Privacy Policy

Information You Provide Directly

We collect personal data that you voluntarily provide when you:

• • Complete contact forms or enquiry forms on our website
• • Communicate with us via email, telephone, or other channels
• • Engage our legal services and become a client
• • Subscribe to our newsletters or updates

This information may include your name, email address, telephone number, postal address, and any details you provide about your legal matter or enquiry.

Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

• • IP address and browser type
• • Device information and operating system
• • Pages visited and time spent on our website
• • Referring website and search terms used

This information is collected through cookies and similar technologies. Please see our Cookie Policy for more details.

Legal Basis for Data Processing

We process your personal data under the following legal bases:

• • Consent: When you voluntarily provide information through forms or communications
• • Contractual Necessity: To provide legal services you have engaged us for
• • Legal Obligations: To comply with regulatory and professional requirements
• • Legitimate Interests: To improve our services and communicate relevant information

Data Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• • Client Files: Retained for 7 years from completion of the matter, in accordance with professional obligations
• • Enquiry Information: Retained for 2 years unless you become a client
• • Marketing Contacts: Retained until you unsubscribe or withdraw consent
• • Website Analytics: Anonymised after 26 months

Providing Legal Services

We use your personal data to provide legal advisory services, including reviewing documents, conducting legal research, communicating with you about your matter, managing transactions, and maintaining accurate records as required by our professional obligations.

Responding to Enquiries

When you contact us through our website or other channels, we use your information to respond to your enquiry, assess whether we can assist with your matter, and provide preliminary guidance where appropriate.

Website Improvement and Analytics

We analyse website usage data to understand how visitors interact with our site, identify areas for improvement, ensure our website functions properly, and enhance user experience. This data is typically aggregated and anonymised.

Marketing Communications

With your consent, we may send you newsletters, legal updates, and information about our services that we believe may be of interest. You can unsubscribe from these communications at any time.

Data Sharing with Third Parties

We do not sell your personal data. We may share your information with:

• • Other legal professionals working on your matter (with your knowledge)
• • Courts, regulatory bodies, or authorities where legally required
• • Service providers who support our operations (under strict confidentiality agreements)
• • Professional indemnity insurers where necessary

Security Measures

We implement appropriate technical and organisational measures to protect your personal data, including:

• • Encryption of data in transit and at rest
• • Secure servers and firewall protection
• • Access controls limiting who can view your information
• • Regular security assessments and updates
• • Staff training on data protection and confidentiality

Data Encryption and Storage

All personal data transmitted through our website is encrypted using SSL/TLS protocols. Client files and sensitive information are stored on secure servers with restricted access. We use industry-standard encryption methods to protect stored data.

Access Controls and Monitoring

Access to personal data is restricted to authorised staff members who require it to perform their duties. We maintain logs of data access and regularly review these to detect any unauthorised activity. All staff are bound by confidentiality obligations.

Breach Notification Procedures

In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours as required by law. We maintain comprehensive incident response procedures to address any security issues promptly.