Privacy Policy

Laker Legal Solicitors Limited
Effective date: 18^th February 2026

1. Introduction

Laker Legal Solicitors Limited (“we”, “us”, “our”, “the Firm”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose and protect personal data in compliance with UK data-protection law, including the UK GDPR and Data Protection Act 2018 and the Data (Use and Access) Act 2025.

This policy applies to you if you:

• Visit or use our website (www.lakerlegal.co.uk);
• Contact us via email, phone, web forms or other means;
• Instruct us to provide legal services;
• Apply for a role or work with us;
• Otherwise provide your personal or sensitive data to us.

This policy replaces all previous privacy notices and applies to all personal data we process.

This policy does not form part of any contract of services. Our separate Cookie Policy deals exclusively with cookies and similar tracking technologies on our site.

2. Who We Are (Data Controller)

The data controller for your personal information is:
Laker Legal Solicitors Ltd
Registered in England & Wales: Company No. 08741600
Registered office: No 2 Sir Thomas Storey House, Lancaster, LA1 5PE
Email: info@lakerlegal.co.uk
Telephone: 01524 753040

Our Data Compliance Lead responsible for data protection matters is John Hirst.

3. Key Definitions

For clarity:

Personal data – Information relating to an identified or identifiable individual.
Special Category Data – Personal data revealing sensitive characteristics (e.g. health, race, biometric information) that require heightened protection.
Processing – Any operation carried out on personal data (collection, storage, disclosure, erasure, etc.).

4. Categories of Individuals Whose Data We Process

We may process personal data relating to:

• clients and former clients;
• prospective clients and enquirers;
• employees, consultants and temporary staff;
• job applicants;
• suppliers, referrers and professional contacts;
• website visitors; and
• people who correspond with us.

5. Categories of Personal Data We Collect

5.1 Identity and Contact Data

Name, title, address, telephone numbers, email address. Date of birth (where relevant, for example for identification and/or specific legal services).

5.2 Professional and Case-Related Data

Details of matters you instruct us on, case notes, correspondence, legal documentation.

5.3 Financial and Transactional Data

Payment details, billing and invoicing information. Fee records and payment history (where relevant).

5.4 Technical and Usage Data

IP address, browser type, device type, analytics data collected via lawful means.
Analytics data is collected only where permitted and, where required, based on your consent provided through our cookie banner.

5.5 Communication Data

Correspondence between you and the Firm.

5.6 Special Category Data

We may process Special Category Data where necessary and lawful (for example health information relevant to a legal matter or reasonable adjustments).
Where we process Special Category Data, we rely on Article 9(2)(f) UK GDPR — processing necessary for the establishment, exercise or defence of legal claims, or another lawful condition permitted by law.

5.7 Employment and HR Data

Where relevant (e.g. recruitment or employment), we may process information such as National Insurance numbers, payroll information, absence records, performance information, and other HR-related records.

6. Legal Bases for Processing Your Data

We will only process your personal data where the law allows. Typical bases include:

Contractual Necessity – To fulfil a contract for legal services.
Legal Obligation – To comply with statutory or regulatory duties including Solicitors Regulation Authority requirements and anti-money-laundering law.
Legitimate Interests – For firm administration, security, record-keeping, network protection and fraud prevention, provided your rights do not override those interests.
Consent – Where you expressly agree (e.g. marketing or optional analytics).
Vital Interests – Rare cases where necessary to protect life.
Public Interest – Where processing is necessary for tasks carried out in the public interest (for example certain fraud-prevention activity) or for the exercise of official authority vested in us (where applicable).

More than one lawful basis may apply to the same processing activity depending on the context.

We do not use personal data for decisions based solely on automated processing that produce legal or similarly significant effects.

7. How We Collect Your Personal Data

We collect data from:

• Direct interactions: conversations, forms, email, contracts.
• Website activity where cookies or analytics are enabled.
• Third parties: legal representatives, courts, experts, regulators, public registers, introducers.
• Referrals and intermediaries.
• Other communications channels you choose to use (for example fax, WhatsApp or other messaging services).
• Publicly available sources where lawful.

We may also obtain identity verification data from credit reference agencies and electronic verification providers for anti-money-laundering and client-due-diligence purposes.

We cannot provide legal services without processing personal data.

8. Purposes of Processing and Why We Do It

We process personal data to:

Provide Legal Services – Advise, prepare documents, file applications, represent you.
Client and Matter Management – Administration, scheduling, record-keeping, billing.
Communication – Respond to enquiries and updates.
Risk Management and Compliance – AML checks, conflict checks, fraud prevention, regulatory reporting.
Security and Service Improvement – Protect systems and monitor performance.
Marketing (with consent) – Send updates or newsletters.
Recruitment and Employment – Manage applications, recruitment processes, and employment/engagement relationships where relevant.
Accounts, Billing and Debt Recovery – Manage accounts, billing, and (where necessary) recover debts owed to us.
Client Satisfaction and Service Improvement – Improve our services and monitor client satisfaction (where appropriate).

9. Disclosure of Your Data to Third Parties

We may share your personal data with:

• Service providers such as cloud, IT and payment providers.
• Barristers, expert witnesses and professional advisers where required for your matter.
• Courts, tribunals, regulators or government bodies.
• Law enforcement where legally required.
• Successors in business if we merge, restructure or sell.

We do not sell personal data or disclose it for third-party marketing.

We do not share information about you with anyone without your consent unless the law (and our professional obligations) allow or require us to do so.

We only share your data where it is:

• necessary for the purpose of our contract with you;
• necessary due to a legal obligation;
• necessary for a legitimate interest we have, after considering your rights and interests;
• necessary in the public interest; or
• otherwise permitted or required by law.
• Decisions about disclosure are subject to appropriate internal checks and are based on an assessment of:
• who is requesting the data;
• the purpose for which it is required;
• the level and sensitivity of data requested; and
• the arrangements in place to securely store and handle the data.

Where relevant, we require third parties to comply with appropriate confidentiality and data-protection obligations.

10. International Data Transfers

Your data will normally be stored within the UK or UK/EEA.

Where transfers outside those areas are required, we implement appropriate safeguards such as adequacy regulations or approved contractual protections.

11. Data Security and Storage

We implement appropriate technical and organisational measures to protect personal data. These include:

• AES-256-bit encryption on all firm laptops and desktop devices
• Cyber Essentials certification demonstrating compliance with recognised UK government security standards
• Secure internal storage systems and restricted access controls
• Encrypted email communication systems for confidential correspondence
• Confidentiality obligations binding all staff and relevant third-party providers
• Regular security testing, monitoring and auditing

We continually review security practices in line with legal and technological developments.

12. Data Retention

We retain personal data only as long as necessary for:

• The purposes for which it was collected
• Legal, regulatory and professional obligations
• Establishing or defending legal claims

We normally retain client files for a minimum of six years after a matter concludes, but may retain them longer where required for legal, regulatory, professional indemnity, or risk-management purposes.
Typical retention periods may include:

• client files: generally at least six years after conclusion (and, for some matters such as property-related work, longer periods may apply);
• electronic case records: retained longer where required for conflict checks and professional risk-management; and

13. Your Rights

Detailed retention schedules are available on request.

You may have rights to:

• Access your personal data
• Correct inaccurate data
• Request erasure where lawful
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent
• Lodge a complaint

To exercise your rights contact: info@lakerlegal.co.uk
We may request proof of identity before responding in order to protect data security.
We aim to respond within one month unless requests are complex or numerous.

14. Marketing Communications

We only send marketing where you have provided consent.

You may opt out anytime via unsubscribe links or by contacting us.

15. Links to Third-Party Sites

Our website may contain links to external websites. We are not responsible for their privacy practices and encourage you to read their policies.

16. Policy Changes

We may update this Privacy Policy periodically. The latest version will always be published on our website and the effective date updated accordingly. Where changes are significant, we may notify you directly.

17. Complaints

If you have concerns about how we handle your data, please contact us first so we can resolve the issue. You also have the right to complain to the UK supervisory authority:
Information Commissioner’s Office www.ico.org.uk