blockers can limit it. For Google’s handling of information, read Google’s Privacy Policy.
Browser storage remembers journey progress and display preferences, including whether you have seen the walkthrough. Clearing site data removes stored preferences and may cause the introduction to appear again. Session storage also supports transitions between the journey and content pages.
The navigation can check your existing Lex account session to decide whether to display an app shortcut. This check returns only a signed-in or signed-out result to this website, is not cached, and does not share your name, email address or account token with the page. Access to each app remains governed by that app’s sign-in controls.
5. How information is used
- To deliver the website and remember your browsing preferences.
- To respond to support enquiries and callback requests.
- To understand website use and improve navigation and content.
- To detect abusive submissions and investigate technical or security problems.
- To handle applicable legal requirements and requests concerning your information.
Submitting a support form is a request for assistance; it is not a request to publish your message.
6. Providers and international processing
The public site uses Cloudflare for hosting and delivery, Resend to send form submissions by email, and Google Analytics for website measurement. Support correspondence is also handled through the team’s email service. These providers process information needed for their respective functions.
When you submit a form, its contents are sent through Resend to the support team, with your email address used for replies. Information may be processed outside Sri Lanka through these services. We do not describe the public site as hosted exclusively in Sri Lanka.
We may need to disclose relevant information to respond to applicable legal obligations or investigate misuse. For provider information, see Cloudflare’s Privacy Policy and Resend’s Privacy Policy.
7. Retention
Support messages become email correspondence and may remain in the support mailbox, email-provider records and backups. Website and analytics records are subject to the relevant service settings and provider retention arrangements. We do not promise a universal 30-day deletion period.
Contact rate-limit entries expire at the end of their hourly window. Expired entries are removed when subsequent submissions trigger cleanup, so expiry does not guarantee immediate physical removal. Journey preferences remain in your browser until cleared or changed by the site.
Contact us to ask about retention or request deletion of information associated with an enquiry. We will explain any information that needs to remain for an unresolved request, security investigation or applicable legal requirement.
8. Your choices and requests
You can ask the team about information associated with your enquiries, request corrections, or request access or deletion where applicable. You can also ask us to explain the handling of information before you use a linked product.
Email [email protected] with “Privacy request” in the subject and enough context to identify the request. We may need to verify your identity before disclosing or changing information. Do not send identity documents unless the team explains why they are needed and how to provide them securely.
Rights and any exceptions depend on the law applicable to your circumstances. You may raise concerns with the relevant data protection authority; in Sri Lanka, information is available from the Data Protection Authority.
9. Security and confidential material
The public site uses HTTPS and browser security controls, and the contact endpoint validates submissions and limits abuse. Read our Security Policy for the scope of these controls and how to report a concern.
No online service can guarantee absolute security. Before sharing confidential or privileged material with an AskLex product, confirm that the service’s data handling and your professional obligations allow it. Do not assume that a public website privacy notice creates legal professional privilege.
10. Links to other services
Following a link to Chambers, Lex Translate or WhatsApp takes you to a separate service with its own workflow and data handling. WhatsApp is operated by Meta; a conversation with the AI assistant is different from a support email to our team.
External websites linked from our pages apply their own privacy practices. Review the relevant notices before providing information.
11. Updates and contact
We will update this page when the public site’s described practices change. The date above identifies the current version.
For privacy questions, contact the AskLex team at [email protected] or use our contact page. Please identify the product or website your question concerns.
