Privacy Notice

1. What this service does

Tribunal Intelligence analyses published employment tribunal decisions to provide case intelligence for legal professionals. We extract structured data from judgments published on GOV.UK and present statistical analysis, search, and benchmarking tools through a subscription-based web application.

2. Data controller

The data controller for this service is Andrew Jonathan Hooles trading as Tribunal Intelligence. For any queries about our data processing, please contact privacy@tribunalintelligence.co.uk.

3. Tribunal decision data

All tribunal data is derived from employment tribunal decisions published on GOV.UK under the Open Government Licence v3.0. These are public judicial decisions that GOV.UK has confirmed cannot be removed under GDPR. Our processing of this data does not alter the public nature of the underlying decisions.

4. Personal data within tribunal decisions

The published decisions contain personal data relating to claimants, respondents, legal representatives, and judicial office holders. We process this data as follows:

Claimants: We extract employment details and case outcomes from published decisions for statistical analysis. However, we do not display claimant names anywhere on this service. Cases are referenced as “Claimant v [Respondent]”. Salary information, where extracted, is displayed only in bands (e.g. “£30,000–£40,000”), not exact figures.

Respondent employers: We display employer names, case histories, and outcome statistics. This information is already public and relates to organisations in their capacity as employers. For individual/sole trader respondents, names are displayed as they appear in the published decision.

Employment Judges: We display hearing outcome statistics derived from published decisions. Judges are public officials exercising judicial functions and these statistics reflect the outcomes of public proceedings. Statistics are presented as factual case outcome data, not assessments of judicial quality or performance.

Legal representatives: We record the names and firms of solicitors, barristers, and other representatives as they appear in published decisions, in their professional capacity.

5. User account data

When you create an account on this service, we collect and process the following personal data:

Registration data: Your email address and a securely hashed password. We do not store your password in plain text. We may also collect your name if you choose to provide it.

Subscription and payment data: If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full card details on our systems. We retain your Stripe customer ID, subscription status, plan type, and payment history (dates and amounts) for account management and billing purposes.

Usage data: We log which features you use and searches you perform in order to improve the service and understand which tools are most valuable. This data is associated with your account and is not shared with third parties for marketing purposes.

The lawful basis for processing your account data is Article 6(1)(b) of the UK GDPR (performance of a contract) for registration and subscription management, and Article 6(1)(f) (legitimate interests) for usage analytics to improve the service.

6. Cookies and similar technologies

We use a small number of cookies that are strictly necessary for the service to function:

Authentication cookies: When you sign in, a session cookie is set to keep you logged in across pages. This cookie is essential for the service to work and cannot be disabled while you are signed in. It expires when you sign out or after a period of inactivity.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not use cookies to track you across other websites.

7. Lawful basis for tribunal data processing

We process personal data within tribunal decisions under Article 6(1)(f) of the UK GDPR (legitimate interests). Our legitimate interest is providing legal research and case intelligence tools to the legal profession, promoting transparency in the tribunal system, and enabling evidence-based legal practice.

Where special category data is present in published decisions (such as information about health conditions in disability discrimination cases, or protected characteristics in equality claims), we rely on Article 9(2)(e) — processing of personal data which has been manifestly made public by the data subject through the tribunal process — and Article 9(2)(g) — processing necessary for reasons of substantial public interest in the administration of justice.

8. Data protection measures

We have implemented the following measures to minimise the privacy impact of our processing:

Claimant names are never displayed on this service. Salary information is generalised into bands rather than exact figures. Sensitive personal details from case summaries are not indexed for search — our search functionality operates on structured fields and AI-generated summaries rather than the full text of judgments. We do not store the full text of tribunal judgments on our servers. Judge statistics are framed as factual case outcome data with appropriate caveats about the limitations of published decision data. We link to the original GOV.UK judgment rather than reproducing full judgment text. User passwords are salted and hashed using industry-standard algorithms. All data is transmitted over HTTPS.

9. Third-party data processors

We use the following third-party services to operate this platform. Each acts as a data processor on our behalf:

Supabase — Provides our database and user authentication infrastructure. Our database is hosted in Supabase's London (EU West) region. Supabase processes your account data (email, hashed password, session tokens) and stores all tribunal analytics data. Supabase's privacy policy is available at supabase.com/privacy.

Vercel — Hosts and serves this website. Vercel processes your IP address, browser information, and request data as part of delivering web pages. Vercel's edge network serves content from the nearest location, but serverless functions and logs may be processed in the United States. Vercel's privacy policy is available at vercel.com/legal/privacy-policy.

Stripe — Processes payments for paid subscriptions. If you subscribe to a paid plan, Stripe will process your payment card details, billing address, and transaction data. We do not have access to your full card number. Stripe's privacy policy is available at stripe.com/gb/privacy.

10. International data transfers

Our database is hosted in the United Kingdom (Supabase, London region). However, our website hosting provider (Vercel) may process some request data in the United States as part of its global edge network and serverless infrastructure. Stripe also processes payment data internationally.

Where personal data is transferred outside the United Kingdom, we rely on appropriate safeguards including the UK International Data Transfer Agreement (IDTA) and/or the relevant provider's participation in recognised data protection frameworks. Both Vercel and Stripe maintain standard contractual clauses and comply with applicable international transfer mechanisms.

11. Data retention

Tribunal decision data: We retain extracted tribunal data indefinitely, as the underlying decisions remain permanently published on GOV.UK. If a decision is removed from GOV.UK, we will remove the corresponding data from our service within a reasonable period.

User accounts: We retain your account data for as long as your account remains active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain records for legal or accounting purposes (e.g. payment records, which are retained for 7 years in accordance with HMRC requirements).

Usage data: Aggregated, anonymised usage statistics may be retained indefinitely for service improvement. Individual usage logs associated with your account are deleted when your account is deleted.

12. Your rights

Under the UK GDPR, you have the following rights:

Account holders: You may request access to, correction of, or deletion of your account data at any time. You can delete your account through your account settings, or by contacting us. You may also request a copy of your personal data in a portable format.

Data subjects in tribunal decisions: Under Article 21 of the UK GDPR, you have the right to object to processing based on legitimate interests. If you are a data subject whose personal data appears on this service and you wish to request its removal, please contact us. Please note that as the underlying tribunal decisions remain published on GOV.UK, removal from our service does not affect the availability of the original decision. We will consider each request on its merits, balancing your rights against the public interest in tribunal transparency.

If you are unsatisfied with our response to any data protection request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Contact for data requests: privacy@tribunalintelligence.co.uk

13. Disclaimer

This service provides statistical analysis of published tribunal decisions. It does not constitute legal advice. Case outcome statistics reflect published decisions only and may not be representative of all tribunal outcomes, as not all decisions are published. Users should not rely solely on the information provided here when making legal decisions.

14. Changes to this notice

We may update this privacy notice from time to time to reflect changes in our practices or legal requirements. Where changes are significant, we will notify registered users by email. The “last updated” date at the top of this page indicates when the most recent changes were made.