Designed to support compliance with UK GDPR and the Data Protection Act 2018.
Bohus Global Ltd · Platform Privacy Policy
Last updated: 16 August 2026
1.1 This Privacy Policy is issued by Bohus Global Ltd, a company registered in England and Wales (No. 17126389), whose registered office is at 14/2e Docklands Business Centre, 10-16 Tiller Road, London, England, E14 8PX (the "Company"), trading as Bohuš Global™.
1.2 The Company acts as the data controller in respect of personal data processed through the Platform.
2.1 This Policy applies to all personal data processed in connection with access to and use of the Bohuš Global™ Platform, including any document, dossier, bundle, analysis, workspace, extraction, classification, formatting, output-generation, or related system functionality.
2.2 The Platform may be used for legal, governance, commercial, institutional, operational, evidential, correspondence, or other structured-record workflows. This Policy applies wherever personal data is submitted, uploaded, generated, connected, analysed, stored, or otherwise processed through the Platform.
2.3 By accessing or using the Platform, you acknowledge that personal data may be processed in accordance with this Policy.
The Company may collect and process the following categories of data:
3.1 Account and Identity Data
3.3 Technical and Usage Data
Personal data is processed for the following purposes:
Processing is carried out on one or more of the following legal bases under UK GDPR:
Data may be processed, stored, transmitted, secured, monitored, or made available through third-party infrastructure and service providers, including:
6.1 These providers may act as processors, sub-processors, or service providers on behalf of the Company, subject to appropriate contractual, organisational, and technical safeguards.
6.2 The underlying infrastructure used by these providers (for example, the cloud platforms they themselves rely on) is governed by those providers' own data processing terms and subprocessor lists; the Company does not contract directly with those underlying providers.
6.3 The Company seeks to use reputable providers and proportionate safeguards appropriate to the nature of the Platform and the processing undertaken.
7.1 The Platform operates as a structured processing system. Processing is deterministic, rules-based, or automated where possible, including upload, storage, ordering, pagination, indexing, bundle generation, metadata handling, case-intelligence structuring, output preparation, account controls, billing status, retention, deletion, and export functions.
7.2 User documents and materials are processed by the Platform's contracted storage, database, infrastructure, and document-processing systems for the purpose of providing the requested Services, including dossier, bundle, indexing, metadata, case-intelligence, and output functionality.
7.3 The Platform processes documents deterministically, rules-based, or automatically where possible. Where required to provide the requested Services, document text, metadata, excerpts, or user-provided instructions may be processed using AI-assisted interpretation, extraction, classification, suggested placement, relationship mapping, consistency review, summarisation, drafting, output generation, ambiguity resolution, or similar intelligence processing.
7.4 Where AI-provider processing is required for the requested Services, selected text excerpts, metadata, or user-provided instructions may be transmitted to one or more third-party AI processing providers only to the extent required to provide that functionality.
7.5 AI providers that may process such excerpts include Anthropic (Claude), OpenAI (ChatGPT), and Google (Gemini), depending on the active configuration of the Platform's runtime model router at the time of processing.
7.6 Under the relevant provider's standard API or commercial terms, prompts and outputs are not used by the provider to train its models by default. Users should consult the relevant provider's current privacy policy for the authoritative position.
7.7 All deterministic, automated, or AI-assisted processing is performed for the purpose of delivering, securing, maintaining, or improving Platform functionality requested by the User.
7.8 The Company does not sell user-submitted documents or generated outputs.
7.9 The Company does not use user data to train proprietary models unless explicitly stated or separately agreed.
7.10 Learning Control. We may use lightweight placement-learning metadata for two purposes: (a) to improve the ordering, routing, and section placement of documents within your own account; and (b) in aggregated and/or de-identified form, to improve classification, routing, dossier assembly, and platform quality across Bohuš Global generally. The metadata may include file name, document title, detected subtype, document intent, dossier type, jurisdiction, original suggested section, and final section assignment after a confirmed export. It does not include the substantive contents of your documents, your document text, your document images, mid-assembly drafts, or unsuccessful temporary placements. Other Users cannot access your files, case materials, document contents, or account-specifi…
7.11 Service Improvement. We may use case data, including documents, derived metadata, generated outputs, engineering telemetry, and aggregated signals, to operate, maintain, secure, debug, recover, calibrate, classify, and improve the Platform's accuracy, reliability, retrieval quality, and overall performance. This processing is performed under Article 6(1)(f) UK GDPR (legitimate interests), is subject to the confidentiality, access-control, security, and data-protection safeguards that apply to all Platform processing, and does not expose one User's documents, case materials, or account activity to another User. Case data is not used to train foundation, generative, or large language models operated by external providers, except where you have given separate, explicit consent. The Plat…
7.12 Outputs generated by deterministic, automated, or AI-assisted features are preparatory materials and must be reviewed by the User before reliance or external use. See the Disclaimer for further information.
8.1 The Company does not sell personal data, uploaded documents, or generated outputs.
8.2 Personal data may be shared only where necessary and proportionate, including:
9.1 Data may be processed in jurisdictions outside the United Kingdom.
9.2 Where such transfers occur, appropriate safeguards are implemented in accordance with applicable data protection laws.
10.1 Personal data, uploaded documents, workspace content, generated outputs, configuration settings, logs, and related records are retained only for as long as necessary for the purposes for which they are processed, including provision of the Platform and related Services.
10.2 Data may be retained for longer where required for legal, regulatory, accounting, tax, security, fraud-prevention, dispute-resolution, audit, backup, or business-continuity purposes.
10.3 Retention periods may vary depending on the type of data, account status, service configuration, legal requirements, operational need, and user deletion requests.
10.4 Users may request deletion of their account and workspace data through the Account settings within the Platform or by contacting the Company. Where deletion is completed, the Company will delete or anonymise account records, cases, uploaded documents, generated outputs, and associated workspace data, including objects in third-party storage providers, subject to any limited retention required for legal, accounting, security, fraud-prevention, dispute-resolution, or other lawful purposes.
10.5 Account deletion will cancel any active subscription immediately. Past payment records, invoices, and related transactional data may remain with payment providers (such as Stripe) under those providers' own retention policies where required for accounting, tax, fraud prevention, chargeback, or legal purposes.
10.6 A minimal deletion audit (containing hashed identifiers but no document content) may be retained to evidence that the deletion was performed.
11.1 The Platform operates within a controlled environment designed to protect confidentiality, integrity, availability, and traceability of data.
11.2 Measures may include:
11.3 No system can guarantee absolute security. The Company takes reasonable and proportionate measures appropriate to the nature of the Platform, the processing undertaken, and the risks involved.
Subject to applicable law, users may have the right to:
12.1 Self-service deletion is available within the Platform: users may delete individual documents, cases, and bundles from their account, and may erase their entire account and all associated data via the in-application account deletion function.
12.2 Other requests may be made using the contact details below. Requests are responded to within the time limits required by applicable data protection law.
12.3 You have the right to lodge a complaint with the Information Commissioner's Office (ICO), which is the supervisory authority for data protection in the United Kingdom, at ico.org.uk. This right applies where you consider that the processing of your personal data infringes applicable data protection law.
13.1 The Platform may use cookies, analytics, or similar technologies to support functionality, service usage analysis, performance monitoring, security, reliability, and product improvement.
13.2 Analytics are provided by PostHog (posthog.com) and are used to understand how the Platform is used, diagnose errors, protect the service, improve user experience, and monitor system performance. Session recording is disabled on the authenticated application. Analytics are not used to inspect the contents of user-uploaded documents, legal materials, confidential records, or generated outputs.
13.3 Where applicable, additional information will be provided via a cookie notice.
14.1 The Platform is designed as a controlled structured-intelligence environment for document, record, workflow, and output processing.
14.2 User-submitted data is not intended to be publicly exposed, publicly indexed, or made available outside authorised processing contexts.
14.3 Access to user-submitted materials, generated outputs, and workspace content is limited to authorised users, system processes, service providers, and operational contexts required to provide, secure, maintain, or support the Platform.
15.1 For any data protection or privacy-related enquiries, please contact:
15.2 contact@bohusglobal.com
16.1 This Policy may be updated from time to time.
16.2 Continued use of the Platform constitutes acceptance of the updated Policy.
Structured Intelligence Systems. Not legal advice. Not professional representation.