Privacy Policy
Last updated: 12 September 2026
This policy explains what TrueCite does with personal information. TrueCite (ABN 37 688 027 367) is in Sydney, Australia, and can be reached at info@truecite.uk. We are an Australian entity providing the service at truecite.uk, and personal information is held outside the United Kingdom.
What we collect
When a firm registers, we collect the firm name, the name of the contact person, and the firm email address.
When citations are checked, we receive the citation strings, an optional party name, a document fingerprint, and an optional report label.
Document text extraction happens in your browser. The text of your document does not leave the browser and is not sent to us.
Each United Kingdom citation you check is sent to Find Case Law, The National Archives, so that the judgment's record can be looked up. Only identity comes back — case name, decision date, judgment number and judgment address. The text of the judgment is not downloaded and is not retained by us.
We do not collect or retain submission text, quoted passages, judgment text or card details.
A report label is retained with the report it belongs to, and a report URL can be read by anyone who holds the link. Do not put confidential information in a report label.
Why we collect it
- To provide the service and issue reports.
- To keep your account secure, including by sending sign-in codes by email.
- To keep payment records.
- To meet our legal obligations.
How we handle it
We handle personal information consistently with the UK General Data Protection Regulation and the Data Protection Act 2018. We are the controller for the information described in this policy, and you can reach us about it at info@truecite.uk.
Cookies and sessions
Signing in sets one session cookie, named tc_session. It identifies your session; it is HttpOnly and SameSite=Lax, it is Secure when served over the internet, and it lasts up to 30 days. There are no advertising and no analytics cookies.
Payment
Reports are paid for through Revolut's hosted checkout page. Card details are entered on Revolut's page and do not pass through TrueCite. We store the Revolut order number and the payment status, not the card.
When a payment is confirmed we issue an invoice for it and email that invoice to the firm email address on the account. The invoice carries the firm name, the registration number and the contact email held on the account, the date, what was bought and the amount. It does not carry the citations that were checked or anything from a document you submitted. A copy is stored so you can open it again while signed in, and only your own account can open it.
Where your information is held
The website is hosted on Render, and the data centre region is Singapore. TrueCite is an Australian entity. Personal information — names, email addresses and account records — is therefore held outside the United Kingdom, and may be handled outside it as well.
Our hosting provider's operational logs may contain IP addresses and timestamps.
Analytics and other parties
These pages carry no third-party analytics, advertising or tracking scripts. The pages do load their typefaces from Google Fonts, which is a request your browser makes directly.
Partner API (pilot)
Partner credentials are issued to a partner for a stated scope, and usage is metered. A partner pilot is a separate arrangement from an individual firm account.
How long we keep it
Verification runs retain citation strings, compact findings, the identification hash of the source record, the observation time, the coverage version and optional report labels. Issued reports and payment events are retained for replay and accounting records. Your records (check history, saved reports, developer keys and usage) are kept until you ask us to delete them. To delete them, email info@truecite.uk from your account email address, and we delete the records stored for that account. Checks run on the Try page without an account are not linked to any account; to ask us to delete one, email info@truecite.uk with the citation you checked and the approximate date and time of the check.
What a fingerprint means
A document fingerprint is a hash. It detects whether the stored payload has been altered. It does not establish judicial authenticity and it is not court endorsement.
Access, correction and deletion
Write to info@truecite.uk to ask what we hold about you, to correct it, or to ask us to delete it. If you are in the United Kingdom, you have the rights the UK General Data Protection Regulation gives you, including access, rectification, erasure, restriction, objection and portability.
Complaints
Raise a complaint with us first, at info@truecite.uk. If you are not satisfied with our response, you may complain to the Information Commissioner's Office at ico.org.uk.
Data breaches
If a personal data breach occurs, we notify the people affected and the Information Commissioner's Office as the law requires.
Changes to this policy
We publish changes on this website with a new version number and date.
Contact
info@truecite.uk
Version 1