Privacy & Cookies
Last updated: 1 September 2026
Who we are
Know Your Rights UK (knowyourrightsuk.com) provides free, general information about UK law. We are committed to collecting as little personal data as possible. You do not need an account to use this site.
Analytics & cookies
We use Google Analytics 4 to understand which guides are most useful so we can improve the site. Analytics cookies are only set after you accept them in our consent banner, until then, Google Consent Mode keeps analytics storage disabled. We have enabled IP anonymisation. You can change your choice at any time by clearing this site's data in your browser. We never sell your data.
Advertising
To keep this site free to use, we are introducing advertising. When ads are shown, our advertising partner Google (through AdSense) and its partners may use cookies and similar technologies to display and measure ads. In the UK and EEA, advertising cookies are only set after you accept them in our consent banner; if you decline, you may still see non-personalised ads. You can read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites and manage ad personalisation at adssettings.google.com. Some of our guides also contain affiliate links, which are clearly marked and may earn us a commission at no extra cost to you.
The guidance assistant (chat)
When you use the chat, the messages you type are sent to an AI provider to generate a response, currently Anthropic's Claude API, with Google's Gemini API as a backup. Please do not enter more personal information than necessary. Conversations are not tied to an account and are not used to build a profile of you. To monitor and improve the quality of the assistant's answers, a copy of chat conversations is kept for up to 30 days and then deleted automatically. We do not attach your IP address, an account, or any other identifier to this copy, although the messages themselves may contain personal details you choose to type, which is exactly why we ask you not to enter more than you need to. Your conversation is also saved in your own browser so you can return to it; use "New chat" to clear it. A short-lived record of recent requests (including your IP address) is held by our rate-limiting provider (Upstash) purely to prevent abuse.
Accounts & the Claim Companion
The Claim Companion is an optional, guided tool that helps you prepare your own benefit claim, mandatory reconsideration, or appeal. You can use it without an account.
Some of what you share with it is information about your health or disability (special category data). You give your explicit consent to us using it by ticking the box before you start, and we use it solely to help you with your own claim. While you are working, everything you tell the Companion stays in your own browser and we do not store it. The conversation itself is sent to Anthropic's Claude API to generate guidance, in the same way as the chat above.
If you choose to save your work, you create a free account with your email address, we send you a one-time sign-in link, so there is no password to remember. Account sign-in is handled by Supabase, which hosts our database in the UK (London). We then store your case, the answers you gave, and the document it produced, so you can return to them later. That storage happens only when you ask for it. Your case data is locked to your account by database security rules so that only you, when signed in, can read it.
You stay in control. Sign in and go to your hub at any time to view or delete your data. The "Delete my account and data" button there permanently removes your account and everything attached to it, your claims, documents, and conversations, straight away. You can also email us and we will do it for you.
Some of what you share with it is information about your health or disability (special category data). You give your explicit consent to us using it by ticking the box before you start, and we use it solely to help you with your own claim. While you are working, everything you tell the Companion stays in your own browser and we do not store it. The conversation itself is sent to Anthropic's Claude API to generate guidance, in the same way as the chat above.
If you choose to save your work, you create a free account with your email address, we send you a one-time sign-in link, so there is no password to remember. Account sign-in is handled by Supabase, which hosts our database in the UK (London). We then store your case, the answers you gave, and the document it produced, so you can return to them later. That storage happens only when you ask for it. Your case data is locked to your account by database security rules so that only you, when signed in, can read it.
You stay in control. Sign in and go to your hub at any time to view or delete your data. The "Delete my account and data" button there permanently removes your account and everything attached to it, your claims, documents, and conversations, straight away. You can also email us and we will do it for you.
Letters & payments
If you choose to buy a formal letter, payment is processed securely by Stripe. We never see or store your card details. Stripe processes your payment information under its own privacy policy.
Your rights
Under UK GDPR you have the right to access, correct, or request deletion of any personal data we hold about you, and to object to processing. If you use the Claim Companion, the quickest way to exercise these rights is to sign in and use the "Delete my account and data" button on your hub, which erases everything immediately; you can also withdraw your consent at any time by deleting your data. If you only browse our guides or use the chat without an account, we typically hold no personal data that identifies you. To make a request or ask a question, email contact@knowyourrightsuk.com or see our contact page.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office, the UK regulator. We would rather you told us first so we can put it right, but you do not have to, and going to the ICO costs nothing.
Why we are allowed to use your data
UK GDPR requires us to have a lawful basis for each thing we do with your data, so here they are in plain terms:
- Consent for analytics and advertising cookies, and for the Claim Companion holding what you tell it about your case. You can withdraw it at any time.
- Performing a contract when you buy a document or a subscription: we cannot deliver it or handle a refund without processing the order.
- Legitimate interests for keeping the site standing up, which means rate-limiting to stop abuse and keeping a short-lived copy of chat conversations to check the guidance is accurate. We keep those for 30 days and no longer.
- Legal obligation for the payment records HMRC requires us to keep.
Where your data goes
Some of the companies that process data for us are based outside the UK, mainly in the United States: Anthropic and Google for the assistant, Stripe for payments, Upstash for rate limiting, and Vercel for hosting the site itself. Our database, held with Supabase, is in the UK.
Where data leaves the UK it is transferred under the safeguards UK data protection law allows, which in practice means the UK International Data Transfer Addendum in each provider's terms. This is the practical reason for the warning further up this page: do not type more personal detail into the chat than your question actually needs.
Changes
We may update this notice as the site evolves. The “last updated” date above always reflects the current version.