Privacy Notice

Data protection

Last reviewed: September 2026

This notice explains how Judge Law Solicitors Ltd (trading as Judge Law, "we", "us", "our") collects, uses, shares and protects your personal data, and the rights you have over it. It applies to clients and prospective clients, to visitors to our website, and to other people whose data we handle in the course of our work, such as the other parties to a matter, witnesses and professional contacts.

We are a firm of solicitors authorised and regulated by the Solicitors Regulation Authority (SRA number 634380). As a law firm we handle personal data carefully and confidentially, and we are also bound by our professional duty of confidentiality to our clients.

1. Who we are and how to contact us

The data controller is Judge Law Solicitors Ltd (trading as Judge Law). We are registered with the Information Commissioner's Office (ICO) as a data controller under registration reference ZA227284.

  • Registered office: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE
  • Windsor office: Alexandra Court, 25 St Leonards Road, Windsor, SL4 3BP
  • Email: info@judgelaw.co.uk
  • Telephone: 01753 770 775
  • ICO registration reference: ZA227284

If you have any questions about this notice or about how we handle your personal data, or if you wish to exercise any of your rights, please contact us using the details above and mark your enquiry for the attention of our data protection contact.

2. The personal data we collect

Depending on your relationship with us and the matter we are dealing with, we may collect and use the following types of personal data:

  • Identity and background data, such as your name, title, date of birth, nationality, marital or family status, photograph and copies of identification documents (for example, a passport or driving licence).
  • Contact data, such as your address, email address and telephone numbers.
  • Call recordings, being recordings of telephone calls you have with us (see section 12).
  • Financial data, such as bank and payment details, source of funds and source of wealth information, income, assets and liabilities, and details relevant to your matter (for example, property or transaction values).
  • Matter data, being the information you and others provide so that we can advise you and act for you. This varies by matter and can include family circumstances, property and business details, employment details, correspondence and documents.
  • Verification and compliance data, being the results of identity, anti-money-laundering, sanctions, conflict and, where relevant, credit checks.
  • Technical and usage data, such as your IP address, device and browser type, and how you interact with our pages. See section 11 and our Cookie Policy for more detail.
  • Marketing and communications data, such as your contact preferences and how you engage with our communications.

Special category and criminal offence data

Some of the work we do means we may handle more sensitive information. This can include special category data, such as information about your health, racial or ethnic origin, religious beliefs, sex life or sexual orientation, for example in family, immigration or employment matters. We may also handle information about criminal convictions and offences, or allegations of them, where this is relevant to a matter (for example, in family proceedings) or to our regulatory checks. We collect this data only where it is necessary, and we apply extra care to keeping it secure.

3. How we collect your personal data

We collect personal data:

  • directly from you, when you contact us, instruct us, complete a form on our website, book an appointment, or send us documents;
  • from others acting for you or connected to your matter, such as your family members, an introducer or intermediary, an estate agent, mortgage broker or lender, the other party to a matter and their advisers, barristers, experts, courts and tribunals;
  • from third parties and public sources, such as identity, anti-money-laundering and sanctions checking providers, credit reference agencies, HM Land Registry, Companies House, and publicly available registers; and
  • automatically, through cookies and similar technologies when you use our website (see section 11).

4. How we use your data and our lawful basis

Under the UK GDPR we must have a lawful basis for using your personal data. We rely on the following bases, depending on the purpose:

  • Performance of a contract: to provide legal services to you, to manage our relationship with you, and to take steps at your request before entering into a contract (for example, providing a quote or a fee estimate).
  • Compliance with a legal obligation: to meet our obligations under anti-money-laundering and sanctions law, our regulatory obligations to the SRA, our obligations to courts and to HMRC, and to keep records the law requires us to keep.
  • Our legitimate interests: to run and manage our practice, to keep our systems and premises secure, to prevent fraud, to establish, exercise or defend legal claims (including recovering unpaid fees), to understand how our website and services are used and to improve them, and to market our services to existing and prospective clients. Where we rely on legitimate interests we balance them against your interests and rights, and you can object (see section 8).
  • Consent: for certain electronic marketing and for non-essential cookies. Where we rely on consent you can withdraw it at any time.

Where we handle special category data we do so, as relevant, on the basis that it is necessary for the establishment, exercise or defence of legal claims, with your explicit consent, or on another condition permitted by the UK GDPR and the Data Protection Act 2018. Where we handle criminal offence data we do so only where we are authorised to by law.

5. Who we share your personal data with

We do not sell your personal data. We share it only where necessary, and with organisations that are required to keep it confidential and secure. Depending on your matter, recipients may include:

  • People involved in your matter, such as barristers, experts, medical and other professionals, agents, translators, and the other parties to a matter and their advisers.
  • Courts, tribunals and public bodies, such as HM Courts and Tribunals Service, HM Land Registry, HMRC, Companies House and government departments, where required for your matter.
  • Banks, lenders and other parties in a transaction, where relevant to a property, financial or commercial matter.
  • Our regulators and insurers, including the Solicitors Regulation Authority, the Legal Ombudsman, our professional indemnity insurers and, where instructed, our auditors, accountants and professional advisers.
  • Verification and compliance providers, being the identity, anti-money-laundering, sanctions and, where relevant, credit checking services we use.
  • Our service providers ("processors") who help us run the firm and our website under contract, and who may only use your data on our instructions. These include providers of IT, hosting, case management, communications and document services, and providers of website, analytics and marketing tools such as:
    • website security and performance (for example, Cloudflare);
    • website and session analytics (for example, Google Analytics and Google Tag Manager, and Microsoft Clarity);
    • advertising and advertising measurement (for example, Google and Microsoft advertising services);
    • spam and bot protection (for example, Google reCAPTCHA);
    • marketing and enquiry attribution (for example, Ruler Analytics and Kefilab / Kefilex, our lead-tracking platform);
    • appointment booking (for example, Calendly); and
    • cookie-consent management (for example, CookieYes).

The specific third parties that set cookies on our website, and what they do, are listed and kept up to date in our Cookie Policy, which is the authoritative and current list. The examples above are illustrative and may change from time to time as we review the tools we use.

We may also disclose your data where we are required to by law, to comply with a court order or regulatory request, to prevent fraud or other crime, or where the firm is reorganised, transferred or sold.

6. Sending data outside the UK

Some of our service providers are based outside the UK, which means your personal data may be transferred to and stored in countries whose data protection laws differ from ours. Where we make such a transfer, we make sure it is protected by an appropriate safeguard recognised under UK data protection law, for example a UK adequacy decision, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for more information about the safeguards we use.

7. How long we keep your personal data

We keep your personal data only for as long as we need it, in line with our retention schedule and our legal and regulatory obligations. In general:

  • we keep client files for a minimum of six years after your matter closes, and longer for certain types of work, for example property, wills, trusts, probate and matters involving children, where the law, professional guidance or the nature of the documents means they should be kept for longer or, in some cases, indefinitely;
  • we keep anti-money-laundering and client due diligence records for five years after the end of our business relationship, as required by law;
  • we keep accounting and tax records for at least six years; and
  • we keep the details of enquiries that do not become instructions, and marketing data, for a shorter period unless you ask us to keep you informed.

When we no longer need your personal data we will delete it securely or anonymise it.

8. Your rights

Under the UK GDPR you have the following rights, which you can exercise free of charge by contacting us (see section 1):

  • Access: to be told whether we hold personal data about you and to receive a copy of it.
  • Rectification: to have inaccurate data corrected and incomplete data completed.
  • Erasure: to ask us to delete your data in certain circumstances.
  • Restriction: to ask us to limit how we use your data in certain circumstances.
  • Portability: to receive certain data in a portable format, or to have it sent to another organisation.
  • Objection: to object to our using your data where we rely on legitimate interests, and to object to direct marketing at any time.
  • Withdrawal of consent: to withdraw any consent you have given us, at any time.

Some of these rights are qualified and do not apply in every situation. For example, we may need to keep certain information to comply with our legal and regulatory obligations, or where it is subject to legal professional privilege. We will always explain our decision if we cannot do what you have asked. We aim to respond to any request within one month.

9. Marketing

We may send you information about our services that we think will be of interest to you, where you have agreed to receive it or, where the law allows, because you are an existing client and we are contacting you about similar services. You can ask us to stop sending you marketing at any time, either by using the unsubscribe link in our emails or by contacting us. Stopping marketing will not affect the service we provide on your matter.

10. Automated decision-making

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

11. Cookies and our website

Our website uses cookies and similar technologies to make it work, to keep it secure, to understand how it is used and to support our marketing. You can control non-essential cookies through the cookie banner and the "Consent Preferences" control on the site. Our Cookie Policy explains the cookies we use in detail and how to manage them.

12. Recording of telephone calls

We record most telephone calls to and from our offices, including calls handled by our answering service. We do this for quality, training and supervision, to keep accurate records of the instructions we receive and the advice we give, and to help resolve any query or dispute about a call. Where we record a call, we will tell you at the start that it may be recorded.

Our lawful basis for recording is our legitimate interests in running our practice well and keeping accurate records and, where a call concerns your matter, the performance of our contract with you. Where a recording contains special category data, we also rely on the condition relating to the establishment, exercise or defence of legal claims. We keep recordings in line with our retention schedule (see section 7), hold them securely and restrict access to them. If you would prefer a call not to be recorded, please tell us and we will offer an alternative where we can.

13. How to complain

If you have a concern about how we have handled your personal data, please contact us first so that we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:

  • Website: ico.org.uk
  • Helpline: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

14. Changes to this notice

We may update this notice from time to time. When we make significant changes we will make that clear on our website. Please check this page from time to time to stay informed.