Privacy

Privacy Statement

The following provides detail about Samson Consulting Limited’s Privacy Policy. This policy only applies to Samson Consulting Limited’s own web site. Our site contains links to other sites. We are not responsible for the privacy or the content of other web sites to which we provide links.

Payments By Credit or Debit Cards

None of your credit card details are stored on our system.

Consent

You signify your consent to us collecting and using this information by your use of this web site. Should we elect for any reason to change our Policy, we will publish these changes on the Samson Consulting Limited website.

Information

Samson Consulting Limited collects personal information from visitors to this web site through the use of online forms and e-mails you send to us. We may also collect information automatically about your visit to our web site. In accordance with our obligations under the Data Protection Act 1998, we will under no circumstances give access to your registration information to any third party for any purpose, either commercial or otherwise.

Protection of Your Information?

We have strict security procedures covering the storage and disclosure of your information in order to prevent unauthorized access to comply with the UK Data Protection Acts of 1984 and 1998.

Submissions by you to the Samson Consulting Limited Website

You acknowledge that all of your submissions and postings to the public portion of the website are public and not private information. Always use caution when giving out any personally identifying information about yourself or your household. Samson Consulting Limited specifically disclaims any liability with regard to any actions resulting from your submissions and postings to the public portion of the website. Generally, any communication which you post to the website is considered to be non-confidential.

Cookies

A cookie is a piece of information that is stored on your computer’s hard drive by your web browser. We use this information to create anonymous usage and user interest profiles. This information never includes any information that would identify you personally, nor does it include any information that would be considered sensitive. We use this information only for the purpose of improving the efficiency of our website.

Data Sharing

We will not disclose any of your personally identifiable information except when we have your permission to do so, or when required by law.

Customer Feedback and Complaints

We welcome your questions and comments about privacy issues and the design of our web site. Please email us at info@samsonconsulting.co.uk or write to us at the details on our Contact Us Page.

Disclaimer

We do not endorse or approve the content of any third party site. We shall not have liability in connection with any third party site. We make no warranty or representation about anything contained in or promised by any website referred to in this site or that can be accessed by hyperlink (or otherwise) from this site.

Samson Lead Flow – Privacy Notice for Enquirers and Client Firms

1. Who We Are and Our Role
Samson Lead Flow is a software and marketing platform owned and operated by Samson Consulting Limited (Company No. 05180177, Registered Office: Channel Court, 8 Hill Road, Clevedon, North Somerset, BS21 7NE; ICO Registration No. 00013424962).

When an individual submits an enquiry to one of our client law firms (whether via an on-site chat widget, website form, or telephone call to a dynamic tracking number), the client law firm is the Data Controller of that personal data. Samson Consulting Limited acts strictly as a Data Processor, processing that data in accordance with the law firm’s written instructions and a formal Data Processing Agreement under the UK GDPR and Data Protection Act 2018.

2. Personal Data We Process on Behalf of Client Firms
Depending on how you contact the firm, we may process:

  • Contact details: Name, email address, telephone number, and postal address.
  • Enquiry details: Answers to pre-qualifying questions, descriptions of your legal matter, and automated chat transcripts.
  • Call information: Inbound calling number, time, date, duration, tracking number dialled, audio call recordings, and generated transcripts (where call recording is activated by the firm).
  • Technical and attribution data: Referring source (e.g. Google Ads, organic search), landing page, approximate device type, and visitor session identifiers for marketing attribution.

3. Purpose of Processing
We process this information solely to:

  • Capture, qualify, route, and deliver incoming enquiries to the client law firm;
  • Provide the law firm with real-time alerts, lead tracking, and marketing attribution reports; and
  • Comply with our contractual obligations to our client firms.

We never sell enquirer data, use it for automated profiling, or use it to market Samson Consulting’s own services.

4. Data Retention and Deletion
We operate a strict rolling retention policy:

  • Lead records and linked chat transcripts: Kept for 12 months from capture, then automatically and permanently deleted from our live database. Deleted data is cleared from rolling backup snapshots within 14 days.
  • Call recordings and transcripts: Retained for up to 12 months, matching our telecoms provider’s retention schedule, after which they are permanently deleted.
  • Anonymous chat sessions (no enquiry made): Retained for 90 days for system quality and prompt tuning.
  • Website attribution metrics: Retained for up to 13 months for rolling year-on-year marketing performance analysis.

Client law firms may export their lead records to their internal case management systems at any time or request early deletion.

5. Subprocessors and International Data Transfers
To deliver Samson Lead Flow, we engage selected specialist cloud infrastructure providers acting as subprocessors under strict data protection terms:

  • Lovable Labs Incorporated AB (Sweden/EU): Application hosting and software platform (EEA location; covered by UK adequacy regulations).
  • Supabase Inc. (Ireland/EEA): Database, authentication, and file storage hosted in AWS eu-west-1 (Dublin, Ireland). Covered by UK adequacy with the UK Addendum in place.
  • Cloudflare Inc. (Global Edge Network): Content delivery and edge routing (data in transit only). Transfers protected under Cloudflare’s DPA, the UK IDTA, and certification under the UK Extension to the EU–US Data Privacy Framework.
  • Google LLC (United States / Global): Gemini AI model processing for chat replies via enterprise API. Inputs and outputs are strictly confidential and are not used to train AI models. Transfers covered by Google Cloud’s DPA with the UK Addendum and the UK Extension to the EU–US Data Privacy Framework.
  • Invoco Ltd (United Kingdom): Call tracking, call routing, and audio call recording. Data is hosted strictly in the UK and EEA.
  • Postmark (AC PM, LLC / ActiveCampaign, United States): Transactional email delivery for lead alerts and team notifications. Governed by Postmark’s DPA incorporating the UK Addendum, and certified under the UK Extension to the EU–US Data Privacy Framework.

6. Security Measures
All data in transit is encrypted using modern TLS protocols. Stored data and call audio are encrypted at rest with multi-tenant logical isolation preventing cross-workspace access. Access is restricted to vetted personnel bound by strict confidentiality obligations.

7. Your Rights
Because our client law firm is the Data Controller, enquiries regarding access, rectification, erasure, or restriction of your personal data should be directed to the firm you contacted. Alternatively, you may contact us at info@samsonconsulting.co.uk and we will promptly forward your request to the relevant firm. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.