Privacy Policy

1. Full name, postal address, telephone number, and email address
2. Proof of identity and address (e.g. passport, driving licence, utility bills)
3. Date of birth and gender
4. National Insurance number (if applicable)
5. Billing and financial details (e.g. bank account, payment card details)
6. Employment details (e.g. job title, company name, references)
7. IP address, device identifiers, browser type, and operating system
8. Usage data and preferences from your interactions with our website or services
9. Any personal information voluntarily provided during service engagement

1. Directly from you: when you fill in forms, contact us, or engage our services
2. From third parties: brokers, partners, public bodies, and referees (with your consent)
3. From public sources: Companies House, Land Registry, social media profiles
4. Automatically: via cookies and tracking technologies on our website

1. To provide legal, professional, or administrative services
2. To communicate with you regarding your enquiry or instructions
3. To verify your identity and meet anti-money laundering obligations
4. To process payments, manage billing, and keep financial records
5. To ensure compliance with our legal and regulatory obligations
6. To send updates, newsletters, or marketing (with your consent)
7. To improve our services, website functionality, and client experience
8. To detect, prevent, and address fraud, abuse, or security issues

1. Consent: You have given us explicit permission to use your data for one or more specific purposes
2. Contractual Obligation: Processing is necessary for the performance of a contract to which you are a party
3. Legal Obligation: Processing is necessary to comply with our legal obligations
4. Legitimate Interests: We process your data for our legitimate interests, such as improving services, provided these interests are not overridden by your rights

You can withdraw your consent at any time by contacting us using the details provided above.

1. Government agencies, regulators, courts, or law enforcement when required by law
2. Accreditation bodies for auditing and compliance purposes
3. Third-party service providers (e.g. IT hosting, CRM systems, email platforms, payment processors)
4. External consultants or subcontractors (bound by confidentiality and security terms)
5. Professional advisors (e.g. legal, financial, or audit firms)

To help provide our services, we may share data with the following processors amongst others: Name Data Shared Reason for

All third-party processors must adhere to strict data protection and security standards consistent with this Privacy Policy and relevant legislation to ensure the continued confidentiality, integrity, and availability of your data.

1. Encryption of data at rest and in transit
2. Firewalls, access controls, and intrusion detection systems
3. Secure physical facilities and logical access restrictions
4. Regular data protection training for staff

Access to personal data is limited to personnel who require it for their job role and who are subject to confidentiality agreements.

1. Legal case files: 6 to 15 years depending on matter type
2. Financial and transaction data: 6 years from the date of transaction
3. Quote requests or marketing preferences: 6 months from date of last contact
4. Employment records: As required by employment law and HR best practices
   Once data is no longer required, it is securely deleted or anonymised following our data destruction policy.

Once data is no longer required, it is securely deleted or anonymised following our data destruction policy.

1. Right of Access – to request a copy of the personal information we hold
2. Right to Rectification – to request correction of inaccurate or incomplete data
3. Right to Erasure – to request deletion of data where there is no legal basis to retain it
4. Right to Restrict Processing – to limit how your information is used in certain circumstances
5. Right to Object – to object to data processing, especially for marketing or profiling
6. Right to Data Portability – to obtain and reuse your data across different services

You are not required to pay a fee for exercising your rights. If you make a request, we will respond within one month unless an extension is justified.
To make a request, please contact our Data Protection Officer via email or post using the details above.

1. The country has been deemed to provide an adequate level of data protection
2. Appropriate safeguards are in place (e.g. Standard Contractual Clauses)
3. You have provided explicit consent for the transfer

All data processing activities are performed in the UK.

1. Full name, postal address, telephone number, and email address
2. Proof of identity and address (e.g. passport, driving licence, utility bills)
3. Date of birth and gender
4. National Insurance number (if applicable)
5. Billing and financial details (e.g. bank account, payment card details)
6. Employment details (e.g. job title, company name, references)
7. IP address, device identifiers, browser type, and operating system
8. Usage data and preferences from your interactions with our website or services
9. Any personal information voluntarily provided during service engagement

1. Directly from you: when you fill in forms, contact us, or engage our services
2. From third parties: brokers, partners, public bodies, and referees (with your consent)
3. From public sources: Companies House, Land Registry, social media profiles
4. Automatically: via cookies and tracking technologies on our website

1. To provide legal, professional, or administrative services
2. To communicate with you regarding your enquiry or instructions
3. To verify your identity and meet anti-money laundering obligations
4. To process payments, manage billing, and keep financial records
5. To ensure compliance with our legal and regulatory obligations
6. To send updates, newsletters, or marketing (with your consent)
7. To improve our services, website functionality, and client experience
8. To detect, prevent, and address fraud, abuse, or security issues

1. Consent: You have given us explicit permission to use your data for one or more specific purposes
2. Contractual Obligation: Processing is necessary for the performance of a contract to which you are a party
3. Legal Obligation: Processing is necessary to comply with our legal obligations
4. Legitimate Interests: We process your data for our legitimate interests, such as improving services, provided these interests are not overridden by your rights

You can withdraw your consent at any time by contacting us using the details provided above.

1. Government agencies, regulators, courts, or law enforcement when required by law
2. Accreditation bodies for auditing and compliance purposes
3. Third-party service providers (e.g. IT hosting, CRM systems, email platforms, payment processors)
4. External consultants or subcontractors (bound by confidentiality and security terms)
5. Professional advisors (e.g. legal, financial, or audit firms)

To help provide our services, we may share data with the following processors amongst others: Name Data Shared Reason for

All third-party processors must adhere to strict data protection and security standards consistent with this Privacy Policy and relevant legislation to ensure the continued confidentiality, integrity, and availability of your data.

1. Encryption of data at rest and in transit
2. Firewalls, access controls, and intrusion detection systems
3. Secure physical facilities and logical access restrictions
4. Regular data protection training for staff

Access to personal data is limited to personnel who require it for their job role and who are subject to confidentiality agreements.

1. Legal case files: 6 to 15 years depending on matter type
2. Financial and transaction data: 6 years from the date of transaction
3. Quote requests or marketing preferences: 6 months from date of last contact
4. Employment records: As required by employment law and HR best practices
   Once data is no longer required, it is securely deleted or anonymised following our data destruction policy.

Once data is no longer required, it is securely deleted or anonymised following our data destruction policy.

1. Right of Access – to request a copy of the personal information we hold
2. Right to Rectification – to request correction of inaccurate or incomplete data
3. Right to Erasure – to request deletion of data where there is no legal basis to retain it
4. Right to Restrict Processing – to limit how your information is used in certain circumstances
5. Right to Object – to object to data processing, especially for marketing or profiling
6. Right to Data Portability – to obtain and reuse your data across different services

You are not required to pay a fee for exercising your rights. If you make a request, we will respond within one month unless an extension is justified.
To make a request, please contact our Data Protection Officer via email or post using the details above.

1. The country has been deemed to provide an adequate level of data protection
2. Appropriate safeguards are in place (e.g. Standard Contractual Clauses)
3. You have provided explicit consent for the transfer

All data processing activities are performed in the UK.