Privacy Policy

1. Our Commitment to Privacy

We are committed to protecting your personal data and handling it in a transparent and secure manner in accordance with:

• the UK General Data Protection Regulation (UK GDPR); and
• the Data Protection Act 2018.

2. Personal Data We Collect

We may collect and process the following types of personal data:

2.1 Information You Provide to Us

• name;
• email address;
• telephone number;
• postal address;
• information you submit via contact forms, enquiries, or correspondence.

2.2 Automatically Collected Information

When you visit the Site, we may collect:

• IP address;
• browser type and version;
• device information;
• pages visited and time spent on the Site.

This information is collected via cookies and similar technologies. For more information, please see our Cookie Policy.

3. How We Use Your Personal Data

We use your personal data to:

• respond to enquiries and communications;
• provide information about our legal services;
• assess whether we can act for you;
• comply with legal and regulatory obligations;
• improve the Site and user experience.

4. Legal Bases for Processing

Under UK GDPR, we rely on the following legal bases:

• Consent – where you have provided clear permission (e.g. contact forms, non-essential cookies);
• Legitimate interests – to operate and improve our business and website;
• Legal obligation – to comply with laws and SRA requirements;
• Contract – where processing is necessary in connection with providing legal services.

5. Solicitor-Client Confidentiality

Any information you provide in connection with potential or ongoing legal instructions will be treated as confidential and handled in accordance with our professional and regulatory obligations.

6. Sharing Your Personal Data

We do not sell your personal data.

We may share your personal data where necessary and lawful, including with:

• regulatory or law enforcement authorities where required by law;
• professional advisers and service providers acting on our instructions;
• IT and website service providers who support the operation of the Site.

We will disclose personal data to our partner Valid8 IP Ltd for the provision of credit report information which may include Equifax Ltd, Experian Ltd, TransUnion. If you’d like to understand how the credit reference agencies use and share personal data (including the legitimate interests they pursue) please read the Credit Reference Agency Information.

Notice (CRAIN) http://www.transunion.co.uk/crain; https://www.equifax.co.uk/crain/; https://www.experian.co.uk/legal/

All third parties with whom we share personal data are required to process it securely, confidentially, and in accordance with applicable data protection laws.

6A. Credit Reference and Credit Report Information

Where relevant to your matter, we may obtain credit report information through Valid8 IP Ltd. This may involve a credit reference search being carried out using your personal data.

Credit searches may be:

• soft searches, which do not affect your credit score and are visible only to you; or
• hard searches, where required and lawful, which may be visible to lenders.

We will only request such searches where necessary and appropriate in connection with the legal services we provide.

6B. Legal Basis for Credit Data Processing

Our legal basis for processing and sharing personal data for credit report purposes is one or more of the following, as applicable:

• Performance of a contract – where processing is necessary to provide legal services to you;
• Legitimate interests – to assess financial or credit-related information relevant to your claim, while ensuring your rights and freedoms are protected;
• Legal obligation – where required by law or regulation.

Where consent is required, it will be obtained prior to any processing.

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal, regulatory, and professional obligations.

Retention periods may vary depending on the nature of the data and whether you become a client.

8. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.

9. Your Data Protection Rights

Under UK GDPR, you have the right to:

• access your personal data;
• request correction of inaccurate data;
• request erasure of your data (where applicable);
• restrict processing;
• object to processing;
• request data portability;
• withdraw consent at any time (where processing is based on consent).

To exercise your rights, please contact us using the details on the Site.

10. Complaints

If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO).

11. Third-Party Websites

The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the "Last updated" date will be updated.

13. Contact Us

If you have any questions about this Privacy Policy or how your personal data is handled, please contact us using the details provided on the Site.