Privacy notice

Depending on how you interact with us, we may collect:

• your name, email address, telephone number and contact preferences;

• information you provide about an enquiry, loss, dispute or matter;

• correspondence, documents, identity, financial and case information needed to assess or provide an agreed service;

• the page and source of your enquiry, including referrer, UTM campaign fields and advertising click or browser identifiers; and

• technical and cookie information such as IP address, device, browser and website activity, where used and permitted.

We normally receive this information from you, your device or browser. We may also receive relevant information from people or organisations involved in a matter, professional advisers, public records, authorities, service providers or advertising platforms.

Please do not put unnecessary sensitive information in an initial website enquiry.

Under Article 6 of the UK GDPR, we process your personal data on one or more of the following lawful bases:

Purpose
Respond to and assess your enquiry
Lawful Basis
Steps requested before a contract and our legitimate interest in managing enquiries

Purpose
Provide and administer an agreed service
Lawful Basis
Contract, legal obligation and our legitimate interests

Purpose
Verify identity, prevent fraud, secure our systems and keep business records
Lawful Basis
Legal obligation and our legitimate interestsPurpose
Establish, exercise or defend legal claims
Lawful Basis
Our legitimate interests and, where special-category data is necessary, the legal-claims condition.

Purpose
Send optional updates by email, phone or SMS
Lawful Basis
Consent for the channel you selected
Purpose
Use non-essential analytics or advertising technologies
Lawful Basis
Consent where required

• Submitting an enquiry authorises us to contact you about that enquiry. It does not sign you up for marketing. Optional email, phone and SMS choices must be separate, unticked and may be withdrawn at any time.

We may share personal data only where necessary with authorised staff and contractors; website, hosting, communications, IT and case-management providers; professional advisers; organisations involved in your matter; and regulators, courts, public authorities or law-enforcement bodies where the law allows or requires it. Providers acting for us must protect the information and use it only for the agreed service. We do not sell personal data.

Some providers or recipients may process information outside the United Kingdom. Where UK law requires it, we use an adequacy regulation or an approved contractual safeguard and complete any required transfer assessment.

We keep personal data only for as long as needed for the relevant purpose and to meet legal, accounting, regulatory or claims requirements.

• Website enquiries that do not become client matters: maximum of 12 months after the last contact.

• Client matter records: six years from the final invoice or matter closure, whichever is later, unless a longer period is required for an active claim, legal obligation or agreed safe custody.

• Marketing choices: while the choice remains current; we may keep a minimal suppression record so that an opt-out is respected.

• Cookies and advertising identifiers: for the periods shown in the live cookie notice or preference tool.

Depending on the circumstances, you may ask us to give you access to your personal data, correct it, delete it, restrict its use, transfer it, or stop using it. You may object to direct marketing at any time and may withdraw consent without affecting earlier lawful processing. Some rights have legal exceptions.

To exercise a right, contact compliance@ay-legal.co.uk. We may need to verify your identity. You can also complain to the UK Information Commissioner’s Office at https://ico.org.uk/. We would welcome the opportunity to address the issue first.

Our Cookie Policy explains the cookies and similar technologies used on the website and how to manage them. We use appropriate technical and organisational measures to protect personal data, but no internet service can guarantee absolute security.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects about you.

We may update this notice when our processing changes. The current version and effective date will be shown at the top of this page.

AY Strategy UK Legal Consulting Ltd

Mailbox 275 New North Road, PMB 3032, London, N1 7AA, United Kingdom

compliance@ay-legal.co.uk

+447441927427