Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Lexkara & Co
7 Bell Yard, London WC2A 2JR
Company No. 14432463
Email: dpo@lexkara.co

Our Data Protection Officer can be contacted at dpo@lexkara.co.

2. What Data We Collect

We may collect and process the following categories of personal data:

• Identity data: your name, title, and professional role
• Contact data: your email address, telephone number, and postal address
• Matter data: details of your legal matter, including the nature of the enquiry, relevant documents, and correspondence
• Technical data: IP address, browser type, and website usage data collected through standard web analytics
• Marketing data: your preferences regarding receiving communications from us

3. How We Use Your Data

We use your personal data for the following purposes:

• Providing legal services: to communicate with you, understand your legal needs, provide legal advice, and manage your matter
• Compliance obligations: to comply with our professional and regulatory obligations, including anti-money laundering requirements and conflict checking
• Business administration: to manage our relationship with you, process payments, and maintain our records
• Marketing: to send you legal insights, updates, and information about our services (only with your consent)
• Website improvement: to analyse website usage and improve our online presence

4. Legal Basis for Processing

We process your personal data on the following legal bases under the UK GDPR:

• Legitimate interests (Article 6(1)(f)): processing necessary for our legitimate interests in providing legal services, managing client relationships, and administering our business, provided those interests are not overridden by your rights
• Legal obligation (Article 6(1)(c)): processing necessary to comply with a legal obligation to which we are subject, including anti-money laundering legislation and professional reporting obligations
• Consent (Article 6(1)(a)): where you have given clear consent for us to process your personal data for marketing purposes. You may withdraw consent at any time
• Contract (Article 6(1)(b)): processing necessary for the performance of our engagement letter or to take steps at your request prior to entering into an engagement

5. Data Retention

We retain your personal data for the following periods:

• Matter files: 7 years from the conclusion of the matter, in accordance with professional standards and limitation periods applicable to legal services
• Marketing data: 2 years from the date of your last interaction with us, or until you withdraw consent, whichever is earlier
• Website analytics data: 26 months from the date of collection

At the end of the applicable retention period, your data will be securely deleted or anonymised.

6. Third Parties and Data Processors

We may share your personal data with the following categories of third parties, who process data on our behalf as data processors:

• IONOS: website hosting provider
• GoHighLevel: customer relationship management (CRM) platform
• Panel solicitors and barristers: where your matter requires reserved legal activities to be carried out by a regulated professional
• Professional advisers: including accountants and tax advisers, where necessary for the conduct of your matter

All data processors are contractually required to process your data only on our instructions and in accordance with UK data protection law. We do not sell your personal data to any third party.

7. International Transfers

Where your personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place in accordance with Article 46 of the UK GDPR, including standard contractual clauses or adequacy decisions.

8. Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right of access: you may request a copy of the personal data we hold about you
• Right to rectification: you may request that we correct any inaccurate or incomplete data
• Right to erasure: you may request that we delete your personal data in certain circumstances
• Right to data portability: you may request that we provide your data in a structured, commonly used, and machine-readable format
• Right to object: you may object to the processing of your personal data where we rely on legitimate interests
• Right to restrict processing: you may request that we restrict the processing of your data in certain circumstances

To exercise any of these rights, please contact us at dpo@lexkara.co.

9. Complaints

If you are dissatisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ico.org.uk
Telephone: 0303 123 1113
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.