UK GDPR privacy notice

Privacy Policy

Your privacy matters. This notice explains what personal data Rosie's Legis collects, why we use it, how we protect it, and the choices available to you.

Last updated: 21 February 2025

This policy applies to visitors to our website and people who contact us about legal services.

What comes into our systems

What Personal Data We Collect

We collect information that helps us respond properly to a legal enquiry and keep our website working. Please share only what is needed.

Keep sensitive details out of the first message.

We do not seek special category data through this website. If you send it, we handle it carefully and only where a lawful reason applies.

Enquiry details

Name, email address, phone number, service area and the message you choose to send.

Website activity

IP address, pages visited, device type and browser information collected through necessary or consent-based cookies.

Communications

Emails, telephone notes and call records needed to understand your request and manage follow-up.

Client information

If you instruct us, we collect information needed to advise you, act for you and meet professional duties.

A clear legal basis

How We Use Your Data

The UK GDPR and Data Protection Act 2018 require a lawful basis for each use. The basis depends on what you have asked us to do.

We only use data for a stated purpose.

Lawful basis When it applies
Legitimate interests To answer enquiries, organise communications and improve our services where our interests do not override your rights.
Consent For marketing messages or optional analytics. You can withdraw consent at any time.
Legal obligation To meet regulatory, anti-money laundering, accounting and professional requirements.
Contract performance To provide legal services, manage your matter and take steps before an instruction is confirmed.

Data Retention

We keep enquiry data for up to 12 months where no engagement follows, then delete it or remove identifying details unless a longer period is required.

Client files are retained for the period required by law, professional rules, limitation periods and our internal records policy.

Data Security

We use access controls, encryption where appropriate and staff training to reduce the risk of loss, misuse or unauthorised access.

Email, hosting and other processors may handle information for us. We choose providers with suitable contractual and security safeguards.

Website information

Cookies and Analytics

Necessary cookies

These support core site functions and do not build an advertising profile about you.

Optional analytics

If used, analytics cookies help us understand page use. We ask for consent before placing them.

Your browser settings

You can block or remove cookies through your browser controls. Some site functions may then work differently.

No advertising cookies

This website does not use third-party advertising cookies.

Your choices

Your Rights Under UK GDPR

You can ask what we hold about you and how we use it. Contact us using the details below so we can verify and handle your request.

Requests are usually handled without charge.

  • Access: ask for a copy of your personal data and information about its use.
  • Rectification: ask us to correct inaccurate or incomplete information.
  • Erasure: ask us to delete data where there is no lawful reason to keep it.
  • Restriction: ask us to limit processing while a concern is reviewed.
  • Portability: receive certain information in a structured, commonly used format.
  • Objection: object to processing based on legitimate interests or direct marketing.
Concerned about our response?

You can complain to the Information Commissioner's Office at ico.org.uk.

Privacy queries

Contact Rosie's Legis

Send your question to our team. Include enough detail for us to identify the request, but avoid sending sensitive information through an initial email.

Shire Lane, Croydon, London, BR6 7JH

Need to ask about your data?

We will explain the next step and tell you if we need anything else.

Email the privacy team