1. Data Controller
Locksley Law (a trading name of RH Law Ltd, SRA No. 659355) is the Data Controller for personal data collected through this website and in connection with our legal services.
Email: contact@locksleylaw.co.uk
We are registered with the Information Commissioner's Office (ICO).
2. What Personal Data We Collect
| Category | Examples |
|---|---|
| Identity Data | Title, first name, last name, middle names, date of birth |
| Contact Data | Email address, mobile number, postal address |
| Financial Data | Finance agreement type, lender name, agreement dates |
| Technical Data | IP address, browser type, cookie data, referring URL |
| Usage Data | Pages visited, time spent, form completions |
| Signature Data | Electronic signature image |
| Communications | Emails and correspondence between you and Locksley Law |
3. How We Use Your Personal Data
- Processing your claim: To assess eligibility, prepare and submit your complaint, and manage the claims process.
- Communication: To keep you informed about the progress of your claim.
- Legal compliance: To comply with our regulatory obligations under SRA rules and applicable law.
- Service improvement: To analyse how users interact with our website.
- Marketing (with consent): To send you information about related services where you have given consent.
4. Legal Basis for Processing
| Purpose | Legal Basis (UK GDPR) |
|---|---|
| Processing your claim | Performance of a contract (Art. 6(1)(b)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
| Fraud prevention | Legitimate interests (Art. 6(1)(f)) |
| Analytics | Legitimate interests / Consent (Art. 6(1)(a) or (f)) |
| Marketing communications | Consent (Art. 6(1)(a)) |
6. How Long We Keep Your Data
- Active claims: For the duration of the claim and 7 years thereafter.
- Unsuccessful or cancelled claims: 3 years from cancellation or closure.
- Marketing data: Until you withdraw consent.
- Technical and analytics data: Up to 26 months.
7. Your Rights Under UK GDPR
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data, subject to legal obligations.
- Right to Portability: Request your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing.
To exercise any of these rights, contact us at contact@locksleylaw.co.uk. If unsatisfied, you have the right to lodge a complaint with the ICO at ico.org.uk.
9. Security
- SSL/TLS encryption for all data transmitted via our website;
- Encrypted storage of sensitive data;
- Access controls limiting data access to authorised personnel only;
- Regular security assessments and staff training.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified by email or prominent notice on our website.