Privacy Policy

Our Commitment to Your Privacy

At Pembridge, we take your privacy seriously and are committed to protecting your personal information. This privacy policy explains what data we collect, how we use it, and your rights regarding that information.

We process personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. This policy applies to all visitors and users of our website and services.

Information We Collect

We collect different types of information depending on how you interact with our website and services.

Information You Provide Directly

When you contact us or use our services, you may provide:

Name and contact details, including email address and telephone number
Information about your legal matter or enquiry
Correspondence with us, including emails and messages
Payment and billing information when engaging our services
Any other information you choose to share with us

Information Collected Automatically

When you visit our website, we automatically collect:

Technical information, including IP address, browser type, and device information
Usage data, such as pages visited, time spent on pages, and navigation patterns
Cookie data, as detailed in our Cookie Policy
Referral source and exit pages

Legal Basis for Processing

We process your personal data under the following legal bases:

Contract: To provide legal services you have requested
Legitimate interests: To improve our services and communicate with potential clients
Consent: Where you have given permission for specific processing activities
Legal obligation: To comply with our regulatory and professional duties

How We Use Your Information

We use your personal information for the following purposes:

Providing Legal Services

To respond to your enquiries, provide legal advice, and deliver the services you have engaged us for.

Communication

To contact you regarding your matter, send updates about our services, and respond to your correspondence.

Website Improvement

To understand how visitors use our website and identify areas for improvement in functionality and content.

Legal and Regulatory Compliance

To comply with our professional obligations, including anti-money laundering requirements and conflicts of interest checks.

Security and Fraud Prevention

To protect our website, services, and clients from security threats and fraudulent activity.

Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

Service providers: Third parties who assist us in operating our website and providing services, such as IT support and payment processors
Professional advisers: Barristers, expert witnesses, and other professionals engaged to assist with your matter
Regulatory authorities: When required by law or professional regulations
Law enforcement: If legally required to do so or to protect our legal rights

All third parties are required to maintain the confidentiality and security of your personal information and may only use it for the specified purposes.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Access controls limiting who can view your information
Regular security assessments and updates
Secure storage of physical and electronic records
Staff training on data protection and confidentiality

Whilst we take all reasonable precautions, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but continuously work to maintain the highest standards of data protection.

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy and to comply with our legal and professional obligations.

Client files: Retained for a minimum of seven years after conclusion of your matter, in accordance with professional regulations
Enquiry data: Retained for up to two years if you do not proceed with engaging our services
Website analytics: Aggregated data may be retained indefinitely; individual user data is retained for up to 26 months
Marketing communications: Until you unsubscribe or request deletion

After the retention period expires, we securely delete or anonymise your personal information.

Your Rights

Under data protection law, you have several rights regarding your personal information:

Right to Access

You can request a copy of the personal information we hold about you.

Right to Rectification

You can ask us to correct inaccurate or incomplete information.

Right to Erasure

You can request deletion of your personal information in certain circumstances, subject to our legal and professional obligations.

Right to Restrict Processing

You can ask us to limit how we use your information in certain situations.

Right to Data Portability

You can request your information in a structured, commonly used format to transfer to another provider.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

Avoid filling out contact forms, account registrations, or any data-submitting features
Disable cookies through your browser settings (see our Cookie Policy for more details)
Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience and analyse website traffic. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policies of any website you visit.

Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

International Data Transfers

Your personal information is primarily processed within the United Kingdom. If we transfer data outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as:

Adequacy decisions recognising equivalent data protection standards
Standard contractual clauses approved by the UK Information Commissioner's Office
Binding corporate rules or certification schemes

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make significant changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website and services after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy, wish to exercise your rights, or have concerns about how we handle your personal information, please contact us:

Email: info@domain.com

Telephone: +44 20 7831 4627

Address: 55 Lincoln's Inn Fields, London WC2A 3LJ

Data Protection Officer: You can request to speak with our Data Protection Officer by contacting us at the above details.