Privacy Policy

Law by Ellie (“the Business”, “we”, “us”, “our”) is committed to protecting and respecting your privacy.

This Privacy & Cookies Policy explains how we collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using this website or instructing our services, you acknowledge the terms of this Policy.

2. Data Controller

Law by Ellie is the Data Controller for the purposes of UK data protection legislation.

If you have any questions regarding this Policy or your personal data, please contact:

Email: e.mainwaring@lawbyellie.co.uk

Address: lawbyellie.co.uk

3. Personal Data We Collect

We may collect and process the following categories of personal data including, name and title, postal address, email address, telephone number, information relating to your legal matter, documents provided by you, identification documents where required and/or payment information (excluding full card details where processed via third-party providers)

We may also collect limited technical data when you visit our website, including, IP address, browser type, device information and/or pages visited and time spent on the website.

This technical data is collected in an anonymised form and is not used to identify you personally.

4. How We Collect Your Data

We collect personal data when:

You submit an enquiry through our website
You contact us by email or telephone
You instruct us to provide services
You provide documents or information relating to your matter

5. Lawful Basis for Processing

We process personal data on the following lawful bases:

Performance of a contract - where processing is necessary to provide agreed services.

Legitimate interests - to operate, improve, and develop our services.

Legal obligation - to comply with tax, accounting, or legal requirements.

Consent - where required, including for marketing communications (if applicable).

6. How We Use Your Information

We use personal data to respond to enquiries, provide administrative and drafting support services, prepare documents, communicate regarding your matter, issue invoices and manage payments, maintain business records and/or comply with legal obligations.

We do not sell or rent personal data to third parties.

7. Data Sharing

We will not disclose your personal data to third parties without your consent except:

Where required by law
Where necessary to comply with legal or regulatory obligations
To trusted third-party service providers who process data on our behalf (for example, cloud storage providers or accounting software providers)

Some third-party service providers may store or process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK data protection legislation.

8. Data Security

We implement appropriate technical and organisational security measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage.

Personal data may be stored:

On password-protected devices
Within secure cloud storage systems
Within secure email systems

Access to personal data is limited to those who require it for legitimate business purposes.

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Client matter files are typically retained for up to six (6) years following conclusion of the matter, unless a longer retention period is required by law.

After the retention period expires, data will be securely deleted or anonymised.

10. Your Rights

Under UK GDPR, you have the right to:

Request access to your personal data
Request correction of inaccurate or incomplete data
Request erasure of personal data (in certain circumstances)
Restrict or object to processing
Request transfer of your data to another provider
Withdraw consent (where processing is based on consent)

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
www.ico.org.uk

11. Cookies

Cookies are small text files placed on your device when you visit a website.

We use cookies to improve website functionality and analyse website usage.

Google Analytics

We use Google Analytics to measure and analyse information on visits to our website. This includes information such as:

Number of visitors
Pages viewed
Time spent on the website

Google Analytics collects this information in an anonymised form. We do not use this data to identify individual users.

You may control or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of the website.

12. Marketing Communications

If we send marketing communications, you will be given the opportunity to opt in or opt out.

You may withdraw your consent to receive marketing communications at any time by contacting us at the email address above.

13. Changes to This Policy

We may update this Privacy & Cookies Policy from time to time.

The most recent version will always be available on our website.