Privacy Policy

Last updated: 29th August 2025

1. Introduction

Shine Creek Legal ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website or use our legal services.

This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

We may collect and process the following personal data:

• Contact information (name, email address, phone number, postal address)
• Information provided in consultation forms or legal enquiries
• Communication records between you and our firm
• Financial information necessary for billing and payment processing
• Documentation and evidence related to your legal matter

2.2 Information We Collect Automatically

When you visit our website, we may automatically collect:

• IP address and browser information
• Pages visited and time spent on our website
• Referring website information
• Cookie and similar technology data (see our Cookie Policy)

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Legal Services

• Providing legal advice and representation
• Managing client relationships and communications
• Processing payments and maintaining financial records
• Compliance with legal and regulatory obligations

3.2 Website and Marketing

• Improving our website functionality and user experience
• Sending newsletters and legal updates (with your consent)
• Responding to enquiries and providing customer support
• Analytics and website performance monitoring

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: To perform our legal services contract with you
• Legal obligation: To comply with professional and regulatory requirements
• Legitimate interests: For business administration and improvement of services
• Consent: For marketing communications and non-essential cookies

5. Data Sharing and Disclosure

We may share your personal information with:

• Third parties necessary for your legal matter (courts, opposing parties, experts)
• Professional service providers (barristers, accountants, IT support)
• Regulatory bodies when required by law
• Our professional indemnity insurers

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encrypted data transmission and storage
• Access controls and staff training
• Regular security assessments and updates
• Secure backup and disaster recovery procedures

7. Data Retention

We retain your personal data for as long as necessary to:

• Provide ongoing legal services
• Comply with professional obligations (typically 7 years after completion of matter)
• Defend potential claims or comply with legal requirements

8. Your Rights

Under UK data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

9. Cookies and Tracking

Our website uses cookies to enhance your browsing experience. For detailed information about our use of cookies, please see our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies.

11. International Transfers

We primarily process data within the UK. If we transfer data outside the UK, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the updated policy on our website with a revised "last updated" date.

13. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. Data Protection Officer

For data protection matters, you may contact our Data Protection Officer at: [email protected]

15. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data properly:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk