Privacy Policy
Last updated: 15/07/2026
This privacy policy explains how My Commercial Lawyers (“we”, “us”, “our”) collects, uses, stores, and protects your personal data. It applies to anyone who uses our website, contacts us, or uses our services.
We are committed to protecting your privacy and handling your personal data in accordance with UK GDPR and the Data Protection Act 2018.
1. Who We Are
My Commercial Lawyers is the data controller for the personal data described in this policy. This means we are responsible for deciding how and why your personal data is used.
Detail
Information
Business name
My Commercial Lawyers
Address
7 Bell Yard, London, WC2A 2JR
Contact email
reception@mycommerciallawyers.com
Website
www.mycommerciallawyers.com
ICO registration number
ZB650790
If you have any questions about how we use your personal data, contact us at reception@mycommerciallawyers.com.
2. What Personal Data We Collect
We only collect personal data that is necessary for the purposes described in this policy. The types of personal data we may collect include:
2.1 Data you give us directly
- Your name and contact details (email address, phone number, postal address)
- The name and details of your business
- Information you provide when completing an enquiry form or contacting us
- Information you provide when you become a client
- Any other information you choose to share with us
2.2 Data we collect automatically
- Information about how you use our website (pages visited, time spent, links clicked)
- Your IP address and browser type
- Cookie data (see Section 9)
- Information from Google Analytics and similar tools
2.3 Data we receive from third parties
- Information from referrals made by existing clients or professional contacts
- Publicly available information about businesses
3. How We Collect Personal Data
- Through enquiry forms on our website
- Through email, telephone, or written correspondence
- Through our client onboarding process
- Automatically when you visit our website via cookies and analytics tools
- Through referrals from existing clients or professional contacts
- Through publicly available sources such as Companies House or LinkedIn
4. Why We Use Your Personal Data and Our Lawful Basis
UK GDPR requires us to have a lawful basis for each way we use your personal data. The table below explains what we use your data for and our lawful basis for doing so.
Purposes
Lawful basis
More detail
Responding to enquiries and providing information about our services
Legitimate interests
It is in our legitimate interest to respond to people who contact us.
Delivering services to clients
Contract
Processing is necessary to perform the contract we have with you.
Sending invoices and processing payments
Contract / Legal obligation
Necessary to perform the contract and comply with financial record-keeping obligations.
Sending marketing communications to existing clients
Legitimate interests
We have a legitimate interest in keeping existing clients informed about relevant services.
Sending marketing communications to prospects who have opted in
Consent
You have given us permission to send marketing communications.
Improving our website and services
Legitimate interests
It is in our legitimate interest to understand how our website is used.
Complying with legal and regulatory obligations
Legal obligation
We are required by law to retain certain records.
5. How Long We Keep Your Personal Data
We do not keep personal data for longer than necessary. The table below explains our standard retention periods.
Type of data
How long we keep it
Client records and correspondence
6 years after the matter or contract ends
Prospect and enquiry data
2 years if no contract is entered into
Financial records (invoices, payments)
6 years (required by HMRC)
Website analytics data
Google Analytics settings, typically 14 months
When personal data is no longer needed, we delete it securely or anonymise it so it can no longer be linked to you.
6. Who We Share Your Personal Data With
We do not sell your personal data. We do not share your personal data with third parties for their own marketing purposes.
We may share your personal data with the following categories of third parties where necessary to deliver our services or meet our legal obligations:
- Our professional advisers (accountants, solicitors, insurers) where necessary
- Technology platforms and software providers we use to run our business (see Section 7)
- HMRC and other regulatory bodies where required by law
- Courts, tribunals, or law enforcement agencies where required by law
Where we share data with third-party providers, we require them to keep it secure and use it only for the purpose we have specified. We use contracts and data processing agreements where required.
7. Your Rights Under UK GDPR
Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data. You can exercise any of these rights by contacting us at reception@mycommerciallawyers.com.
Your right
What this means
Right of access
You can ask us for a copy of the personal data we hold about you. This is called a Subject Access Request (SAR). We will respond within one month.
Right to rectification
You can ask us to correct personal data that is inaccurate or incomplete.
Right to erasure
You can ask us to delete your personal data in certain circumstances, for example if we no longer need it or you withdraw consent.
Right to restriction
You can ask us to pause our use of your personal data in certain circumstances, for example while you contest its accuracy.
Right to data portability
Where we process your data by automated means based on your consent or a contract, you can ask us to provide it in a machine-readable format.
Right to object
You can object to us processing your data where we rely on legitimate interests. You can also object at any time to your data being used for direct marketing.
Rights related to automated decision-making
You have the right not to be subject to a decision based solely on automated processing that significantly affects you, where this applies.
Right to withdraw consent
Where we rely on your consent to process your data, you can withdraw it at any time. This does not affect processing that happened before you withdrew consent.
We will respond to all requests within one month. In complex cases we may extend this by a further two months, but we will tell you if this is the case.
We may need to verify your identity before we can act on your request.
8. Cookies
Our website uses cookies. Cookies are small text files placed on your device when you visit a website.
Type of cookie
Purpose
Can you opt out?
Strictly necessary
Required for the website to function. Cannot be switched off.
Analytics
Delivering services to clients
Help us understand how visitors use the site (e.g. Google Analytics).
Yes — via our cookie banner or your browser settings.
Marketing
Track visitors across websites to show relevant advertising.
Yes — via our cookie banner.
Functional
Remember your preferences and settings.
Yes — via our cookie banner.
You can manage or disable cookies at any time through your browser settings or our cookie banner. Disabling certain cookies may affect how the website functions.
10. How to Make a Data Protection Complaint
If you are unhappy with how we have handled your personal data, you have the right to make a complaint to us directly.
How to complain to us
Email: reception@mycommerciallawyers.com
Subject line: Data Protection Complaint
We will acknowledge your complaint within 30 days and provide a full response as soon as possible.
If you are not satisfied with our response, or if you would prefer to contact the regulator directly, you have the right to complain to the Information Commissioner’s Office (ICO):
Information Commissioner’s Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
You have the right to complain to the ICO at any time. However, we would appreciate the opportunity to address your concerns directly before you approach the ICO.
11. Security
We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction.
- Access to personal data is restricted to staff and contractors who need it to do their job
- We use secure, password-protected systems to store personal data
- We use encrypted connections (HTTPS) on our website
- We review our security practices regularly
No method of transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee its absolute security.
If we become aware of a data breach that is likely to affect your rights, we will notify you without undue delay.
12. Links to Other Websites
Our website may contain links to other websites. We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policy of any website you visit.
13. Changes to This Privacy Policy
We review this privacy policy regularly and update it when necessary. The date at the top of this page shows when it was last updated.
If we make significant changes, we will notify you by email or by placing a notice on our website.
14. Contact Us
If you have any questions about this privacy policy or how we handle your personal data, please contact us:
Contact details
My Commercial Lawyers
7 Bell Yard, London, WC2A 2JR
Email: reception@mycommerciallawyers.com
Website: www.mycommerciallawyers.com
ICO registration number: ZB650790