Privacy Notice

LNAT Chambers is operated by Kahunga. Kahunga is the data controller for the personal data described in this notice — meaning we determine how and why your data is processed.

• Account data — name, email address, login credentials — to create and secure your account (legal basis: performance of our contract with you).
• Practice data — your answers, timings, essay drafts, submissions and reviews — to provide the preparation service and your analytics (legal basis: contract performance).
• Support messages — to respond to your requests (legal basis: legitimate interests).
• Usage and technical data — device identifiers, IP address, error logs — for security, fraud prevention and product improvement (legal basis: legitimate interests; consent where required).

Payment data (card details, billing address) is collected and processed directly by Paddle as Merchant of Record; we do not see or store your card details.

• Service providers and subprocessors that help us run the service (hosting, database, error monitoring, AI processing for essay reviews).
• Paddle, our Merchant of Record, for the sale of subscriptions, payment processing, tax compliance and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

We never sell your personal data.

We keep your data for as long as your account is active and as long afterwards as needed for legal, tax and accounting obligations. Data that is no longer needed is deleted or anonymised.

Depending on your country, you may have the right to access, rectify or erase your data, restrict or object to processing, receive a portable copy, withdraw consent, and complain to a supervisory authority. We respond to requests within one month. To exercise any right, contact us at the address shown on our checkout receipts or via Paddle's buyer support.

Some of our service providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

We apply appropriate technical and organisational measures, including encryption in transit, access controls and row-level isolation of student data, to protect your personal data.

We use only essential cookies and storage needed to keep you signed in and operate the service. We do not use advertising or third-party marketing cookies.