Ali & Barrow Solicitors Ltd (company number 12290987), authorised and regulated by the Solicitors Regulation Authority (SRA number 805965), is committed to protecting and respecting your privacy. This notice explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For the purposes of data protection legislation, the data controller is Ali & Barrow Solicitors Ltd, registered at 100 Bishopsgate, London, EC2N 4AG.
We may collect and process the following categories of personal data:
Identity data: Your name, title, date of birth, gender, and photographic identification;
Contact data: Your postal address, email address, and telephone numbers;
Financial data: Bank account details, payment information, and billing records;
Transaction data: Details of the legal services we have provided to you and related payments;
Technical data: IP address, browser type, and usage data when you visit our website;
Special category data: Where relevant to your matter, this may include information about your health, racial or ethnic origin, religious beliefs, or criminal convictions.
We will only use your personal data where the law allows us to. The most common legal bases on which we process your data are:
Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract;
Contact data: Your postal address, email address, and telephone numbers;
Legal obligation: Where processing is necessary for compliance with a legal or regulatory obligation, including our obligations under the SRA Standards and Regulations,anti-money laundering legislation, and tax legislation;
Legitimate interests: Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;
Technical data: IP address, browser type, and usage data when you visit our website;
Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose.
We use your personal data for the following purposes:
Providing legal services to you and administering your matter;
Complying with our regulatory and legal obligations, including identity verification and anti-money laundering checks;
Managing our business, including billing, accounting, and audit purposes;
Legitimate interests: Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;
Communicating with you about our services;
Handling complaints and resolving disputes;
Maintaining and improving our website.
We may share your personal data with:
Regulatory bodies, including the SRA, the Legal Ombudsman, and HMRC, where required by law or regulation;
Courts, tribunals, and government bodies in connection with your matter;
Our professional indemnity insurers where necessary;
Third-party service providers who assist us in operating our business (such as IT providers, cloud storage providers, and payment processors), subject to appropriate data processing agreements;
Other parties where you have given your consent or where we are required or permitted
to do so by law.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We do not routinely transfer your personal data outside the United Kingdom. Where it is necessary to do so, we will ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office (ICO), or the transfer is to a country that has been deemed to provide an adequate level of protection for personal data.
We will retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements. For client matter files, our standard retention period is six years from the date a matter is closed, unless a longer retention period is required by law or is appropriate given the nature of the matter. Some documents may need to be retained indefinitely (for example, original wills and deeds).
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors, and third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.
We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Under data protection legislation, you have the right to:
Request access to your personal data (commonly known as a 'subject access request');
Request correction of incomplete or inaccurate personal data;
Request erasure of your personal data, where there is no good reason for us continuing to process it;
Object to processing of your personal data where we are relying on a legitimate interest;
Request restriction of processing of your personal data;
Request transfer of your personal data to you or a third party (data portability);
Withdraw consent at any time where we are relying on consent to process your personal data.
Please note that some of these rights are not absolute and may be subject to exemptions, particularly where the processing is necessary for compliance with our legal or regulatory obligations as a law firm.
If you wish to exercise any of these rights, please contact us using the details below.
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
Website: www.ico.org.uk
Phone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
Our website may use cookies to distinguish you from other users and to improve your experience. Cookies are small text files placed on your device. You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of the website may become inaccessible or not function properly.
If you have any questions about this privacy notice or how we handle your personal data, please contact us at:
We may update this privacy notice from time to time. Any changes will be posted on our website. This notice was last updated in April 2026.
©24 by Ali & Barrow Solicitors.| Authorised and regulated by the Solicitors Regulation Authority. SRA Number: 805965
