Data Protection Policy


We are committed to safeguarding the privacy of our website visitors, service users, individual clients and personnel.
This policy applies where we are acting as a ‘data controller’ with respect to the personal data of such persons; in other words, where we determine the purposes and means of the processing of that personal data.
Our website incorporates privacy controls which affect how we will process your personal data.

1. Credit

This document was created using a template from Docular (

2. The personal data that we collect we collect about you?

We seek to collect information about you so that we can:

  • Deliver information to you about our services
  • Provide services to you Enable business development
  • Respond to your enquiries
  • Process and respond to any complaints you may have
  • Enable us to meet legal obligations which are imposed on us
  • Obtain payment from you
  • Audit of our website

The information we need for these purposes is known as your “personal data”. Your personal data includes your name, home address, email address, telephone numbers, national insurance numbers, date of birth and other financial information. We collect this information from you in a variety of ways e.g., over the telephone, by completing a form, via email or during direct face to face meetings.

Information may be passed to us by third parties in order that we can undertake legal work on your behalf. Typically, these organisations can be:

  • Banks or building societies
  • Panel providers who allocate legal work to law firms
  • Government departments


3. How do we use this information

We use the data collected from you for the specific reasons and purposes listed in the table below. This table will also help you understand when your data will be shared with a third-party organisation.

Purpose for processing dataLegal basis for processing dataThird Party organisations with whom data is shared
To provide legal services to you and respond to enquiriesTo meet contractual requirementsNone
To obtain payment for our services and provide you with invoices/billsTo meet contractual requirementsTax inspectors, HM Revenue and Customs, Government and auditors (external and internal)
To process and respond to any complaintsTo meet a legal obligationIndemnity Insurance providers, Legal Ombudsmen, regulator the SRA
To monitor and record the use of our website and information relating to the use of our servicesTo meet a legitimate interest in order to improve our services and experiences on our websiteWeb service providers, cookie providers
To monitor the quality of our services via satisfaction questionnairesTo meet a legitimate interest in order to improve our servicesNone
To ensure that the firms offices and its stored information is secure we use CCTV servicesTo meet contractual requirementsCCTV services providers
To verify your ID and source of fundsTo meet contractual requirementsAnti-Money Laundering search providers
To obtain insurance policies on your behalfTo meet contractual requirementsLegal Indemnity Insurance Companies.
To seek advice from Third Parties such as legal or non-legal expertsTo meet contractual requirementsCounsel, legal experts and non-legal experts, banks, financial institutions, brokers
To conduct human resource administration to include assessing suitability and/or fitness to workTo meet contractual obligations this includes taking action before entering a contractDisclosure and Barring services (DBS)


4. Your rights

Under the terms of General Data Protection Regulation (GDPR) legislation, you have the following rights:

  • Right to Access
    You are entitled to access your personal data. This is known as a “subject access request”. You can obtain this information at no cost. We will send you a copy of the information within 30 days of your request. A request for personal data means that you are entitled to a copy of the data we hold on you such as your name, address, contact details, date of birth, etc but it does not mean that you are entitled to the documents that contain this data. To make a Subject Access request, please send your request in writing to Z Legal Solicitors, 52 Lozells Road, Birmingham, B19 2TJ or by email
  • Right to be Informed
    This Privacy Notice and our Cookie Policy fulfils our obligation to tell you the ways in which we use your information.
  • Right to be Forgotten
    You have the right to ask that we erase all personal information that we hold about you. Where it is appropriate that we comply with your request, your request will be dealt with within 30 days. For further information please contact our office or email
  • Right to Rectification
    You have the right to have personal data rectified if it is inaccurate or incomplete. Please contact our office if you wish to exercise this right.
  • Right to object
    You have the right to object to the continued use of your data for any purpose listed above for which consent is identified as the lawful basis for processing i.e. you have the right to withdraw your consent at any time. You have the right to object to the continued use of your data for any purpose listed above for which the lawful basis of processing is that it has been deemed legitimate.
  • Right to Restrict Processing
    If you wish us to restrict the use of your data because:
    • You think its inaccurate but will take time to validate;
    • You believe our data processing is unlawful, but you do not want your data erased;
    • You want us to retain your data to establish, exercise or defend a legal claim or;
    • You wish to object to the processing of your data, but we have yet to determine whether this is appropriate

Please contact our office on the details supplied

5. Complaints about the use of personal data

We are not aware of any justifiable reason that would constitute a legitimate reason for objecting or complaining about the way we process or control information.
However, if you wish to raise a complaint then you can contact our office in writing or by email:
If you are not satisfied with our response you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) who may be contacted at Wycliffe House, Water Lane, Wilmslow SK9 5AF or via their website

6. How long will we retain information for

We will retain information for a period of 6 years. This is due to regulatory reasons and to ensure our business records are adequate to maintain the requisite levels of insurance to protect clients and non clients. None of the information that we collect, process or store is transferred outside of the European Economic Area (EEA).

7. Privacy and Security of your data

We recognise that your information is valuable, and we take all reasonable measures to protect it whilst it’s in our care.
We have high standards of technology and operational security to protect personally identifiable data from loss, misuse, alteration or destruction.
We adopt a high standard when it comes to confidentiality obligations and both internal and external parties have agreed to protect the confidentiality of all information to ensure all data is handled and processed in line with our stringent confidentiality and protection policies.
We use computer safeguards such as firewalls, data encryption and software penetration testing. Where possible, physical access controls our buildings and files to keep data safe and secure.
General Questions and comments regarding our Privacy Policy are welcome and should be sent to our office or to