Spectsuit Legal Consultancy complies with applicable UK data protection legislation, including the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025, concerning the collection, storage and use of personal data.

This Policy explains:

1. The types of personal data we may collect;
2. How such data is used; and
3. The rights available to individuals (“data subjects”) in relation to their data.

---

Scope

This Policy applies to all personal data received and processed by Spectsuit that relates to an identified or identifiable individual.

---

Notice

When we collect personal data directly from individuals, we explain:

• Why we are collecting and using their personal data;
• The types of third parties (if any) to whom data may be disclosed;
• The individual’s rights under data protection law; and
• How to contact us.

Consent may be required in some cases. In other cases, we process personal data where it is necessary for:

• The performance of a contract,
• Compliance with legal obligations, or
• Our legitimate business interests (such as providing legal consultancy services and managing client relationships).

---

Choice

Individuals may request that their personal data:

• Not be used for purposes other than those originally communicated, or
• Be deleted where possible.

---

Security

Spectsuit takes reasonable steps to protect personal data against misuse, loss, unauthorised access, or disclosure. This includes using secure passwords, up-to-date software, and secure hosting services.

---

Data Accuracy

We aim to keep personal data accurate and up to date. Individuals may contact us to request corrections or updates to their information.

---

Access

Individuals have the right to request details of the personal data Spectsuit holds about them. Requests should be made to dataprivacy@spectsuit.com and proof of identity may be required.

---

Dispute Resolution

Questions or concerns regarding the use of personal data should be directed to dataprivacy@spectsuit.com. If concerns remain unresolved, individuals may also raise them with the UK Information Commissioner’s Office (ICO).

---

Compliance with Current Legislation

Spectsuit complies with the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025, and updates this Policy as necessary to reflect changes in the law.

---

Internet Privacy

This Policy applies to personal data collected through our website. If additional privacy information is provided (for example, regarding cookies), that information applies alongside this Policy.

---

Changes to this Policy

This Policy may be amended from time to time. The most recent version will always be published on our website.

Last updated: [13 September 2025]

1. Introduction

Spectsuit Legal Consultancy provides this Privacy Policy to explain how we collect, use, store, disclose and protect personal data in accordance with UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025.
This Privacy Policy applies to:

• our website located at https://www.spectsuitlegalconsultancy.com (the “Website”), and
• individuals who contact us, use our services or otherwise provide personal data to us in a non-website context (e.g., email or forms).

By using the Website or providing personal data to us, you acknowledge this Privacy Policy. Please do not use the Website or provide personal data if you do not agree with it. We may update this Privacy Policy from time to time by posting a new version on the Website.

Note: Client data that we process in the course of providing legal consultancy may be subject to confidentiality and legal professional privilege; such processing occurs under our engagement terms and applicable law.

---

2. Information We Collect

We may collect the following categories of personal data:

• Identifiers & contact details: name, email address, phone number, postal address.
• Business details: role, organisation, correspondence related to enquiries or services.
• Usage data (Website): IP address, device/browser information, pages visited, and timestamps (via cookies or similar—see Section 9).
• Billing & compliance: invoice details; basic KYC information where legally required.

We do not intentionally collect special category data via the Website. If such data becomes necessary in a client matter, we will handle it under applicable law and our engagement terms.

---

3. How We Obtain Your Personal Data

• Information you provide to us (contact forms, emails, calls, event queries, proposals).
• Information captured automatically through the Website (cookies/analytics—see Section 9).
• Information provided during service delivery (e.g., engagement, invoicing).
• Publicly available information relevant to your enquiry or our services.

---

4. How We Use Your Personal Data & Legal Bases

Purpose	Legal Basis
Respond to enquiries; provide and manage our services	Performance of a contract; or legitimate interests (to operate and grow our business)
Manage our relationship (proposals, invoicing, records)	Performance of a contract; legal obligation
Improve the Website and user experience	Legitimate interests (improve and secure our services)
Send service-related updates and (where opted-in) marketing/news	Legitimate interests (service communications); consent for marketing
Comply with legal and regulatory obligations (e.g., tax, KYC)	Legal obligation

We may rely on more than one legal basis depending on the activity.

---

5. Sharing Your Personal Data

We do not sell or rent personal data. We may share personal data with:

• Service providers (secure hosting, email/IT support, document storage, optional analytics), bound by contract and confidentiality;
• Professional advisers (accountants, lawyers) where necessary;
• Authorities where required by law;
• Successors in the event of a business transfer (they will honour this Policy).

We limit sharing to what is necessary and require appropriate safeguards.

---

6. International Transfers

We primarily store data in the UK. If we need to transfer personal data outside the UK/EEA (e.g., a service provider with non-UK/EEA hosting), we will use appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or UK Addendum to EU SCCs, or rely on an adequacy decision, as applicable.

---

7. Links to Third-Party Websites

Our Website may contain links to third-party sites. Those sites are not controlled by us and have their own privacy policies. We are not responsible for their content or practices.

---

8. Your Rights (UK GDPR)

Subject to conditions and exemptions, you have the right to:

• Access your personal data;
• Rectify inaccurate or incomplete data;
• Erase your data (where applicable);
• Restrict processing;
• Object to processing based on legitimate interests or to direct marketing;
• Data portability (where processing is based on consent or contract and carried out by automated means);
• Withdraw consent at any time (where processing relies on consent).

You can exercise your rights by contacting us (Section 14). You also have the right to complain to the UK Information Commissioner’s Office (ICO). We would appreciate the chance to address your concerns first.

---

9. Cookies (and Optional Analytics)

We use essential cookies that are necessary for the Website to function.

• If we use non-essential cookies (e.g., analytics), we will request your consent via our cookie banner.
• You can change your cookie preferences at any time through your browser settings and/or our banner controls.
• If you choose to refuse non-essential cookies, some features may be limited.

We may use Google Analytics to understand Website usage. Google may process limited pseudonymous data (e.g., device and usage data). Where used, we rely on your consent for analytics cookies. For more details, see Google’s Privacy Policy.

---

10. Marketing Choices

We will only send you marketing where permitted by law and, where required, with your consent. You can opt out at any time by using the “unsubscribe” link in our emails or contacting us (Section 14). Service-related communications may still be sent.

---

11. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or loss. Measures include secure hosting, access controls, strong passwords and up-to-date software. No transmission over the internet is completely secure; you use the Website at your own risk.

---

12. Data Retention

We keep personal data only as long as necessary for the purposes described above, including to meet legal, accounting, or reporting requirements. Retention periods vary by data type and context; we apply proportionate, business-appropriate time limits.

---

13. Children’s Privacy

Our services are not directed to children and we do not knowingly collect personal data from individuals under 18 via the Website.

---

14. Contact

To ask questions, exercise your rights, or make a complaint, please contact:

Spectsuit Legal Consultancy
Email: dataprivacy@spectsuit.com