Last updated: 1 March 2026
Effective from: 1 March 2026
Applies to: All consumer-facing services operated by Almost Legal Limited, including FightFines, FightMyFines, CancelMyParkingTicket, AppealMyParkingTicket, CancelMyCitation, AppealMyCitation, ToolyKit, CarDamageAdvisor, WriteMyLegalLetter, and ImproveMyResume.
This service is operated by Almost Legal Limited, a company incorporated in the Isle of Man under company number 139020C, with its registered office at 9 Tynwald Street, Douglas, IM1 1BF.
Almost Legal Limited is the data controller for personal information collected through this website and any related Almost Legal service. Almost Legal Limited is part of the Muerto Limited group of companies.
Our supervisory authority: The Isle of Man Information Commissioner (https://www.inforights.im).
Our registration: We are registered with the Isle of Man Information Commissioner under registration number [IOM REGISTRATION NUMBER].
Contact for any privacy matter: hello@almostlegal.ai
We have not appointed a Data Protection Officer because we are not legally required to. Privacy enquiries go to the address above.
We’ve designed this service to keep as little of your information as possible.
You can request access, correction, or deletion of your information at any time by emailing hello@almostlegal.ai.
We collect three categories of information.
We use this to deliver the service you’ve paid for and to support you if you contact us.
When you use a tool — for example, plugging a parking ticket into the strength-checker, pasting contract text into WriteMyLegalLetter, or submitting CV details — that content is processed in real time to generate your document. We do not retain a copy of this content in our own database, file storage, or backups. Once your document is generated and delivered, our copy is gone.
The exception is short-lived processing memory while your request is in flight. This is unavoidable — the document literally has to exist in our systems for the seconds or minutes it takes to generate and email it. After that, it’s gone from our infrastructure.
We use this to keep the service running, fix problems, and understand which parts of the service work and which don’t.
To deliver this service, we use the providers below. Each one is named, what they do, where they’re located, and what they retain.
If you’d like the specific retention period that applies to our account with Resend, email hello@almostlegal.ai and we’ll tell you.
Different services in our portfolio use different providers for account records and authentication. The list below names every provider we use across the portfolio. Not every brand uses every provider — for example, the creator programme dashboard at almostlegal.ai uses Clerk and Upstash; the consumer tools may use Supabase.
Clerk (authentication)
Upstash (account database)
Supabase (database and authentication on selected services)
We don’t use Meta Pixel, Google Analytics, advertising trackers, retargeting cookies, or session-replay tools on the consumer-facing tools. We may use a privacy-respecting analytics provider on the marketing pages of some of our brands. Where we do, that provider is named on the cookie banner of that specific site.
Our service providers (Anthropic, Resend, Vercel, Stripe, Clerk, Upstash, Supabase) are based outside the Isle of Man. When your information is transferred to them, the transfer is protected by:
You don’t need to take any action — these protections are in place by default.
| What | How long we keep it | Why |
|---|---|---|
| Account record (email, credits, purchase history) | For as long as your account is active, plus 6 years after closure | Tax record-keeping requirements |
| Content you submit through a tool | Not retained by us | We’ve designed the service this way |
| Document we generate for you | Not retained by us | We’ve designed the service this way |
| Marketing emails (if you’ve opted in) | Until you unsubscribe | You’re in control |
| Anonymised website analytics | 12 months | Service improvement |
The 6-year retention on purchase records exists because tax authorities require us to keep transaction records for that period. We can’t delete your purchase history before that, even if you ask. Everything else, we can.
The Isle of Man has adopted the GDPR through the GDPR and LED Implementing Regulations 2018, supplementing the Data Protection Act 2018. You have the following rights over your personal information.
This policy is part of fulfilling that right. If anything is unclear, ask.
You can ask for a copy of every piece of personal information we hold about you. We’ll provide it within 30 days, free of charge unless your request is excessive or repetitive.
If anything we hold about you is wrong, tell us and we’ll fix it within 30 days.
You can ask us to delete your personal information. We’ll do so within 30 days, except for records we’re legally required to keep (the 6-year tax record retention above).
Because we don’t retain the content of what you generated, there’s nothing to delete on that side — your documents only exist in your own inbox and downloads folder.
You can ask us to stop processing your information in certain circumstances — for example, while we investigate a rectification request.
You can ask us for a portable copy of your account data in a structured, machine-readable format.
You can object to our processing of your information for direct marketing at any time. We’ll stop straight away. You can object to other processing on grounds relating to your particular situation, and we’ll consider the request.
We don’t make automated decisions about you that produce legal or similarly significant effects. The strength-check tools generate a verdict on the appeal-worthiness of your case, but the decision to act on that verdict is yours.
Email hello@almostlegal.ai. We’ll acknowledge within a few working days and respond fully within 30 days.
If you’re not happy with how we’ve handled your information or your rights request, you can complain to:
Isle of Man Information Commissioner
PO Box 69, Douglas, Isle of Man, IM99 1EQ
Telephone: +44 1624 693260
Email: ask@inforights.im
Website: https://www.inforights.im
If you live in the UK or the EU, you can also complain to your local data protection authority. We’d appreciate the chance to fix the problem first if you’re willing — but you don’t have to come to us before going to a regulator.
We use only essential cookies on the consumer-facing tools — the ones strictly necessary to keep you logged in and to remember your shopping basket. We don’t use marketing or advertising cookies on these tools.
On our marketing pages, we may use a small number of analytics cookies. These are listed in the cookie banner on each marketing page and you can decline them.
Our services are not directed at children under the age of 18 and we don’t knowingly collect personal information from anyone under 18. If you believe a child has used our services, contact us at hello@almostlegal.ai and we’ll delete the relevant information.
We use industry-standard measures to protect your information:
No system is perfectly secure. If something goes wrong, we’ll tell you and the IoM Information Commissioner within 72 hours of becoming aware, as the law requires.
We’ll update this policy when our services or the law changes. The “Last updated” date at the top of the page tells you when. Material changes will be communicated by email to active customers and prominently on our websites.
Email hello@almostlegal.ai. We read everything that arrives there and we respond.
This policy applies to Almost Legal Limited and the consumer-facing services it operates. The Muerto Limited holding company does not directly process consumer personal data and is named here only for ownership transparency.