1. Who We Are
Dempsy Solicitors ("we", "us", "our") is a regulated legal practice authorised and regulated by the Solicitors Regulation Authority (SRA No. 123456789). We are committed to protecting the privacy and security of your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We may collect and process the following personal data:
- ▸Identity Data: name, title, date of birth, gender
- ▸Contact Data: address, email address, telephone numbers
- ▸Financial Data: bank account details, payment card information (where required for billing)
- ▸Matter Data: information you provide in connection with your legal matter
- ▸Technical Data: IP address, browser type, pages visited (via cookies and analytics)
- ▸Marketing Data: your preferences for receiving communications from us
3. How We Use Your Information
We use your personal data for the following purposes:
- ▸To provide you with legal services and fulfil our contractual obligations to you
- ▸To respond to your enquiries and communicate with you about your matter
- ▸To carry out identity verification and anti-money laundering checks (legal obligation)
- ▸To comply with our regulatory and professional obligations as a regulated law firm
- ▸To send you relevant legal updates or newsletters (with your consent, which may be withdrawn at any time)
- ▸To improve our website and services through analytics
4. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR:
- ▸Contract: where processing is necessary to perform a contract with you or take steps prior to entering a contract
- ▸Legal Obligation: where we are required to process data to comply with the law (e.g. AML obligations, SRA requirements)
- ▸Legitimate Interests: where processing is necessary for our legitimate business interests, provided these are not overridden by your rights
- ▸Consent: where you have given your explicit consent (e.g. for marketing communications)
5. Sharing Your Information
We may share your personal data with third parties only where necessary, including:
- ▸HM Land Registry, HMRC, courts, tribunals, and other public bodies as required by your matter
- ▸Barristers, experts, and other legal professionals instructed on your behalf
- ▸Identity verification and anti-money laundering service providers
- ▸Our professional indemnity insurers and the SRA, where required
- ▸IT service providers and cloud storage providers acting as data processors on our behalf
We do not sell your personal data to any third party.
6. Data Retention
We retain client files and related personal data for a minimum of 6 years following the conclusion of your matter, in accordance with our professional obligations and applicable limitation periods. Anti-money laundering records are retained for 5 years from the end of the business relationship. Enquiry data from individuals who do not become clients is deleted within 12 months.
7. Your Rights
Under UK GDPR, you have the right to:
- ▸Access your personal data (Subject Access Request)
- ▸Rectification of inaccurate or incomplete data
- ▸Erasure ('right to be forgotten') in certain circumstances
- ▸Restriction of processing in certain circumstances
- ▸Data Portability in certain circumstances
- ▸Object to processing based on legitimate interests or for direct marketing
- ▸Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at info@dempseysolicitors.com. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted communications, access controls, and secure file storage. All staff are trained on data protection obligations.
9. Cookies
Our website uses cookies to enhance your experience and for analytics purposes. Please see our Cookie Policy for full details.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. If changes are material, we will notify existing clients directly.