Privacy Notice

1. Who are we?

Barretts Law is a law firm regulated by the Solicitors Regulation Authority. We are the data controller for the personal information we collect and use in the course of providing legal services. Our registered address is 162 Queens Road, Buckhurst Hill, Essex, IG9 5BD.

Data Protection Officer: Matthew Barrett.

2. What is the purpose of this document?

Client confidentiality and the protection of information is the foundation of our relationship with our clients. As a professional services firm, regulated by the Solicitors Regulation Authority, Barretts has specific statutory, common law and regulatory obligations regarding the maintenance of client confidentiality, and the protection and processing of personal data.

This Privacy Notice shows how and why we process any personal data we may collect, or that you provide to us.

If you have any questions about this notice, you can contact us at: office@barrettslaw.co.uk or on 0203 649 0550.

3. What personal data may we need to collect?

We ask for certain information as it enables us to provide our services to you. Which different types of personal data are required depends on which services we provide.

The information needed may include:

  • Contact details: names, addresses (including historic), email, and telephone number.
  • Identification data: date of birth, any previous names, marital status, identification documents.
  • Matter-related information: details relevant to your legal matter, which may include sensitive or special category data (e.g., health, criminal allegations, ethnicity) where necessary.
  • Financial information: bank details, payment information, billing records or bank statements.
  • Communication data: emails, letters, meeting notes, call recordings (if applicable).
  • Website data: IP address, cookies and analytics (if applicable).

4. How do we collect your data?

We may collect information:

  • Directly from you (in meetings, calls, forms or correspondence).
  •  
  • From third parties such as other law firms, experts, regulators, courts or public bodies.
  • From publicly available sources (Companies House, HM Land Registry, social media etc.).
  • Through our website or online services.

5. Why do we hold your personal data?

We process your data for the following purposes:

  • To provide legal advice and representation.
  • To comply with legal and regulatory obligations, including anti-money laundering checks.
  • To manage our relationship with you, including billing and administration.
  • To improve our services, including training and quality assurance.
  • To protect our business, including fraud prevention and conflict checks.

In compliance with the UK GDPR, our lawful bases for data collection include:

  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate interests
  • Consent (only where required)

6. Special category and criminal offence data

Where your matter requires us to process sensitive information, we will do so only where permitted by law for example, because it is necessary for the establishment, exercise or defence of legal claims.

7. Who will see or use your data?

We may share your information with:

  • Barristers, experts and other professional advisers
  • Courts, tribunals, regulators and public authorities
  • Opposing parties and their legal representatives (where required)
  • Service providers such as IT, case management and external service providers such as those who manage onboarding and AML checks
  • Banks, insurers and auditors

We ensure all third parties protect your data and use it only for the purposes we specify.

8. How long will we keep your data?

We retain personal data in line with our regulatory obligations and internal retention policy. Typically, legal files are kept for 6 years after a matter closes, unless a longer period is required.

9. What are your rights?

You have rights under data protection law, including:

  • Access to your personal data
  • Correction of inaccurate information
  • Erasure (in certain circumstances)
  • Restriction or objection to processing
  • Data portability
  • The right to withdraw consent (where consent is the lawful basis)

To exercise these rights, contact us using the details above.

10. How do we protect your data?

We use technical and organisational measures to safeguard your information, including cyber essentials accreditation, secure systems, access controls, encryption and staff training.

11. Complaints

If you have any concerns about our handling of your data, please contact us via the telephone number or email address listed in clause two of this document. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

12. Updates to this notice

We may update this notice from time to time. The latest version will always be available on our website or on request.

Scroll to Top