Privacy Policy

Who we are

RGF Lawyers Limited (company number 14920678) is the data controller for the personal data described in this notice. RGF Lawyers Limited is authorised and regulated by the Solicitors Regulation Authority (SRA number 8004856).

If you have any questions about this notice or how we handle your personal data, please contact us at [[CONFIRM: Data protection contact email]].

What personal data we collect

When you use the contact form on this website, we collect your name, email address, telephone number, and the content of your message. If you contact us by email, telephone, or in person, we may also collect any personal data you choose to share with us in the course of that enquiry, and any further information you provide if you go on to instruct us.

How we use your personal data

We use your personal data to:

• respond to your enquiry and discuss whether we can assist you;
• provide legal services to you, if you instruct us;
• meet our professional, legal, and regulatory obligations; and
• keep records of our correspondence with you.

Our lawful basis for processing

Depending on the circumstances, we rely on one or more of the following lawful bases under UK GDPR: your consent (for example, when you submit the contact form); our legitimate interests in responding to enquiries and running our business; steps taken at your request prior to entering into a contract with us; and compliance with a legal obligation, such as our obligations as a regulated law firm.

How long we keep your data

We only keep personal data for as long as necessary for the purposes described in this notice, including to satisfy any legal, accounting, or regulatory requirements. Enquiries that do not proceed to instructions are kept for a limited period before being deleted. Records relating to clients we act for are retained in line with our professional obligations as a regulated law firm.

Sharing your personal data

We do not sell your personal data. We may share it with trusted service providers who help us operate this website and run our business, such as IT and hosting providers, and with third parties where we are required to do so by law or regulation. Any third party we work with is required to keep your data secure and to use it only for the purposes we specify.

Your rights

Under UK GDPR, you have the right to:

• ask us for access to the personal data we hold about you;
• ask us to correct any inaccurate or incomplete data;
• ask us to erase your data, in certain circumstances;
• ask us to restrict how we use your data, in certain circumstances;
• object to our use of your data, in certain circumstances; and
• ask us to provide your data to you, or to another organisation, in a portable format.

To exercise any of these rights, please contact us at [[CONFIRM: Data protection contact email]].

Complaints to the Information Commissioner's Office

If you are unhappy with how we have handled your personal data, we would welcome the opportunity to resolve your concern directly. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection.