Privacy Policy

Legal Merits Limited ("Legal Merits", "we", "our", "us") is a technology company registered in England and Wales. We operate the Bundle-B | Court Bundling Software platform available at https://bundle-b.com (the "Platform"). We are not a law firm and we do not provide legal advice.

When you register and use the Platform, we collect the following categories of information:

Account information: your name, email address, firm name, and password (stored as a hashed credential).

Usage data: bundle creation activity, feature interactions, and session metadata used to improve the Platform.

Documents you upload: PDF files and associated metadata you upload for bundle creation. These are stored on infrastructure provided by Google LLC (Firebase / Google Cloud Platform).

Payment information: billing details are handled entirely by our payment processor (Stripe). Legal Merits does not store payment card data on its own systems.

We use your information solely to:

— Provide and maintain the Bundle-B service.

— Process your subscription and manage your account.

— Send transactional emails related to your account (e.g. password reset, subscription confirmation).

— Improve the Platform based on aggregated, anonymised usage patterns.

We do not sell, rent, or share your personal data with any third party for marketing purposes.

All data uploaded to and processed by the Platform — including your documents, account details, and usage records — is stored exclusively on infrastructure provided by Google LLC through its Firebase and Google Cloud Platform services.

Legal Merits does not operate its own data centres and does not maintain copies of your data outside of these Google-hosted environments.

Google LLC operates data centres in compliance with ISO 27001, SOC 2 Type II, and other internationally recognised security standards. You can review Google's data processing terms at https://firebase.google.com/support/privacy.

By using the Platform, you acknowledge that your data is stored and processed by Google LLC subject to Google's own terms of service and privacy policies.

We implement appropriate technical and organisational measures to protect your data, including:

— All data in transit is encrypted using TLS.

— All data at rest is encrypted by Google Cloud Platform.

— Access to user data is restricted to authorised personnel only.

— Firebase Security Rules are applied to restrict data access to authenticated account holders.

However, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data security incident affecting systems operated by Google LLC (Firebase), Legal Merits Limited's liability is limited to the extent permitted by applicable law. Google LLC bears primary responsibility for the security of infrastructure it operates.

In the event of a data breach affecting your personal data, we will notify you in accordance with our obligations under UK GDPR and the Data Protection Act 2018.

If you are based in the United Kingdom, you have the following rights regarding your personal data:

— Right of access: you may request a copy of the personal data we hold about you.

— Right to rectification: you may request correction of inaccurate data.

— Right to erasure: you may request deletion of your data, subject to our legal obligations.

— Right to restriction of processing: you may request that we limit how we use your data.

— Right to data portability: you may request your data in a structured, machine-readable format.

— Right to object: you may object to processing based on legitimate interests.

To exercise any of these rights, please contact us at info@legalmerits.com. We will respond within 30 days.

The Platform uses strictly necessary cookies to maintain your authenticated session. We do not use tracking cookies or third-party advertising cookies.

We retain your account data for as long as your account remains active. If you close your account, your personal data will be deleted within 90 days, unless we are required to retain it for legal or regulatory purposes.

Documents you upload are retained only for as long as required to provide the service and are deleted upon account closure or upon your request.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the Platform after changes are published constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: info@legalmerits.com

Legal Merits Limited, Registered in England and Wales.