How Connaught Law Limited collects, uses, stores and protects personal information — and the rights you have over your data under UK data protection law.

· Regulated by the Solicitors Regulation Authority · Legal 500 · Lexcel

Introduction

Please read this Privacy Policy carefully as it contains important information on how and why Connaught Law Limited collects, stores, uses, and shares your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities if you have a complaint.

Connaught Law Limited is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at https://connaughtlaw.com, engage our legal services, or otherwise interact with our firm.

Who We Are: We are Connaught Law Limited. When we use your personal data, we are regulated under the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), and we are responsible as 'controller' of that personal data. We are registered with the Information Commissioner's Office (ICO) under registration number ZA255485. Our use of your personal data is subject to your instructions, applicable data protection legislation, and our professional duty of confidentiality.

By accessing or using our website or engaging our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our website or services.

Changes to This Privacy Policy

Connaught Law may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational needs. We will post any revised Privacy Policy on our website with an updated "Last Updated" date. If you are a current client, we will also inform you of material changes via our usual means of written communication. Changes will be effective 180 days from posting, and your continued use of our website or services after such changes constitutes acceptance of the revised Privacy Policy. We recommend reviewing this page regularly to stay informed about our privacy practices.

Personal Data We Collect About You

Connaught Law collects personal information necessary to provide professional legal services, respond to inquiries, and fulfill our regulatory obligations. The personal data we collect depends on the nature of your engagement with our firm.

Personal Data We Always Collect

When you contact us or instruct us to provide legal services, we routinely collect the following personal information:

Contact Information: Your name, address, email address, and telephone numbers
Identity Verification: Information to enable us to check and verify your identity for regulatory compliance and anti-money laundering requirements
Matter Information: Information relating to the legal matter in which you are seeking our advice or representation

Personal Data We Collect Through Website Contact Forms

When you submit an inquiry through our website contact forms, we collect:

Name, email address, and mobile phone number
Country/Region of residence
Practice area of interest and message content
Preferred consultation date, time, and contact preferences
Urgency of inquiry and communication consent preferences

Personal Data We May Collect Depending on Your Matter

Depending on the nature of the legal services you require, we may collect additional personal information, including:

Category	Types of Information	Typical Use Cases
Financial Information	National Insurance number, tax details, bank/building society details	Property transactions, estate administration, financial settlements
Family Information	Details of spouse/partner, dependants, other family members	Family law matters, immigration applications, estate planning
Employment Information	Employment status, salary, benefits, employment records	Employment law disputes, immigration sponsorship, financial assessments
Medical Information	Medical records, health information	Personal injury claims, immigration health requirements, capacity assessments
Criminal Records	Details of previous convictions	Immigration applications, disclosure requirements, rehabilitation assessments
Other Information	Any other information necessary for your instructions	As required for specific legal matters

Special Category Personal Data

Some legal matters require us to process special category personal data as defined by UK GDPR. This includes information relating to:

Race or ethnic origin
Political opinions or religious beliefs
Trade union membership
Genetic data or biometric data (where used for identification purposes)
Health information
Sexual orientation or sex life
Criminal convictions and offences

Special Category Data Processing: We will only process special category personal data with your explicit consent or where we have another specific legal authority (such as a court order, legal proceedings, or regulatory requirements). Where explicit consent is required, we will obtain this separately and clearly explain the purposes for which we need this information.

Information Collected Automatically

When you visit our website, certain technical information may be collected automatically through cookies and similar tracking technologies, including analytics data that helps us understand website usage and improve user experience. For detailed information about cookies, please review our Cookie Policy.

Telephone Call Recording

We may record telephone calls for security, quality assurance, and training purposes. Where calls are recorded, you will be informed at the beginning of the call.

Important Notice: This personal data is required to enable us to provide professional legal services to you. If you do not provide the personal data we request, it may delay or prevent us from providing services to you, and we may be unable to fulfill our regulatory obligations.

What We Use Your Personal Information For and Why

Connaught Law processes your personal information for specific, legitimate purposes in accordance with UK GDPR requirements. We use your information only for the purposes described below and will not process your data for incompatible purposes without obtaining your explicit consent.

Purposes of Data Processing

What We Use Information For	Legal Basis and Justification
Providing legal services to you	To meet our contractual obligations to you and fulfill your instructions
Confirming your identity	Regulatory requirement and professional obligation under anti-money laundering legislation
Client support and administration	To respond to inquiries, manage case files, schedule consultations, and coordinate legal proceedings
Professional communication	Facilitating communication regarding case updates, documentation, and legal developments
Regulatory compliance and audits	Providing information required by or relating to audits, inquiries, or investigations by regulators, professional bodies, lenders, quality schemes, insurers, and similar organizations
Recording telephone calls	Security, quality assurance, and staff training purposes
Quality assurance and compliance	To ensure compliance with our policies, procedures, and professional standards
Statistical analysis and practice management	To help us manage our practice effectively and ensure service quality
Updating client records	To maintain accurate records and ensure quality of service delivery
Marketing to existing and previous clients	To promote our services to clients who have previously used our services or expressed interest (with appropriate consent where required)

Legal Basis for Processing

Under UK GDPR, Connaught Law processes your personal information based on the following legal grounds:

Consent: You provide explicit consent when submitting contact forms, agreeing to receive communications, or authorizing specific data processing
Contract Performance: Processing is necessary to provide legal services you have requested or to enter into a client services agreement
Legal Obligations: We must process certain information to comply with legal, regulatory, and professional obligations applicable to law firms
Legitimate Interests: Processing is necessary for our legitimate business interests in providing professional legal services, maintaining client relationships, and operating our law firm effectively

Additional Purposes: If we wish to use your information for purposes not described in this Privacy Policy, we will seek your explicit consent and will only process your data for such purposes after receiving your affirmative agreement, except where required by law.

Connaught Law respects the confidentiality of your personal information and will not sell, rent, or trade your data to third parties for marketing purposes. We share your information only in limited circumstances as described below, ensuring appropriate safeguards are in place to protect your data.

We Routinely Share Personal Data With:

Colleagues within Connaught Law: To deal with your matter effectively and ensure compliance with our professional obligations
Legal professionals and experts: Including barristers, medical experts (in personal injury cases), expert witnesses, and other specialists required to provide comprehensive legal services
Third parties involved in your matter: Your lender, Land Registry (on conveyancing matters), government agencies, courts, and regulatory bodies as required
Opposing parties and their advisers: "The other side," their solicitors, barristers, and experts as your legal matter dictates
Service providers: Organizations who provide IT services, hosting, email services, and other technical support to enable us to provide services to our clients
Professional advisors: Our insurers, accountants, auditors, and other professional advisors to our business
Financial institutions: Our banks for payment processing and financial transactions
Analytics providers: We use Google Analytics to understand website usage patterns and improve user experience

We only allow our service providers to handle your personal data if we are satisfied they take appropriate measures to protect your personal information. All third-party service providers are contractually obligated to use your data only for specified purposes, maintain appropriate security measures, and retain information only for the minimum period necessary.

We May Also Share Personal Data:

Regulatory Bodies: To disclose and exchange information with the Solicitors Regulation Authority (SRA), Information Commissioner's Office (ICO), and other regulatory bodies to comply with our legal and regulatory obligations
Law Enforcement: To provide information to the National Crime Agency (NCA) or other appropriate bodies to meet our obligations under regulations relating to money laundering, proceeds of crime, and counter-terrorism
Business Transfers: We may need to share some personal data with other parties, such as potential buyers of some or all of our business or during restructuring. The recipient would be bound by confidentiality obligations
Legal Requirements: To comply with applicable laws, regulations, court orders, subpoenas, or other legal processes
Rights Protection: To enforce our agreements, terms of service, client engagement letters, or to protect our legal rights and interests
Claims Response: To respond to claims that your use of our website or services violates third-party rights or applicable law

Where Your Personal Data is Held

Your personal information will be held securely at our offices and by our IT service providers within the United Kingdom. We do not intend that any of your personal information held by us will be transferred outside of the United Kingdom or European Economic Area.

However, some third-party service providers (such as analytics providers) may process data outside the UK. When we transfer personal information internationally, we ensure appropriate safeguards are in place, including:

Adequacy Decisions: Transferring data to countries recognized by the UK government as providing adequate data protection
Standard Contractual Clauses: Using ICO-approved standard contractual clauses with service providers
Binding Corporate Rules: Relying on approved binding corporate rules where applicable

Contact Information: Connaught Law Limited, 4th Floor, Totara Park House, 34–36 Gray's Inn Road, London WC1X 8HR, United Kingdom | Email: [email protected] | Phone: +44 (0) 203 909 8399

How Long Your Personal Data Will Be Kept

Connaught Law retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and professional obligations applicable to law firms.

We will keep your personal data after we have finished acting for you for the following reasons:

To respond to any questions, complaints, or claims made by you or on your behalf
To show that we treated you fairly and provided appropriate professional services
To keep records required by law and professional regulations
To comply with Solicitors Regulation Authority (SRA) requirements
To meet professional indemnity insurance requirements

Specific Retention Periods

Information Type	Retention Period	Justification
Contact Form Inquiries	Minimum 6 years	To respond to inquiries, provide legal services, and meet regulatory requirements
General Client Files	Minimum 6 years after matter closure	SRA requirements, professional indemnity insurance, and legal practice regulations
Property Purchase/Conveyancing	10 years after completion	Property law requirements and potential claims periods
Estate Administration	10 years after estate closure	Probate law requirements and executor liability periods
Wills	Indefinitely (or 6 years after death)	To enable estate administration and ensure testamentary wishes are fulfilled
Financial Records	6-7 years	HMRC requirements and accounting regulations
Analytics Data	Anonymized data retained indefinitely	Aggregated, non-identifiable data for website improvement and business analytics

We will not retain your data for longer than necessary for the purposes set out in this policy. After the relevant retention period, information in both paper and electronic form will be securely deleted or destroyed. However, we may retain basic information (name, address, and matter reference) for longer periods where necessary for identifying potential conflicts of interest in future matters.

We may retain certain information for longer periods when required by law, for fraud prevention, to enforce legal rights, or for other legitimate business purposes in accordance with applicable legal and regulatory requirements.

Your Rights

Under UK GDPR and the Data Protection Act 2018, you have comprehensive rights regarding your personal information. Connaught Law is committed to facilitating the exercise of these rights and responding to requests in accordance with applicable law.

Your Data Protection Rights

You have the following rights, which you can exercise free of charge:

Right of Access: Access to your personal information and certain supplementary information that this Privacy Policy addresses
Right to Rectification: Require us to correct any mistakes or inaccuracies in your information which we hold
Right to Erasure (Right to be Forgotten): Require the erasure of personal information concerning you in certain situations where there is no compelling legal reason for continued processing
Right to Data Portability: Receive the personal information concerning you which you have provided to us in a structured, commonly used, machine-readable format, and have the right to transmit that data to a third party in certain situations
Right to Object to Direct Marketing: Object at any time to processing of personal information concerning you for direct marketing purposes
Right to Object to Automated Decision-Making: Object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
Right to Object to Processing: Object in certain other situations to our continued processing of your personal information based on legitimate interests
Right to Restrict Processing: Otherwise restrict our processing of your personal information in certain circumstances, such as where accuracy is contested or processing is unlawful
Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time without affecting the lawfulness of processing before withdrawal
Right to Lodge a Complaint: You have the right to file a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection

For further information on each of these rights, including the circumstances in which they apply, please refer to the ICO's guidance on individuals' rights under UK GDPR.

How to Exercise Your Rights

If you would like to exercise any of these rights, please:

Email, call, or write to our Data Protection Officer (contact details below)
Provide us with enough information to identify you (including your name, address, and matter reference if applicable)
Provide proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill)
Let us know what right you want to exercise and the information to which your request relates

We will respond to your request within one month in accordance with UK GDPR requirements, though complex requests may require up to two additional months with appropriate notification.

Important Limitation: If you do not allow us to collect or process required personal information, or if you withdraw consent to process the same for required purposes, you may not be able to access or use our services. Some data retention is mandatory under legal and regulatory requirements applicable to law firms and cannot be deleted upon request, particularly where we have ongoing legal and regulatory obligations.

Cookies and Tracking Technologies

Connaught Law uses cookies and similar tracking technologies to enhance website functionality, analyze usage patterns, and improve user experience. Cookies are small text files stored on your device that enable certain website features and help us understand how visitors interact with our website.

We employ both necessary cookies required for website operation and analytics cookies to understand website performance. Detailed information about specific cookies, their purposes, duration, and management options is available in our comprehensive Cookie Policy.

You can control cookie settings through our cookie consent banner when first visiting our website or by adjusting your browser settings. Please note that blocking certain cookies may impact website functionality and your ability to access certain features.

Security

The security of your information is important to Connaught Law, and we implement appropriate technical and organizational measures to protect your personal information against unauthorized access, accidental loss, destruction, or damage.

Our Security Measures Include:

Encryption: Industry-standard encryption protocols to protect data transmission and storage
Access Controls: Personal information is accessible only to authorized personnel who require it for legitimate business purposes
Secure Infrastructure: Secure hosting services, firewalls, and regular security assessments to protect our systems
Staff Training: Regular training on data protection best practices and confidentiality obligations
Physical Security: Secure office premises with controlled access and document storage protocols
Incident Response: Procedures to detect, respond to, and report data breaches in accordance with UK GDPR requirements

Security Disclaimer: We use reasonable security measures to prevent the loss, misuse, or unauthorized alteration of your information under our control. However, given the inherent risks of internet transmission and electronic storage, we cannot guarantee absolute security. Consequently, we cannot ensure or warrant the security of any information you transmit to us, and you do so at your own risk. We encourage you to take appropriate precautions when sharing sensitive information online.

Third-Party Links and Use of Your Information

Our website may contain links to external websites, resources, and services operated by third parties, including government agencies, legal information resources, professional organizations, and other relevant bodies. These links are provided for your convenience and reference.

This Privacy Policy does not address the privacy practices of any third parties, including any third party operating any website or service that may be accessible via a link on our website. Connaught Law does not control these third-party websites and is not responsible for their privacy practices, content, or services.

We strongly advise you to review the privacy policy of every website you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

The inclusion of links to external websites does not constitute endorsement of those websites, their operators, or their content.

Children's Privacy

Our website and legal services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected], and we will promptly delete such information from our systems.

Grievance and Data Protection Officer

How to Contact Us

If you have any questions, concerns, or requests regarding your personal information or this Privacy Policy, please contact our Data Protection Officer:

Tanya Shapoval
Data Protection Officer
Connaught Law Limited
4th Floor, Totara Park House
34–36 Gray's Inn Road
London WC1X 8HR
United Kingdom

Email: [email protected]
Phone: +44 (0) 203 909 8399

We are committed to addressing your concerns in accordance with applicable law and will respond to privacy-related inquiries within one month. If you have queries or concerns about the processing of your information, we hope that we can resolve any issues you raise about our use of your information.

How to Complain

If you are unhappy about the data we hold, how we use it, or about this Privacy Policy, please contact us with your concerns using the details above. We will investigate and respond to your complaint promptly.

The UK GDPR also gives you the right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner's Office (ICO).

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom

Website: https://ico.org.uk/make-a-complaint/
Helpline: 0303 123 1113

Related Policies: For information about cookies and tracking technologies, please review our Cookie Policy. For general website terms of use, please refer to our Terms & Conditions.

Questions about your data?

On This Page