Privacy Policy

Last updated: 1 January 2026

Introduction

TrustLaw UK ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our legal services.

We are registered with the Information Commissioner's Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

Information You Provide

We collect information you voluntarily provide to us, including:

• Name, email address, and contact details when you submit enquiry forms
• Information about your legal matter that you share during consultations
• Correspondence and communications with our team
• Payment information when you engage our services

Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and browser type
• Pages visited and time spent on pages
• Referring website addresses
• Device information and operating system

How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and provide legal services
• Communicate with you about your matter
• Process payments and maintain financial records
• Comply with legal and regulatory obligations
• Improve our website and services
• Prevent fraud and ensure security

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legal obligation: Processing necessary to comply with our legal obligations, including those under the Solicitors Regulation Authority rules
• Legitimate interests: Processing necessary for our legitimate interests, such as improving our services and marketing
• Consent: Where you have given consent to processing for specific purposes

Data Sharing

We may share your information with:

• Courts, tribunals, and opposing parties as required for your legal matter
• Regulatory bodies including the Solicitors Regulation Authority
• Third-party service providers who assist in delivering our services
• Professional advisers such as insurers, auditors, and accountants

We do not sell your personal information to third parties.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, typically:

• Client files: 6 years after the matter concludes (longer for certain matter types)
• Enquiry data: 2 years if no client relationship is established
• Financial records: 7 years as required by law

Your Rights

Under data protection law, you have rights including:

• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure in certain circumstances
• The right to restrict processing
• The right to data portability
• The right to object to processing
• Rights related to automated decision-making

To exercise these rights, please contact us using the details below.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, and access controls.

International Transfers

Your information is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in compliance with data protection law.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated revision date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Data Protection Officer
TrustLaw UK
42 Chancery Lane
London WC2A 1JE
Email: [email protected]

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.