Last Updated: 22 October 2025
Effective Date: 22 October 2025
Introduction
Please read this Privacy Policy carefully as it contains important information on how and why Connaught Law Limited collects, stores, uses, and shares your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities if you have a complaint.
Connaught Law Limited is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at https://connaughtlaw.com, engage our legal services, or otherwise interact with our firm.
Who We Are: We are Connaught Law Limited. When we use your personal data, we are regulated under the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), and we are responsible as 'controller' of that personal data. We are registered with the Information Commissioner's Office (ICO) under registration number ZA255485. Our use of your personal data is subject to your instructions, applicable data protection legislation, and our professional duty of confidentiality.
By accessing or using our website or engaging our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our website or services.
Changes to This Privacy Policy
Connaught Law may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational needs. We will post any revised Privacy Policy on our website with an updated "Last Updated" date. If you are a current client, we will also inform you of material changes via our usual means of written communication. Changes will be effective 180 days from posting, and your continued use of our website or services after such changes constitutes acceptance of the revised Privacy Policy. We recommend reviewing this page regularly to stay informed about our privacy practices.
Connaught Law collects personal information necessary to provide professional legal services, respond to inquiries, and fulfill our regulatory obligations. The personal data we collect depends on the nature of your engagement with our firm.
Personal Data We Always Collect
When you contact us or instruct us to provide legal services, we routinely collect the following personal information:
- Contact Information: Your name, address, email address, and telephone numbers
- Identity Verification: Information to enable us to check and verify your identity for regulatory compliance and anti-money laundering requirements
- Matter Information: Information relating to the legal matter in which you are seeking our advice or representation
Personal Data We Collect Through Website Contact Forms
When you submit an inquiry through our website contact forms, we collect:
- Name, email address, and mobile phone number
- Country/Region of residence
- Practice area of interest and message content
- Preferred consultation date, time, and contact preferences
- Urgency of inquiry and communication consent preferences
Personal Data We May Collect Depending on Your Matter
Depending on the nature of the legal services you require, we may collect additional personal information, including:
| Category |
Types of Information |
Typical Use Cases |
| Financial Information |
National Insurance number, tax details, bank/building society details |
Property transactions, estate administration, financial settlements |
| Family Information |
Details of spouse/partner, dependants, other family members |
Family law matters, immigration applications, estate planning |
| Employment Information |
Employment status, salary, benefits, employment records |
Employment law disputes, immigration sponsorship, financial assessments |
| Medical Information |
Medical records, health information |
Personal injury claims, immigration health requirements, capacity assessments |
| Criminal Records |
Details of previous convictions |
Immigration applications, disclosure requirements, rehabilitation assessments |
| Other Information |
Any other information necessary for your instructions |
As required for specific legal matters |
Special Category Personal Data
Some legal matters require us to process special category personal data as defined by UK GDPR. This includes information relating to:
- Race or ethnic origin
- Political opinions or religious beliefs
- Trade union membership
- Genetic data or biometric data (where used for identification purposes)
- Health information
- Sexual orientation or sex life
- Criminal convictions and offences
Special Category Data Processing: We will only process special category personal data with your explicit consent or where we have another specific legal authority (such as a court order, legal proceedings, or regulatory requirements). Where explicit consent is required, we will obtain this separately and clearly explain the purposes for which we need this information.
Information Collected Automatically
When you visit our website, certain technical information may be collected automatically through cookies and similar tracking technologies, including analytics data that helps us understand website usage and improve user experience. For detailed information about cookies, please review our Cookie Policy.
Telephone Call Recording
We may record telephone calls for security, quality assurance, and training purposes. Where calls are recorded, you will be informed at the beginning of the call.
Important Notice: This personal data is required to enable us to provide professional legal services to you. If you do not provide the personal data we request, it may delay or prevent us from providing services to you, and we may be unable to fulfill our regulatory obligations.
Connaught Law processes your personal information for specific, legitimate purposes in accordance with UK GDPR requirements. We use your information only for the purposes described below and will not process your data for incompatible purposes without obtaining your explicit consent.
Purposes of Data Processing
| What We Use Information For |
Legal Basis and Justification |
| Providing legal services to you |
To meet our contractual obligations to you and fulfill your instructions |
| Confirming your identity |
Regulatory requirement and professional obligation under anti-money laundering legislation |
| Client support and administration |
To respond to inquiries, manage case files, schedule consultations, and coordinate legal proceedings |
| Professional communication |
Facilitating communication regarding case updates, documentation, and legal developments |
| Regulatory compliance and audits |
Providing information required by or relating to audits, inquiries, or investigations by regulators, professional bodies, lenders, quality schemes, insurers, and similar organizations |
| Recording telephone calls |
Security, quality assurance, and staff training purposes |
| Quality assurance and compliance |
To ensure compliance with our policies, procedures, and professional standards |
| Statistical analysis and practice management |
To help us manage our practice effectively and ensure service quality |
| Updating client records |
To maintain accurate records and ensure quality of service delivery |
| Marketing to existing and previous clients |
To promote our services to clients who have previously used our services or expressed interest (with appropriate consent where required) |
Legal Basis for Processing
Under UK GDPR, Connaught Law processes your personal information based on the following legal grounds:
- Consent: You provide explicit consent when submitting contact forms, agreeing to receive communications, or authorizing specific data processing
- Contract Performance: Processing is necessary to provide legal services you have requested or to enter into a client services agreement
- Legal Obligations: We must process certain information to comply with legal, regulatory, and professional obligations applicable to law firms
- Legitimate Interests: Processing is necessary for our legitimate business interests in providing professional legal services, maintaining client relationships, and operating our law firm effectively
Additional Purposes: If we wish to use your information for purposes not described in this Privacy Policy, we will seek your explicit consent and will only process your data for such purposes after receiving your affirmative agreement, except where required by law.
Connaught Law respects the confidentiality of your personal information and will not sell, rent, or trade your data to third parties for marketing purposes. We share your information only in limited circumstances as described below, ensuring appropriate safeguards are in place to protect your data.
We Routinely Share Personal Data With:
- Colleagues within Connaught Law: To deal with your matter effectively and ensure compliance with our professional obligations
- Legal professionals and experts: Including barristers, medical experts (in personal injury cases), expert witnesses, and other specialists required to provide comprehensive legal services
- Third parties involved in your matter: Your lender, Land Registry (on conveyancing matters), government agencies, courts, and regulatory bodies as required
- Opposing parties and their advisers: "The other side," their solicitors, barristers, and experts as your legal matter dictates
- Service providers: Organizations who provide IT services, hosting, email services, and other technical support to enable us to provide services to our clients
- Professional advisors: Our insurers, accountants, auditors, and other professional advisors to our business
- Financial institutions: Our banks for payment processing and financial transactions
- Analytics providers: We use Google Analytics to understand website usage patterns and improve user experience
We only allow our service providers to handle your personal data if we are satisfied they take appropriate measures to protect your personal information. All third-party service providers are contractually obligated to use your data only for specified purposes, maintain appropriate security measures, and retain information only for the minimum period necessary.
We May Also Share Personal Data:
- Regulatory Bodies: To disclose and exchange information with the Solicitors Regulation Authority (SRA), Information Commissioner's Office (ICO), and other regulatory bodies to comply with our legal and regulatory obligations
- Law Enforcement: To provide information to the National Crime Agency (NCA) or other appropriate bodies to meet our obligations under regulations relating to money laundering, proceeds of crime, and counter-terrorism
- Business Transfers: We may need to share some personal data with other parties, such as potential buyers of some or all of our business or during restructuring. The recipient would be bound by confidentiality obligations
- Legal Requirements: To comply with applicable laws, regulations, court orders, subpoenas, or other legal processes
- Rights Protection: To enforce our agreements, terms of service, client engagement letters, or to protect our legal rights and interests
- Claims Response: To respond to claims that your use of our website or services violates third-party rights or applicable law
Where Your Personal Data is Held
Your personal information will be held securely at our offices and by our IT service providers within the United Kingdom. We do not intend that any of your personal information held by us will be transferred outside of the United Kingdom or European Economic Area.
However, some third-party service providers (such as analytics providers) may process data outside the UK. When we transfer personal information internationally, we ensure appropriate safeguards are in place, including:
- Adequacy Decisions: Transferring data to countries recognized by the UK government as providing adequate data protection
- Standard Contractual Clauses: Using ICO-approved standard contractual clauses with service providers
- Binding Corporate Rules: Relying on approved binding corporate rules where applicable
Contact Information: Connaught Law Limited, 4th Floor, Totara Park House, 34–36 Gray's Inn Road, London WC1X 8HR, United Kingdom | Email: [email protected] | Phone: +44 (0) 203 909 8399
How Long Your Personal Data Will Be Kept
Connaught Law retains your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal, regulatory, and professional obligations applicable to law firms.
We will keep your personal data after we have finished acting for you for the following reasons:
- To respond to any questions, complaints, or claims made by you or on your behalf
- To show that we treated you fairly and provided appropriate professional services
- To keep records required by law and professional regulations
- To comply with Solicitors Regulation Authority (SRA) requirements
- To meet professional indemnity insurance requirements
Specific Retention Periods
| Information Type |
Retention Period |
Justification |
| Contact Form Inquiries |
Minimum 6 years |
To respond to inquiries, provide legal services, and meet regulatory requirements |
| General Client Files |
Minimum 6 years after matter closure |
SRA requirements, professional indemnity insurance, and legal practice regulations |
| Property Purchase/Conveyancing |
10 years after completion |
Property law requirements and potential claims periods |
| Estate Administration |
10 years after estate closure |
Probate law requirements and executor liability periods |
| Wills |
Indefinitely (or 6 years after death) |
To enable estate administration and ensure testamentary wishes are fulfilled |
| Financial Records |
6-7 years |
HMRC requirements and accounting regulations |
| Analytics Data |
Anonymized data retained indefinitely |
Aggregated, non-identifiable data for website improvement and business analytics |
We will not retain your data for longer than necessary for the purposes set out in this policy. After the relevant retention period, information in both paper and electronic form will be securely deleted or destroyed. However, we may retain basic information (name, address, and matter reference) for longer periods where necessary for identifying potential conflicts of interest in future matters.
We may retain certain information for longer periods when required by law, for fraud prevention, to enforce legal rights, or for other legitimate business purposes in accordance with applicable legal and regulatory requirements.
Your Rights
Under UK GDPR and the Data Protection Act 2018, you have comprehensive rights regarding your personal information. Connaught Law is committed to facilitating the exercise of these rights and responding to requests in accordance with applicable law.
Your Data Protection Rights
You have the following rights, which you can exercise free of charge:
- Right of Access: Access to your personal information and certain supplementary information that this Privacy Policy addresses
- Right to Rectification: Require us to correct any mistakes or inaccuracies in your information which we hold
- Right to Erasure (Right to be Forgotten): Require the erasure of personal information concerning you in certain situations where there is no compelling legal reason for continued processing
- Right to Data Portability: Receive the personal information concerning you which you have provided to us in a structured, commonly used, machine-readable format, and have the right to transmit that data to a third party in certain situations
- Right to Object to Direct Marketing: Object at any time to processing of personal information concerning you for direct marketing purposes
- Right to Object to Automated Decision-Making: Object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
- Right to Object to Processing: Object in certain other situations to our continued processing of your personal information based on legitimate interests
- Right to Restrict Processing: Otherwise restrict our processing of your personal information in certain circumstances, such as where accuracy is contested or processing is unlawful
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time without affecting the lawfulness of processing before withdrawal
- Right to Lodge a Complaint: You have the right to file a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection
For further information on each of these rights, including the circumstances in which they apply, please refer to the ICO's guidance on individuals' rights under UK GDPR.
How to Exercise Your Rights
If you would like to exercise any of these rights, please:
- Email, call, or write to our Data Protection Officer (contact details below)
- Provide us with enough information to identify you (including your name, address, and matter reference if applicable)
- Provide proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill)
- Let us know what right you want to exercise and the information to which your request relates
We will respond to your request within one month in accordance with UK GDPR requirements, though complex requests may require up to two additional months with appropriate notification.
Important Limitation: If you do not allow us to collect or process required personal information, or if you withdraw consent to process the same for required purposes, you may not be able to access or use our services. Some data retention is mandatory under legal and regulatory requirements applicable to law firms and cannot be deleted upon request, particularly where we have ongoing legal and regulatory obligations.
Cookies and Tracking Technologies
Connaught Law uses cookies and similar tracking technologies to enhance website functionality, analyze usage patterns, and improve user experience. Cookies are small text files stored on your device that enable certain website features and help us understand how visitors interact with our website.
We employ both necessary cookies required for website operation and analytics cookies to understand website performance. Detailed information about specific cookies, their purposes, duration, and management options is available in our comprehensive Cookie Policy.
You can control cookie settings through our cookie consent banner when first visiting our website or by adjusting your browser settings. Please note that blocking certain cookies may impact website functionality and your ability to access certain features.
Security
The security of your information is important to Connaught Law, and we implement appropriate technical and organizational measures to protect your personal information against unauthorized access, accidental loss, destruction, or damage.
Our Security Measures Include:
- Encryption: Industry-standard encryption protocols to protect data transmission and storage
- Access Controls: Personal information is accessible only to authorized personnel who require it for legitimate business purposes
- Secure Infrastructure: Secure hosting services, firewalls, and regular security assessments to protect our systems
- Staff Training: Regular training on data protection best practices and confidentiality obligations
- Physical Security: Secure office premises with controlled access and document storage protocols
- Incident Response: Procedures to detect, respond to, and report data breaches in accordance with UK GDPR requirements
Security Disclaimer: We use reasonable security measures to prevent the loss, misuse, or unauthorized alteration of your information under our control. However, given the inherent risks of internet transmission and electronic storage, we cannot guarantee absolute security. Consequently, we cannot ensure or warrant the security of any information you transmit to us, and you do so at your own risk. We encourage you to take appropriate precautions when sharing sensitive information online.
Third-Party Links and Use of Your Information
Our website may contain links to external websites, resources, and services operated by third parties, including government agencies, legal information resources, professional organizations, and other relevant bodies. These links are provided for your convenience and reference.
This Privacy Policy does not address the privacy practices of any third parties, including any third party operating any website or service that may be accessible via a link on our website. Connaught Law does not control these third-party websites and is not responsible for their privacy practices, content, or services.
We strongly advise you to review the privacy policy of every website you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
The inclusion of links to external websites does not constitute endorsement of those websites, their operators, or their content.
Children's Privacy
Our website and legal services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected], and we will promptly delete such information from our systems.
How to Contact Us
If you have any questions, concerns, or requests regarding your personal information or this Privacy Policy, please contact our Data Protection Officer:
Tanya Shapoval
Data Protection Officer
Connaught Law Limited
4th Floor, Totara Park House
34–36 Gray's Inn Road
London WC1X 8HR
United Kingdom
Email: [email protected]
Phone: +44 (0) 203 909 8399
We are committed to addressing your concerns in accordance with applicable law and will respond to privacy-related inquiries within one month. If you have queries or concerns about the processing of your information, we hope that we can resolve any issues you raise about our use of your information.
How to Complain
If you are unhappy about the data we hold, how we use it, or about this Privacy Policy, please contact us with your concerns using the details above. We will investigate and respond to your complaint promptly.
The UK GDPR also gives you the right to lodge a complaint with a supervisory authority. The supervisory authority in the UK is the Information Commissioner's Office (ICO).
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Website: https://ico.org.uk/make-a-complaint/
Helpline: 0303 123 1113
Related Policies: For information about cookies and tracking technologies, please review our Cookie Policy. For general website terms of use, please refer to our Terms & Conditions.
Privacy Policy generated with CookieYes - Privacy Policy Generator