Privacy Policy

1. Introduction

This Privacy Policy explains how I, Beverley Williams, a freelance solicitor regulated by the Solicitors Regulation Authority (SRA), collects, uses, stores, and protects personal data. I am committed to safeguarding the privacy and confidentiality of clients, prospective clients, and all individuals whose data I process in the course of my legal practice.

2. Data Controller

Beverley Williams / BMW Legal
Freelance Solicitor
SRA ID: 8012140
Email: bmw@bmwlegal.co.uk
Telephone: 07424 976589
Address: 18 Churchwood Road, Manchester, M20 6TY, UK

I act as the Data Controller for all personal data processed in connection with my legal services.

3. What Personal Data I Collect

I may collect and process the following categories of data:

  • Identity information - name, date of birth, NI number, passport/ID details.

  • Contact information - address, email, telephone numbers.

  • Case-related information - documents, correspondence, evidence, financial information, employment records, medical information, or any material relevant to your matter.

  • Special category data - health, disability, ethnicity, criminal convictions, or other sensitive information where required for legal representation.

  • Financial information - bank details for invoicing and payments.

  • Website or communication data - IP address, browser type, cookies, enquiry forms, or call/email records.

4. How Your Data Is Collected

Data may be collected through:

  • Direct communication (email, phone, meetings, online forms).

  • Documents you provide.

  • Third parties such as barristers, experts, courts, medical professionals, social services, or opposing parties.

  • Public sources (Companies House, Land Registry, electoral register, etc.).

5. Lawful Bases for Processing

I process personal data under the following lawful bases:

  • Contract - to provide legal services you have requested.

  • Legal obligation - to comply with SRA rules, anti-money laundering laws, and statutory duties.

  • Legitimate interests - to manage my practice, maintain records, and improve services.

  • Consent - only where required (e.g., marketing communications).

  • Public interest - where legal work involves safeguarding or statutory functions.

  • Establishment, exercise, or defence of legal claims - applicable to most legal instructions.

Special category data is processed under Article 9(2)(f) (legal claims) or 9(2)(g) (substantial public interest).

6. How Your Data Is Used

Your data may be used to:

  • Provide legal advice and representation.

  • Communicate with you and third parties involved in your matter.

  • Prepare legal documents, submissions, and correspondence.

  • Manage billing, payments, and accounts.

  • Comply with regulatory, legal, and professional obligations.

  • Maintain practice management and file administration.

7. Sharing Your Data

I may share your data with:

  • Barristers, experts, mediators, or other professionals assisting your case.

  • Courts, tribunals, regulatory bodies, or public authorities.

  • Opposing parties and their legal representatives.

  • Accountants, insurers, or auditors.

  • IT service providers and secure cloud storage providers.

I never sell personal data. All third party processors are required to maintain confidentiality and GDPR compliance.

8. International Transfers

If data is transferred outside the UK, I ensure appropriate safeguards such as:

  • Adequacy regulations, or

  • Standard Contractual Clauses (SCCs), or

  • Equivalent lawful mechanisms.

9. Data Retention

Legal files are retained in accordance with SRA rules and professional obligations. Typical retention periods:

  • Client matter files: 6-15 years depending on the type of work.

  • Financial records: 6 years.

  • Special category data: retained only as long as necessary for legal purposes.

After the retention period, data is securely destroyed.

10. Data Security

I use technical and organisational measures to protect your data, including:

  • Encrypted devices and secure cloud storage.

  • Password protection and access controls.

  • Secure email and document transfer systems.

  • Regular backups and cybersecurity monitoring.

11. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data.

  • Request correction of inaccurate data.

  • Request deletion (where legally permissible).

  • Restrict or object to processing.

  • Request data portability.

  • Withdraw consent (where consent is the lawful basis).

  • Lodge a complaint with the Information Commissioner’s Office (ICO).

ICO Contact: www.ico.org.uk

12. Confidentiality and Legal Professional Privilege

All information you provide is treated as confidential and may be protected by legal professional privilege, meaning it cannot be disclosed without your consent unless required by law.

13. Cookies and Website Use

This website uses cookies to help with analytics.

This data helps aids generation of reports on visits to the website, which includes server location but not identity or contact data.

14. Changes to This Policy

This policy may be updated periodically. The latest version will always be available on request or on my website (if applicable).

15. Contact

For questions or to exercise your rights, contact:

Beverley Williams
Email: bmw@bmwlegal.co.uk
Telephone: 07424 976589