Privacy Policy

BOUCH is a trading name of Paul Boucherat, a practical AI training and workflow practice based in the East Midlands, United Kingdom. This policy covers the website at bouch.dev, the open-source Claude Code plugins published at github.com/uk-agents/uk-legal-plugins, and the hosted uk-agents MCP servers operated by BOUCH (described below).

Data controller: Paul Boucherat, paul@bouch.dev.

The Claude Code plugins in this marketplace run entirely on your own machine. When you install a plugin and run the cold-start interview, it writes a practice profile to your local filesystem at ~/.claude/plugins/config/claude-for-legal/. That file never leaves your device.

The plugin author (BOUCH / Paul Boucherat) collects no data from plugin users. There is no telemetry, no usage analytics, no error reporting, and no network connection from the plugins to any server operated by BOUCH.

BOUCH operates a family of hosted MCP servers under the uk-agents software name — including the UK Legal MCP server and the UK Due Diligence MCP server. These are read-only lookup services: they forward queries from your AI client to official UK public sources — Companies House, the Charity Commission, The Gazette, HM Land Registry, HMRC's VAT register, legislation.gov.uk, Parliament — and to published OFSI, OFAC, EU, and UN sanctions lists, then return the results.

Your queries may contain personal data (for example a director's name or a sole trader's VAT number), and results may contain personal data drawn from the public registers themselves. All of this is processed in memory only, for the duration of your request: no accounts, no database, no query content in logs or analytics. We collect only connection metadata (the client application's name and version) and aggregate per-tool usage counters, and our hosting provider (Fly.io, London region) retains standard short-lived server logs. Legal basis: legitimate interests — providing lookup access to information the UK government publishes in public registers. The registers remain the authoritative source; to correct your entry in a register, contact that register directly.

Some plugins offer optional integration with genuinely third-party MCP servers — for example CourtListener, Trellis, Descrybe, or Thomson Reuters CoCounsel. When you connect to one of these servers, your queries are sent to that provider. Each provider operates under its own privacy policy and terms of service. BOUCH is not responsible for the data practices of third-party MCP servers.

Conversations in Claude Code and Claude.ai are processed by Anthropic. How Anthropic handles that data is governed by Anthropic's Privacy Policy. BOUCH has no access to your Claude conversations.

This site is hosted on Vercel. Standard server logs (IP address, browser, referrer, page path) may be retained by the hosting provider for security and operational purposes. We do not use advertising trackers, persistent cookies, or cross-site tracking. If you contact us by email, your name, email address, and message are sent to paul@bouch.dev and are not stored in any third-party CRM.

If any personal data is processed in connection with your use of this website or the services described on it, you have the right to access, correct, or request deletion of that data. To exercise any of these rights, email paul@bouch.dev. We will respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

If this policy changes materially, the updated version will be published at this URL with a new “last updated” date. We will not retroactively apply a less protective policy to data already collected.

Questions about this policy: paul@bouch.dev