Privacy and Personal Information Notice

1. Controller and contact

The privacy contact is LawWorld AI / Winson Law Offices at china_info@winsonglobal.com. The specific controller, legal-service provider and contracting entity will be identified on the submission page, quote or engagement agreement.

If the entity or cross-border recipient relevant to you is not identified, contact us before submitting matter materials.

2. Information we process

We process only data needed for the selected function: name, company, phone, email, jurisdiction, matter description, uploaded files and, for lawyer applicants, professional photos, licence details and credentials.

• We also retain the consent version, exact notice text, language, time, IP address, user agent and key audit events for proof, security and disputes.
• Do not submit passwords, API keys, full identity or passport numbers, bank details, health data, children's data or unrelated third-party information.

3. Purposes and legal bases

We use data for intake, contact, AI-assisted organization and preliminary production, counsel matching, conflict checks, proposals, delivery, qualification review, security audits and legal obligations. Depending on applicable law, the basis is consent, pre-contract or contract necessity, legal obligation or another permitted basis.

You may browse public content without optional processing, but we cannot run a function if you decline data necessary for that function.

4. AI and automated processing

Controlled AI services may structure, retrieve, analyze, flag risks and create drafts from your input. AI output may be incomplete, outdated or wrong and is not formal legal advice. Counsel matching creates a candidate ranking only; it does not decide engagement, price or legal conclusions.

Material decisions require review by authorized personnel or licensed counsel, and you may request a human explanation or correction.

5. Sensitive and third-party data

The platform does not normally require sensitive personal data. When credentials, identity documents or other sensitive data are necessary, we explain the need, impact and safeguards and request separate confirmation.

You must have lawful authority and give required notices before submitting another person's data. Lawyer credential files remain restricted to authorized reviewers and are not automatically published.

6. Processors and disclosures

We may use entrusted cloud, object storage, messaging, security, email and model-gateway providers under contractual, access and logging controls.

Selecting counsel only records a preference for platform operations. Contact data, attachments and AI work product are not automatically sent. Before disclosure, we will identify the recipient, country, data and files, purpose and rights channel and request separate confirmation.

7. Cross-border processing

The platform's controlled core infrastructure is currently primarily in China. If you are outside China, submission may involve transfer to China. Transfers to counsel or other recipients in a target jurisdiction require the applicable assessment, contract or safeguard and any separate consent before disclosure.

You may choose not to submit. Withdrawal does not invalidate earlier processing or retention required by law or disputes.

8. Retention

Intakes that do not become engagements are generally kept for no more than three years after the last interaction; rejected or withdrawn lawyer applications for no more than two years; engaged matters, finance, conflicts and professional records follow the agreement and applicable law.

At expiry, data is deleted or anonymized unless a complaint, proceeding, investigation, security event or mandatory hold requires limited extension.

9. Security

Controls include encryption in transit, controlled object storage, least privilege, workspace separation, access logging, server-side secrets, backups and incident response. No system is absolutely secure; report suspected incidents through the email on this page.

10. Your rights

Subject to applicable law, you may request notice, access, a copy, correction, completion, deletion, restriction or objection, withdraw consent and seek an explanation of automated processing. Use the email submitted with your matter. We may verify identity and normally respond within 15 business days or explain an extension.

11. Children, updates and complaints

The platform is for business users and professionals aged 18 or over. Material changes will receive prominent notice and renewed consent where required. You may complain to the contact above and to the competent privacy or cybersecurity authority.