What we hold,

This notice describes how Hudson Litigation Capital handles personal data received through this website, through correspondence, and in the course of assessing a funding application. It is written to be read by claimants and by the counsel who advise them.

1. I

   Who we are

   Hudson Litigation Capital LLC ("HLC", "we") is a Delaware limited liability company that deploys proprietary capital into commercial litigation and arbitration. HLC is the controller of the personal data described in this notice.

   Written enquiries concerning this notice may be addressed to legal@hudsonlitcapital.com.

2. II

   What we collect, and why

   We collect only what is submitted to us. We do not buy personal data, and we do not build profiles of visitors who simply read this site.

   • Contact and enquiry data. Name, firm or entity, email address, telephone number, and the substance of your message, submitted through the contact form or sent by email.
   • Intake and case data. Where a claimant or counsel is invited into formal intake, information concerning the dispute, the parties, counsel of record, procedural posture, quantum, funding sought, and documents uploaded in support. This material frequently contains personal data about third parties and, on occasion, special category data where the underlying dispute concerns it.
   • Verification data. Where a matter proceeds, identity and source-of-funds material collected for anti-money-laundering and sanctions screening purposes.
   • Account data. Email address and authentication records for invited users of the client portal.
   • Technical data. Server logs generated when pages and forms are requested, including IP address, timestamp, and request path, retained for security and abuse prevention.
3. III

   Legal basis

   Where the UK GDPR or EU GDPR applies, we rely on the following bases. Assessing an enquiry or a funding application, corresponding with claimants and their counsel, and administering the portal rest on our legitimate interests in evaluating and conducting our business, and on the performance of, or steps preparatory to, a contract. Identity and sanctions screening rests on compliance with legal obligations. Where special category data appears in case material, we process it on the basis that it is necessary for the establishment, exercise, or defence of legal claims.

   Where we ask for consent, you may withdraw it at any time; withdrawal does not affect processing already carried out.

4. IV

   Confidentiality and disclosure

   Case material is treated as confidential, and is handled as subject to legal privilege and the common interest doctrine to the fullest extent applicable law allows. Access within HLC is limited to those engaged on the matter, including the Investment Committee.

   We do not sell personal data, and we do not share it for advertising or marketing purposes. We disclose it only to service providers who host our infrastructure and deliver our correspondence, under contract and on our instructions; to external counsel, experts, and advisers instructed on a matter; and where compelled by law, regulation, or court order. Where a matter is declined or withdrawn, no disclosure is made to any third party save as required by law.

5. V

   Where data is held, and for how long

   Our website, database, document storage, and mail delivery are operated on managed cloud infrastructure. Data may be processed in the United States and, depending on the provider's routing, elsewhere. Where personal data is transferred out of the United Kingdom or European Economic Area, we rely on the standard contractual clauses or another lawful transfer mechanism offered by the provider.

   Enquiries that do not proceed are retained for up to twelve months. Intake and diligence files, whether funded or declined, are retained for the life of the matter and for six years thereafter, reflecting limitation periods and our regulatory and record-keeping obligations. Verification records are retained for the period required by applicable anti-money-laundering law. Server logs are retained for a short period only.

6. VI

   Cookies and tracking

   This site sets strictly necessary cookies only. They exist to keep an invited user signed in to the client portal and to protect forms against cross-site request forgery. Nothing more is stored on your device.

   We run no analytics, no advertising pixels, no session recording, and no cross-site tracking. Typefaces are self-hosted from this domain, so loading a page makes no request to any third-party font, tag, or content network. Because we set no non-essential cookies, no consent banner is presented; there is nothing to consent to. Should that ever change, we will seek consent before any such cookie is set.

   Documents you download from the portal are served from our own hosting, and no third party is informed of the download.

7. VII

   Your rights

   Subject to applicable law, you may request access to the personal data we hold about you, its correction or erasure, restriction of or objection to its processing, and its portability. Requests should be sent to legal@hudsonlitcapital.com. We respond within one month, and will tell you if we need longer.

   Certain rights are qualified where the material is privileged, where it forms part of the establishment or defence of legal claims, or where retention is required by law. Where we cannot give effect to a request, we will explain why.

   If you are in the United Kingdom or the European Economic Area you may complain to your supervisory authority, in the United Kingdom the Information Commissioner's Office. If you are a California resident, we do not sell or share personal information as those terms are defined by the CCPA as amended, and we will not discriminate against you for exercising your rights.

8. VIII

   Security and changes

   Access to case files is restricted to authenticated HLC personnel, the portal is invitation-only, and traffic to this site is served over TLS. No system is beyond compromise, and we make no guarantee to the contrary; we do commit to notifying affected persons and, where required, the relevant authority, without undue delay upon becoming aware of a personal data breach.

   We will amend this notice as our practices develop. The effective date below records the current version, and material changes will be brought to the attention of persons with an open matter.