GDPR Compliance

Last updated: July 8, 2026

Our Commitment to Data Protection

We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we comply with these regulations and what rights you have regarding your personal information.

Data Controller

For the purposes of data protection law, we act as the data controller when processing your personal information. Our contact details are:

unabsfiocc
47 Berkeley Square
Mayfair, London W1J 5AT
United Kingdom
Email: [email protected]

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so. The legal bases we rely on include:

  • Contract Performance: Processing necessary to provide the legal services you have engaged us for
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as maintaining client relationships and improving our services
  • Legal Obligation: Processing required to comply with legal and regulatory requirements
  • Consent: Where you have provided explicit consent for specific processing activities

Your Data Protection Rights

Under UK GDPR, you have the following rights:

Right of Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive, or we may refuse to comply with the request in these circumstances.

Right to Rectification

You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances. This right is not absolute and we may need to retain information to comply with legal or professional obligations.

Right to Restrict Processing

You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Object

You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis and there is something about your particular situation that makes you want to object.

Right to Data Portability

In certain circumstances, you have the right to request that we transfer the data we have collected to another organization or directly to you in a structured, commonly used format.

Right to Withdraw Consent

Where we are processing your data based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

Exercising Your Rights

To exercise any of your data protection rights, please contact us at [email protected] with details of your request. We will respond within one month of receiving your request, though this may be extended by two additional months where necessary, taking into account the complexity and number of requests.

We may need to verify your identity before processing your request to ensure we do not disclose personal data to unauthorized parties.

Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of personal data in transit and at rest where appropriate
  • Access controls limiting who can view or process personal data
  • Regular security assessments and updates
  • Staff training on data protection and security practices
  • Confidentiality agreements with all personnel who handle personal data

Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office within 72 hours of becoming aware of the breach, as required by law.

International Data Transfers

We do not routinely transfer personal data outside the United Kingdom. If such transfers become necessary, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Data

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

Data Protection Officer

While we are not required by law to appoint a Data Protection Officer, our practice manager oversees compliance with data protection obligations. For data protection inquiries, contact us at [email protected].

Complaints

If you wish to make a complaint about how we handle your personal data, please contact us first so we can attempt to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

Updates to This Notice

We may update this GDPR compliance notice from time to time to reflect changes in our practices or legal requirements. We will post the updated notice on our website with a revised date.