Privacy Policy

1. Privacy Policy

1.1 Who we are

Legal Services Partnership (“LSP”, “we”, “us”, “our”) is the data controller for personal data collected through [legalservices‑partnership.co.uk].
Registered office: [Address]
Company number: [XXXXXX] (registered in Scotland)
ICO registration: [Z1234567]
Contact: [privacy@legalservices‑partnership.co.uk]

1.2 What data we collect

CategoryExamplesSourcePurposeUsageIP address, pages viewed, clicksCookies, logsSite security & analyticsIdentityName, job titleContact formResponding to enquiriesContactEmail, phone, addressContact formContract performanceMarketingprefsConsent recordsCookie banner, sign‑upsEmail updates

1.3 Lawful bases

We process personal data only when at least one lawful basis applies:

• Contract – To provide services you request.
• Consent – For optional cookies or marketing (you may withdraw at any time).
• Legal obligation – e.g. accounting, fraud prevention.
• Legitimate interests – Improving the site; network security; B2B marketing (balanced against your rights).

1.4 How we use your data

• Deliver and maintain the website and any client portal.
• Communicate with you regarding our services.
• Send legal updates (only if you consent or an exception applies).
• Monitor usage to detect and stop malicious activity.

1.5 Sharing & transfers

Data are shared only with vetted processors who provide:

• Hosting ([provider], UK/EU data centres)
• Email & CRM ([provider])
• Analytics (Matomo Self‑Hosted – IP anonymised)All processors are bound by contract (Art. 28 UK GDPR). We do not transfer data outside the UK/EEA unless appropriate safeguards (UK IDTA / SCCs) are in place.

1.6 Retention

Data setRetention triggerPeriodContact enquiriesLast communication24monthsContract recordsContract end6 years (LimitationAct)Analytics logsCollection14months

Back‑ups are encrypted and rotated on a 30‑day cycle.

1.7 Your rights

You have the right to access, correct, erase, restrict or object to processing, and to data portability. Send requests to [privacy@legalservices‑partnership.co.uk].
If you believe we have not handled your data lawfully, you may lodge a complaint with the Information Commissioner’s Office (ico.org.uk) or the supervisory authority in your habitual residence.

1.8 Automated decision‑making

We do not use automated decisions that produce legal or similarly significant effects.

1.9 Security

We employ HTTPS/TLS 1.3, WAF, MFA for admin, and quarterly penetration testing.
Breach notification procedures satisfy UK GDPR Arts. 33–34.

1.10 Changes

We will post any material changes on this page and, where appropriate, notify you by email.

‍