Privacy Policy

This policy explains how we handle information when you use our database of African case law and legislation. We have designed this Privacy Policy to be as clear and straightforward as possible.

This is a legally binding document (“Privacy Policy”) between you and JUDY Innovative Technologies Limited (“JUDY,” “we,” or “us”). It governs how we collect, use, store, and protect your information when you access any JUDY Services.

PLEASE READ THIS PRIVACY POLICY CAREFULLY before using JUDY. By accessing or using any JUDY Services, you agree to the collection and use of your information as described in this policy, regardless of whether you are a registered user.

We welcome your feedback and suggestions on how to improve our policies in support of our mission. Please send your input to hello@judy.legal.

1. Information We Collect and Store

When you use JUDY Services, we may collect and store the following types of information:

1.1. Information You Provide

• Account Information: When you register with JUDY, we collect personal information such as your name and email address

• Referred Information: We may receive your personal information (such as email address) through other users who share JUDY content with you or refer you to our platform

• Content You Create: Any articles, annotations, comments, or other materials you contribute to the platform

1.2. Automatically Collected Information

1.2.1. Log Data

When you use JUDY Services, we automatically record information from your device, including: - IP address - Browser type - Pages visited before arriving at our website - Search terms submitted to our website - Geographic location - Device identification numbers - Date and time stamps of activity - System configuration information - Metadata for files you upload to our platform

1.2.2. Cookies and Similar Technologies

We use cookies and similar technologies to collect information and improve our Services: - Session cookies: Enable certain features and understand how you interact with our Services - Persistent cookies: Save your registration ID and login password for future logins - Analytics cookies: Help us understand usage patterns and improve the platform

You can configure your browser to stop accepting cookies or to prompt you before accepting cookies. However, some aspects of our Services may not function properly without cookies.

1.3. Google Account Information

When you choose to sign in to JUDY using your Google account, we access and collect the following information from your Google profile:

Information We Access:

• Basic profile information: Your name, email address, and profile picture
• Google account ID (a unique identifier for your Google account)
• Email verification status

How We Use Google User Data:

• Authentication: We use your Google account information solely to create and maintain your JUDY account
• Account Management: Your Google email serves as your primary account identifier and for account-related communications
• Profile Display: Your Google profile name is used in accordance with our real names policy
• Security: We use the Google account ID to ensure secure authentication and prevent unauthorized access

Storage of Google User Data:

• Google user data is stored on our secure servers with the same protections as other user data
• We retain Google account information for as long as your account remains active
• Profile pictures from Google are cached on our servers for performance reasons

Sharing of Google User Data:

• We do not sell, rent, or share your Google user data with third parties for their marketing purposes
• Your Google email address is never publicly displayed unless you explicitly choose to make it public
• We do not share any Google user data with third parties except as described in Section 4 of this policy

Managing Your Google Account Connection:

• You can disconnect your Google account from JUDY at any time through your account settings
• Disconnecting your Google account will require you to set up an alternative authentication method
• You can request deletion of all data obtained from your Google account by contacting us at hello@judy.legal
• You can revoke JUDY's access to your Google account at any time through your Google Account permissions page

Limited Use Disclosure: JUDY's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

2. How We Use Your Information

2.1. Personal Information Use

We may use personal information that identifies you to: - Provide and improve JUDY Services - Administer your use of the platform - Better understand your needs and interests - Personalize and enhance your experience - Provide software updates and product announcements - Verify that you meet the criteria to use JUDY Services

2.2. Location Information

• Some devices allow applications to access real-time location information (such as GPS)

• Information like IP address can sometimes approximate your location

• We may use this information to optimize your experience

2.3. Analytics and Service Improvement

We collect information using logging and cookies to: - Monitor and analyze use of JUDY Services - Manage the technical administration of our platform - Increase functionality and user-friendliness - Verify authorization for processing requests

As of the date this policy went into effect, we use several third-party services to help improve and secure our platform:

Each of these tools collects information in accordance with its own privacy policy and terms of service.

3. Content You Provide to JUDY

3.1. Public Nature of JUDY

JUDY Services is a public resource where: - Users contribute content and add information to professional profile pages - Such contributions are made with the understanding that they will be publicly accessible - Any information you publish may be read, collected, shared, and used by others

3.2. Content Metadata

You should be aware that: - Metadata about your content (such as when you posted it) is viewable by the public - This information will be searchable online and may be reused elsewhere - Please review our Terms of Service, particularly the section titled “Your Content,” for more information

3.3. Profile Information

We may aggregate and display information about your activities on JUDY in your profile, including: - Commentary, annotations, and other content you’ve contributed - Analytics and metrics associated with your content - User responses, upvotes, and pageviews relating to your content

4. Information Sharing and Disclosure

4.1. Public Information

• In accordance with our real names policy (articulated in our Terms of Service), we display your name in your profile

• Through certain features, you may make other information about yourself public

• Public information may be broadly and quickly disseminated

4.2. How We Share Your Information

The information we collect is used to provide and improve JUDY Services and content, and to prevent abuse. We do not sell your personal information to third parties.

We may share your information in the following circumstances:

4.2.1. With Your Consent

We may share information when you give permission, such as when you: - Use a third-party application to access your account - Choose to share content with others on the platform

4.2.2. With Service Providers

We work with trusted third-party companies and individuals to help provide, analyze, and improve JUDY Services, including: - Data storage and maintenance - Database management - Web analytics - Security - Payment processing - Feature improvement

These third parties may access your information only to perform tasks on our behalf and under obligations similar to those in this Privacy Policy.

4.2.3. Legal Requirements

We may disclose information about you when we have a good faith belief that disclosure is reasonably necessary to: - Comply with a law, regulation, or compulsory legal request - Protect anyone from death or serious bodily injury - Prevent fraud or abuse of JUDY or its users - Protect JUDY’s property rights

We will independently object to requests for access to user information that we believe to be improper.

4.2.4. Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you (via email and/or a prominent notice on our website) of: - Any change in control or use of your personal information - Any changes to the applicable Privacy Policy - Choices you may have regarding your information

4.2.5. Non-Personal Information

We may disclose your non-private, aggregated, or otherwise non-personal information, such as usage statistics of our Service.

5. Managing Your Information

5.1. Reviewing and Updating Your Information

If you are a registered user, you may: - Review, update, or correct personal information in your profile - Update your information if it changes - Delete your information if you no longer desire our service

In some cases, we may retain copies of your information if required by law.

5.2. Deleting Your Account

If you wish to cancel your account or request that we no longer use your information: - You may delete your account by sending a request to hello@judy.legal - We may retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce agreements

5.3. Data Retention

We will retain your information for as long as your account is active or as needed to provide you with JUDY Services.

After account deletion: - We will try to delete your information quickly upon request - There might be a delay in deleting information from our servers - Backed-up versions might exist after deletion - We do not delete files you have in common with other users

6. Children’s Privacy

JUDY Services are intended only for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will promptly delete such information.

7. International Users and Data Transfers

If you are located outside the countries where JUDY is registered, you consent to the transfer, storage, and processing of your information (including posted content and personal information) to and within the countries where JUDY operates and to other countries where we have facilities or service providers.

7.1. Data Transfers Outside the EEA

For users in the European Economic Area (EEA), we implement appropriate safeguards when transferring your data outside the EEA. These safeguards may include:

• Transferring data to countries that have been deemed to provide an adequate level of protection by the European Commission

• Using specific contracts approved by the European Commission that give personal data the same protection it has in Europe

• Transferring data to organizations that are part of approved certification mechanisms like the EU-US Data Privacy Framework

7.2. Legal Basis for Processing

If you are in the EEA, we collect and process your personal data on the following legal bases:

• Performance of Contract: Processing necessary for the performance of our contract with you (our Terms of Service) to provide JUDY Services.

• Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services, preventing fraud, and ensuring network security.

• Consent: Where you have given clear consent for us to process your personal data for specific purposes.

• Legal Obligation: Processing necessary for compliance with a legal obligation to which we are subject.

8. Your Data Protection Rights

8.1. GDPR Rights for EEA Users

If you are located in the EEA, you have the following rights regarding your personal data:

1. Right to Access: You can request copies of your personal data.

2. Right to Rectification: You can request that we correct inaccurate information or complete incomplete information.

3. Right to Erasure: You can request that we delete your personal data in certain circumstances.

4. Right to Restrict Processing: You can request that we restrict the processing of your personal data in certain circumstances.

5. Right to Data Portability: You can request that we transfer your data to another organization or directly to you.

6. Right to Object: You can object to our processing of your personal data in certain circumstances.

7. Rights Related to Automated Decision-Making: You can request human intervention in automated decision-making when this produces legal or similarly significant effects.

Google Account Data Rights: If you signed in using your Google account, you have the same rights regarding data obtained from Google as you do for any other personal data. You can exercise these rights by contacting us at hello@judy.legal or by managing your Google account permissions directly through Google.

To exercise any of these rights, please contact us at hello@judy.legal. We will respond to your request within 30 days. We may need to verify your identity before responding to your request.

8.2. California Privacy Rights

California residents may have additional rights regarding their personal information under laws such as the California Consumer Privacy Act (CCPA). These may include the right to know what personal information is collected, request deletion of personal information, and opt-out of the sale of personal information. We do not sell personal information as defined by the CCPA.

8.3. Data Retention Periods

We retain different types of data for different periods:

• Account information: Retained as long as your account is active and as needed to provide you services

• Usage data: Typically retained for 26 months

• Communication data: Retained for the duration of our business relationship plus a reasonable period thereafter

• Technical data: Logs and technical records typically retained for 1-2 years for security and troubleshooting

After these periods expire, we will delete or anonymize your data unless retention is necessary for legal obligations, dispute resolution, or enforcement of agreements.

8.4. Data Protection Officer

While we have not formally appointed a Data Protection Officer, privacy-related inquiries can be directed to our privacy team at hello@judy.legal.

9. Data Security and Breach Notification

9.1. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest

• Regular security assessments and testing

• Access controls and authentication requirements

• Staff training on data protection

• Physical security measures for our facilities

9.2. Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority without undue delay and within 72 hours of becoming aware of the breach, where feasible

• Notify affected users directly in clear and plain language describing the nature of the breach, likely consequences, and measures taken or proposed to address the breach

• Document all breaches, including facts, effects, and remedial action taken

10. Changes to This Privacy Policy

This Privacy Policy may change from time to time: - If we make changes that materially reduce your rights, we will provide notice (such as by email) - We may provide notice of other changes as well - By continuing to use JUDY Services after changes become effective, you agree to be bound by the revised Privacy Policy

11. Contacting Us

If you have any questions about this Privacy Policy or how we handle your information, please contact us at hello@judy.legal.

This Privacy Policy was last modified on Thursday, July 3, 2025.