Privacy Policy
This explains what happens to personal information you send us through this website. It covers the website only. Client engagements are governed by the privacy notice attached to your engagement letter.
- Last updated 3 August 2026
This policy is a working draft written to reflect how the site actually behaves. Before launch it must be reviewed against your real processing activities, your ICO registration and your retention policy, and the data controller details completed in config/site.ts.
Who Is Responsible for Your Data
The data controller is the firm named in the footer of this site, at the registered office shown there. Our ICO data protection registration number is shown on the regulation and credentials page.
If you want to raise anything about how we handle personal data, use the contact details in the footer and mark your message for the attention of the person responsible for data protection.
What We Collect and Why
- Enquiry form submissions
- Your name, email address, telephone number and whatever you tell us about your practice or situation. We use this to respond to your enquiry and, if you become a client, to set up the engagement. The lawful basis is legitimate interests, specifically responding to a request you have made of us.
- Technical information
- Standard server logs including IP address, kept briefly for security and to apply rate limiting to the enquiry form. The lawful basis is legitimate interests in keeping the site secure.
- Analytics
- Only if you accept analytics cookies. Nothing is loaded before you make that choice. The lawful basis is consent, which you can withdraw at any time.
What We Do Not Do
- We do not sell personal data
- We do not add enquiry contacts to a marketing list without asking
- We do not use enquiry data for automated decision making or profiling
- We do not load analytics or advertising tags before you have accepted them
Who We Share It With
Enquiry submissions are delivered by whichever provider is configured for the site, which may be an email service, a customer relationship management system or a direct webhook to the firm. Those providers act as processors under contract.
We do not share enquiry data with anyone else unless we are required to by law or by a professional obligation.
How Long We Keep It
Enquiries that do not become engagements are kept for a limited period so we can pick up the conversation if you come back, and are then deleted. Where an enquiry becomes a client engagement, retention follows the periods set out in our engagement letter and in the professional and anti money laundering rules we work under.
[PLACEHOLDER: confirm your actual retention periods here before launch.]
Your Rights
Under UK data protection law you have the right to ask for a copy of the personal data we hold about you, to have it corrected, to have it deleted in some circumstances, to object to or restrict our processing of it, and to withdraw consent where consent was the basis for processing.
To exercise any of these, contact us using the details in the footer. If you are not satisfied with how we respond, you can complain to the Information Commissioner Office at ico.org.uk.