Kestrel, kestrel.legal. Last updated: 18 August 2026.
Kestrel is a pre-launch venture. Kestrel Law Ltd is in formation; until it is incorporated, the data controller is Kestrel's founding team (Shazia Ali, Shahab Ali, Madiha Adil and Shahzad Ali), trading together as Kestrel. When the company is incorporated, we will update this notice and the company will take over as controller.
Contact: privacy@kestrel.legal
The voice demo (/call). When you speak to Kestrel, your microphone audio is sent to OpenAI, our AI provider, to run the conversation in real time. We do not keep the audio or a transcript after the call ends unless you ask us to arrange a lawyer call. OpenAI holds API data briefly (up to 30 days) for abuse monitoring, then deletes it, and does not use it to train its models.
Arranging a lawyer call. If you ask us to set one up, we keep the details you give for that purpose only: your name, phone number, email, address if you give one, and a summary of your matter.
The typed form (/intake). The same: your name, contact details and what happened, stored to arrange the callback you asked for.
Lawyer applications (/lawyers). Your name, email, phone, branch of law, SRA number if admitted, current firm or status, and anything you add, used to assess your application.
Technical basics. Our hosting provider keeps standard server logs (IP address, time, page requested) for security. The public site sets no cookies; one session cookie exists on the staff admin area only.
Please do not include sensitive details, such as health information, in a demo. If your matter summary contains them, we hold them only with your consent, as part of the details you asked us to keep.
Suppliers who process data for us under contract: OpenAI (runs the voice conversation), Railway (hosts the site and database), and Resend (will send our emails once active). We never sell your data, and we share it with no one else unless the law requires it.
Some suppliers process data in the United States. Where that happens we rely on recognised UK transfer safeguards: the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Agreement. Live-service case files will be held under UK data protection law.
You can ask for a copy of your data, have it corrected or deleted, restrict or object to our use of it, take it elsewhere, and withdraw consent at any time. Email privacy@kestrel.legal and we will respond within one month. If you are unhappy, you can complain to the Information Commissioner's Office at ico.org.uk.
We will update this notice when Kestrel Law Ltd is incorporated and again before live legal services begin. The date at the top shows the current version.