The Legal Practice Ltd incorporating Craig and Co is a law firm within the UK which is regulated by the Solicitors Regulation Authority. Our objective is the continuous safety of our client’s private information whilst conducting the course of our business and the visitors that visit our website.
The Data that is collated by our firm is collected, processed and stored. We the The Legal Practice Ltd is known as the “Data Controller” what this means for you is that we are responsible for the data that you entrust us with. Should you have any queries please do not hesitate to communicate with us at
1. when you access our firms website by completing an enquiry or sign up to our firms website.
2. When we agree to provide you with our legal services
3. When you request information from us
4. When you apply for vacancies with our firm
5. In the event that you subscribe to our mailing list to receive news. (not sure whether this aspect is applicable)
The type of data collected:
The range of data that we would be collecting from you would be your name, age, race, nationality, address, your current employer, your contact details. We conduct this by the appropriate business and marketing development initiatives and through third parties when permission has been granted.
From accessing our website we are able to obtain a variety of information that is personal to you such as the following; your computer’s IP address, the operating system and the type of web browser used to gain access to our website. We use this compiled information so that we are able to provide our clients and prospective clients with a better experience of our firm.
Most of the data that we obtain we do this by asking you directly or your authorised representatives with the relevant consent being provided. We may be obtaining further information from your previous employers, other organisations, regulators, credit reporters and records that are publicly available. Your personal information may be stored in the firm’s contact database when you register to receive legal updates or we otherwise receive your contact details. We may use a third party service provider such as Thirdfort for verifying your identity and for anti money laundering purposes to deliver emails to inform you about our services, legal developments and updates and invite you to events (including those we may jointly host with other organisations). You of course have the right to limit the amount of data that you provide to us however, this may limit the type of service that could be made available to you. We would also be using the above to carry out checks on you to ensure that the we are compliant in relation to the regulations that are set out by the Solicitors Regulation Authority.
How we use your information:
1. It is necessary in the course of providing your with the legal services. In which you have expressly provided your authority to do so, for example share your information with third parties such as barristers, expert witnesses, these would not interfere with your rights and freedom, as these would be used to directly provide you with a better service.
2. To ensure that we are comply with our legal obligations to identify you, deliver our legal services to you, improve our services and products to you, if you or the organisation you work for are a client or prospective client; consider whether we can pursue certain business development initiatives; send you marketing materials and invite you to events; or process and respond to requests, enquiries or complaints received from you.
Why we would share your data:
Your data may be shared when we use third party business to provide us with certain services such as IT or software services, or a mailing company. We may also be in a position where we would need to share your data with our regulators, government agencies, courts, and third parties in line with providing you the legal service. We may share your data with the third party where this may be a legal obligation to do so such as anti money laundering requirements, legal proceedings, or in order to exercise or defend legal rights. We will never send marketing communications via SMS or call you without your specific consent; nor do we ever pass on or sell your details to a third party. If in the event that we as a firm re-organise or transfer all or part of our business, we may need to transfer your information to new The Legal Practice Ltd entities.
Keeping your data secure:
We take the appropriate steps to ensure that your data that we hold are kept safe both as a electronically and in a physical form and ensure that your data is not used improperly, or is not used unlawfully, or modified or unlawfully destroyed or disclosed, accidently lost consistent with the relevant law. Our electronic data is held in a data base which is accessed by login and password authentication.
Our employees, and third parties
We only keep your data as long as this is necessary for our legal purposes which would include the following, compliance, regulatory, legal, accounting, reporting, reviews. We would of course be doing this in line with the relevant data policy laws and our firms data retention and destruction policy. It is by law that we keep a record of your file for a period of six years and thereafter this data would be destroyed.
Subject to certain limitations and safeguarding you have the right to be request the data that is held on you with our firm, to know whether it is inaccurate or incomplete, the right to have information erased, right to be forgotten, the right to restrict how we use your data, the right to have your information provided to you in the way that it is easily accessible. You also have the right to request details that we hold on you which is also known as a Subject Access Report.
In the event you may have provided consent to the collection, processing, holding and transferring of your data of your personal data, you have the right to withdraw your data, once we have received your consent we no longer process your information for the purpose or purposes you originally agreed to unless we have a legitimate basis for doing so.
If you are not happy with the way in which we have processed or dealt with your information or responded to your question, you can complain to the Information Commissioner’s Office. Further details about how to complain can be found at or telephone 0303 123 1113.
We may update this policy from time to time. Please check the website occasionally to make sure you are happy with any changes.