GDPR Notice

Last updated: June 19, 2026

Data Controller

UK Justice Partners acts as the data controller for personal information collected through this website and during the provision of legal services.

Contact details:
UK Justice Partners
47 Welbeck Street
Marylebone
London W1G 8DN
United Kingdom
Email: contact@domain

Categories of Personal Data

We process the following categories of personal data:

  • Identity data: name, title, business position
  • Contact data: email address, postal address, business address
  • Business data: company name, industry sector, business structure
  • Matter data: information related to legal services provided
  • Technical data: IP address, browser type, operating system
  • Usage data: website navigation patterns, page views, time spent

Lawful Basis for Processing

We process personal data under the following lawful bases as defined by UK GDPR:

Contractual Necessity

Processing is necessary for performing contractual obligations when providing legal services, responding to inquiries, and managing client relationships.

Legitimate Interests

We have legitimate business interests in:

  • Maintaining accurate client records and matter files
  • Improving service delivery and website functionality
  • Protecting against fraud and security threats
  • Managing business operations efficiently

Legal Obligations

We process data to comply with professional regulations, anti-money laundering requirements, tax obligations, and other legal duties imposed on legal practitioners.

Consent

Where required, we obtain explicit consent before processing personal data. You may withdraw consent at any time by contacting us.

Data Subject Rights

Under UK GDPR, individuals have the following rights regarding their personal data:

Right of Access

You may request confirmation of whether we process your personal data and obtain a copy of that data. We respond to access requests within one month.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of personal data in certain circumstances. This right does not apply when we have legal obligations to retain information, such as professional record-keeping requirements.

Right to Restriction

You may request that we restrict processing of your personal data in specific situations, such as while verifying data accuracy.

Right to Data Portability

You may request transfer of your personal data in a structured, commonly used, machine-readable format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

Exercising Your Rights

To exercise any of these rights, send a written request to contact@domain. We may require proof of identity before processing requests. There is no fee for exercising rights unless requests are manifestly unfounded or excessive.

Data Retention

Personal data is retained only as long as necessary for the purposes for which it was collected. For client matter files, we follow Law Society retention guidance of seven years following matter conclusion. Website usage data is typically retained for two years.

International Transfers

We do not routinely transfer personal data outside the United Kingdom. When international transfers are necessary, we ensure appropriate safeguards are in place as required by UK GDPR.

Data Security

We implement technical and organizational measures appropriate to the risk, including:

  • Encryption of data in transit and at rest
  • Access controls limiting data access to authorized personnel
  • Regular security assessments and updates
  • Staff training on data protection obligations
  • Incident response procedures for data breaches

Data Breach Notification

In the event of a personal data breach likely to result in risk to individual rights and freedoms, we will notify affected individuals within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in such risk.

Complaints

If you believe we have not handled your personal data in accordance with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: ico.org.uk

Updates to This Notice

This GDPR notice may be updated periodically to reflect changes in our data processing practices or legal requirements. Material changes will be communicated through website notification.