Data Protection & Privacy
How Umbral Counsel Ltd. safeguards your sensitive legal information in accordance with UK GDPR. We don't take your trust for granted.
Jump to section
1. Information Collection
Are you aware of the specific details we require to represent you effectively? At Umbral Counsel Ltd., we collect various types of personal data to provide our specialist legal advice. This includes identity data such as your full name and date of birth, contact data including your Manchester or UK-based address, and financial data required for anti-money laundering (AML) compliance.
We're committed to the principle of data minimisation. This means we'll only ask for what is strictly necessary for your instruction. Most of this info comes directly from you, but we might occasionally receive updates from professional bodies or KYC service providers.
2. Lawful Basis for Processing
Why do we process your data? Under the UK GDPR, we must have a valid legal reason. For most of our clients, this is the Performance of a Contract—we need your data to fight your case. Sometimes we're legally obligated to hold files for 6 years (Legal Obligation), and other times we act in our Legitimate Interests to improve our services.
Special category data, like health records in a personal injury claim, is handled with extreme caution. We only process this when necessary for the establishment, exercise, or defence of legal claims. Your confidentiality is our bedrock.
Encryption
All digital case files are protected with AES-256 encryption.
Access Control
Strict internal silos ensure only your assigned solicitor views your data.
Our Security Commitment
We invest over £50k annually in cybersecurity to ensure Umbral Counsel Ltd. remains a fortress for client confidentiality. Managed centrally from our Manchester office.
Retention
Automatic purging of marketing leads after 12 months of inactivity.
UK Hosted
Our servers are located exclusively within UK-based Tier 3 data centres.
3. Your Rights as a Data Subject
You're in control. Did you know you possess the 'Right to be Forgotten'? While legal obligations might override this in some solicitor-client contexts, you generally have the right to request access, correction, or restriction of your data.
- Right of Access (Subject Access Requests)
- Right to Rectification
- Right to Data Portability
Questions? Reach out.
If you're worried about how your data is handled, don't hesitate. Our Data Protection Officer is ready to help.
Email: [email protected]
Address: 10 Blackthorn Alley, Manchester, M1 6AG