In this Privacy Policy the terms, ‘we’ or ‘us’ is PCB Lawyers LLP.

Your privacy is important to us, and we are committed to keeping your information secure and managing it in accordance with our legal responsibilities under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025 (as amended from time to time).

Please read this Privacy Policy carefully as it contains important information to help you understand how and why we process any personal information that you give to us.

We process personal information which you give us:

• as a client to provide you with legal services;
• as an employee under a contract of service;
• whilst servicing your account through our website, in writing or over the phone;
• if you request information or assistance from us;
• when engaging with us during marketing, social media and networking activities; and
• when interacting with us via our website.

This includes:

• Personal details such as your date of birth, address, National Insurance Number, telephone number and email address.
• Identity information and documentation such as your passport, driving licence, utility bills or national identity card.
• Credit history and records relating to you, your partner or anyone else you are financially linked with (we obtain this information from credit reference and fraud prevention agencies or via third party organisations that will engage with you directly to gather your data).
• Family, lifestyle, financial and social circumstances.
• Financial details such as your income and information about your bank accounts.
• Employment/self-employment details.
• Usage information such as how you use our website and services.
• Technical information such as internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy.

Special categories of personal data include information about an individual's health and other categories of personal information which are closely protected.

We do not generally process such information unless you have voluntarily provided this to us, or it is relevant to the legal service you have asked us to provide you with. We will process sensitive information where you have provided this information to us and have agreed that we can use this information to deliver services to you. Where possible we shall seek to minimise the collection and use of such special categories of personal data.

We use different methods to collect data from and about you including through:

• Direct interactions. You may give us the personal information as stated above by filling in forms or by corresponding with us by post, phone, email or otherwise.
• Automated technologies or interactions. As you interact with our website, we may automatically collect technical and usage information about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies.
• Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below:
  • Technical and usage information from analytics providers such as Google based outside the UK;
  • Personal and identity information from other professional services such as estate agents or financial brokers. From publicly available sources such as Companies House and the Land Registry.

We use your information to:

• Provide legal services to you.
• Provide and service your relationship with us.
• Under a contract of employment/service
• Comply with legal obligations for the prevention of financial crime and money laundering.
• Internal record keeping.
• To improve our services.
• Periodically send newsletters, promotional emails about new services and other information which you have provided.
• From time to time, to use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customize the website according to your interests.

We will process your information in order to meet our contractual obligations to you, where we have a legitimate interest to do so, where we are permitted by law or to comply with applicable laws and regulations.

We will retain your personal information in accordance with applicable laws. We will take reasonable steps to destroy or anonymise personal information we no longer need for the purposes we have set out above.

Our retention periods are:

Where necessary or required we share information with:

• Regulatory authorities to comply with our legal obligations.
• Credit reference agencies to check your identity in accordance with our legal obligations.
• Third parties providing complaints and compliance support or support to conduct due diligence for identity and verification purposes.
• Insurers for the purpose of providing you with appropriate financial cover for an identified insurable risk, or in connection with any claim made by you against us.
• Property Agents, Brokers, Lenders, other Solicitors involved in your transaction representing other party(ies) in your matter to enable them and us to fulfil our obligations to you.
• Other Government Departments such as HMRC, Companies House, Probate Registry, Court of Protection or HM Land Registry to fulfil your and our legal obligations.
• Experts and Barristers required to work on your matter.
• Our Auditors and external assessment bodies to achieve and maintain any Regulatory or Quality Assurance Standards and accreditations which meet our legal obligations and enable us to provide quality legal services to you.
• Other legal firms in order to progress your matter, as agreed in our engagement documentation with you.

We invest appropriate resources to protect your personal information, from loss, misuse, unauthorised access, modification or disclosure. However, no internet-based site or system can be 100% secure and we cannot be held responsible for unauthorised or unintended access that is beyond our control.

We may change this policy by updating this document. You should check the document from time to time to ensure you are happy with any changes.

Our website uses cookies and similar technologies to distinguish you from other users of our website. This helps us provide you with a good experience when you browse our website and allows us to improve our website and services.

A cookie is a small text file that is placed on your device when you visit a website. Cookies enable websites to function efficiently, remember user preferences and collect information about how visitors use a website.

We use the following categories of cookies:

• Strictly Necessary Cookies – These cookies are required for the operation and security of our website and cannot be switched off in our systems.
• Analytics and Performance Cookies – These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. This information enables us to improve the performance and functionality of our website.
• Functionality Cookies – These cookies allow the website to remember choices you make and provide enhanced features and personalised content.

Where required by law, we will seek your consent before placing non-essential cookies on your device. You may withdraw your consent at any time through our cookie preferences tool or by adjusting your browser settings.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of our website.

For further information about cookies, including how to manage and delete them, please visit www.allaboutcookies.org.

Further information about how Google uses information collected through its services can be found at: https://policies.google.com/privacy

You have the right to:

• Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
• Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
• Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
• Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
• Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
• You have the right to raise concerns directly with us regarding the processing of your personal data and to have those concerns investigated and responded to in accordance with our complaints procedure.

If you have any concerns about how we have collected, used, stored or otherwise processed your personal information, you have the right to make a complaint directly to us.

Complaints should be submitted in writing to the Data Protection Manager using the contact details set out below.

We will:

• Acknowledge receipt of your complaint within 5 working days;
• Investigate the matters raised and, where necessary, request further information from you;
• Provide a substantive written response within 30 calendar days of receipt of your complaint.

Where a complaint is particularly complex, or where additional information is required to properly investigate the matter, we may extend the response period by up to a further 60 calendar days. If an extension is required, we will notify you within the initial 30-day period, explain the reasons for the delay and provide an updated response date.

Our response will set out the outcome of our investigation, any actions we have taken or propose to take, and details of your right to escalate the matter to the Information Commissioner's Office (ICO) if you remain dissatisfied.

If you remain dissatisfied with our response, or believe that we have not complied with our obligations under data protection legislation, you have the right to complain to the Information Commissioner's Office (“ICO”), the UK's supervisory authority for data protection matters. Further information can be obtained from the ICO's website at www.ico.org.uk.

You can contact us by writing to us at:

PCB Lawyers LLP, Cavendish Court, 1115 Wigmore Street, London W1U 1PF

Data Protection Manager: Leila Blackett