How we handle information.
One Rule is built for law firms. We treat your firm's data with the same restraint and discretion you would expect of a private bank or wealth manager.
Last updated: 2 June 2026
1. Who we are
One Rule Ltd ("One Rule", "we", "us") is the data controller of personal data collected via this website and the data processor of operational data entered into the One Rule platform on behalf of subscribing law firms ("client firms").
2. What we collect
From website visitors
- Information you submit through the demonstration request form (name, role, firm, email, telephone, comments).
- Limited technical data (IP address, browser, referrer) for site security and aggregate analytics.
From client firms using the platform
- Department and matter-level operational metrics entered by your team (capacity, delayed matters, complaint indicators, workload weights, profitability inputs).
- User account data for partners and department heads (name, work email, role, audit log activity).
We do not require, request or store personal data relating to your firm's clients. One Rule is a management-layer product; it sits above your case management system, not within it.
3. How we use it
- To deliver the One Rule service to your firm.
- To respond to demonstration requests and account enquiries.
- To improve the platform in aggregate, anonymised form.
- To meet our legal, regulatory and contractual obligations.
We do not sell your data. We do not share it with third-party marketers. We do not profile your firm against other firms.
4. Lawful basis
We rely on legitimate interests (responding to enquiries, operating the service), contractual necessity (delivering the platform to subscribing firms) and, where required, your consent.
5. Sub-processors
We use a small number of carefully selected sub-processors for cloud hosting, email delivery and error monitoring, all within the UK and EEA. A current list is available on request from hello@onerule.co.uk.
6. Retention
- Demonstration enquiries: retained for 24 months unless you ask us to delete sooner.
- Client firm operational data: retained for the duration of your subscription and deleted within 30 days of termination, unless legal hold applies.
7. Your rights
Under UK GDPR you may request access, correction, deletion, restriction or portability of your personal data, and you may object to processing. Contact hello@onerule.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
8. Contact
One Rule Ltd · hello@onerule.co.uk · United Kingdom.