Legal · Draft
Privacy notice
This is a draft UK GDPR privacy notice for legal review. Bracketed details must be completed before reliance or publication as final legal wording.
Who controls your information
The data controller is [Controller name]. Privacy enquiries may be sent to [Contact details].
What we collect
We collect the details you choose to provide through the private enquiry form, including your name, reply address, preferred reply method, areas of interest, and private brief.
Why we use it
We use this information only to assess and respond to your enquiry. Our lawful basis is [Lawful basis].
Retention
Enquiry information is retained for [90 days], unless a longer period is required by law or agreed with you as part of an engagement.
Sharing and security
Access is restricted to authorised personnel and carefully selected service providers where needed to operate this website or respond to you. We do not sell enquiry information.
Your rights
Subject to UK data protection law, you may ask for access, correction, deletion, restriction, or portability, and may object to certain uses. You may also complain to the Information Commissioner's Office.