Privacy policy
How Casey handles enquiry, account, and firm data.
Casey is the firm's first contact. A short chat qualifies the enquiry. After the firm accepts, the fuller account, evidence, and other people come in. This policy explains what data is processed, why it is used, and how responsibility is shared with the firm.
Commitments
How responsibility is shared.
Controller and processor model
The law firm using Casey remains the controller for the underlying matter. Casey acts as a processor on the firm's documented instructions for data hosted in the platform.
Restricted access
Access to lead data is restricted to authorised users within the relevant firm or organisation, with role-based controls and private account links.
Operational safeguards
The service uses logging, database-level access controls, token checks, and public-route safeguards to reduce unauthorised access and support accountability.
Personal data
What is collected and how it is used
Casey only processes personal data to provide the service, support legal case handling, and meet contractual, security, and compliance obligations.
Data we process
- Identity and contact details given in an enquiry or account
- Case references, matter metadata, and firm user details
- Statement responses, signed documents, attachments, and exhibits
- Audit metadata such as timestamps, access activity, and workflow state
How data is used
- Qualify an enquiry, take the fuller account after accept, and support the written draft during review
- Help legal teams manage matters, evidence, follow-up, and review
- Secure, monitor, troubleshoot, and improve the service
- Support compliance, record keeping, retention, and accountability
Rights
Retention, sharing, and individual rights
What stays with the firm
Data should only be retained for as long as necessary for the legal matter, the firm's retention policy, contractual obligations, or other applicable legal requirements. Casey does not sell personal data collected for a lead.
We only share data with service providers and legal users where that is needed to operate the service, secure the platform, or support the firm's instructions. Before an account continues, Casey shows a privacy notice, and that acknowledgement can be recorded against the account.
If you gave an account and want to understand how your personal data is handled, please contact the firm that sent the link. If you are a legal practice evaluating Casey, review this policy alongside your own privacy notices, client-care wording, retention rules, and supplier due-diligence process.
Ready to map Casey to your intake process?
Read this policy alongside the security overview and your own notices before using the service for live matters.