Privacy Notice
DRAFT FOR REVIEW. This notice is a working draft prepared from the firm's known details. Please have it reviewed and approved by the firm before publication, and fill the fields marked […].
1. Who we are
Lucid Legal ("we", "us", "our") is a firm of solicitors regulated by the Solicitors Regulation Authority (SRA No. 8011100). We are the data controller responsible for your personal data. This notice explains how we collect, use, share and protect that data, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Lucid Legal
Unit 5, Hurstwood Court, New Hall Hey Road, Rossendale, BB4 6HH
Email: [email protected] · Telephone: 01706 452022
Data Protection Officer: Christian Aherst — [email protected]
ICO registration number: [REGISTRATION NUMBER]
2. The personal data we collect
Depending on your relationship with us, we may collect and process:
- Identity and contact data — name, address, email, telephone number, and, where required for a matter, identity-verification documents.
- Matter data — information about the legal matter you instruct us on, including correspondence, documents, and details of other parties.
- Financial data — billing details and payment information.
- Enquiry data — information you provide through our website contact form or when you get in touch with us.
- Technical data — limited information about your use of our website (see "Cookies and our website" below).
Where a matter requires it, we may also process special category data (for example, health information) or information about criminal convictions, in accordance with the additional protections that apply to such data.
3. How we use your data and our lawful basis
We use your personal data only where the law allows. Our lawful bases include:
- Contract — to provide the legal services you have instructed us to provide.
- Legal obligation — to comply with our professional, regulatory and legal duties (for example anti-money-laundering checks and record-keeping).
- Legitimate interests — to respond to enquiries, manage and improve our services, and run our business, provided your interests and rights do not override those interests.
- Consent — where you have given it, for example to receive certain communications. You may withdraw consent at any time.
4. Who we share your data with
We do not sell your personal data. We may share it, only as necessary, with: barristers, experts and other third parties instructed on your matter; HM Courts & Tribunals Service and other bodies where required for your matter; our regulators and auditors; and our trusted service providers (for example IT and case-management systems) who process data on our behalf under appropriate contractual safeguards. We may also disclose data where required by law.
5. How long we keep your data
We keep your personal data only for as long as necessary for the purposes for which it was collected, including to meet our legal, regulatory and professional-indemnity obligations. Retention periods vary by matter type and are set out in our retention policy. When data is no longer needed, we securely delete or anonymise it.
6. How we protect your data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, and we keep those measures under review.
7. Cookies and our website
Our website uses only the cookies necessary for it to function and, where applicable, to understand how the site is used. [Confirm the cookies actually in use and expand this section / add a cookie banner if any non-essential cookies are set.]
8. Your rights
Under UK data protection law you have the right to: be informed about how we use your data; access your data; have inaccurate data corrected; have your data erased in certain circumstances; restrict or object to processing; and data portability. To exercise any of these rights, contact our Data Protection Officer using the details above. We will respond within the time limits set by law.
9. Complaints
If you are concerned about how we have handled your personal data, please contact us first so we can put things right — see our Data Protection Complaints Policy. You also have the right to complain to the Information Commissioner's Office (ICO) at any time: ico.org.uk · Helpline 0303 123 1113.
10. Changes to this notice
We may update this notice from time to time to reflect changes in the law or our practices. The "last reviewed" date at the top shows when it was most recently updated.