Privacy policy
This policy explains what personal information I collect through this website and in the course of advising you, why I collect it, who I share it with, and what rights you have over it.
People who contact me are usually dealing with allegations that are distressing and private. I have written this so you can see exactly what happens to that information.
Last updated September 2026
Who is responsible for your information
JJW Legal is the data controller. JJW Legal is the trading name of LLW Legal Limited, registered in England and Wales under company number 13637775, with its registered office at 124 City Road, London, EC1V 2NX. That address is not used for case correspondence.
LLW Legal Limited is registered with the Information Commissioner's Office under reference ZB229426.
What I collect
The information I hold falls into four groups.
- If you use the enquiry form
- Your name, and whichever of a phone number and email address you give me, together with the type of matter you select and anything you write in the message box.
- If you call or email
- Whatever you choose to tell me about your situation, and the contact details you use to reach me.
- If you instruct me
- The documents relating to your case. In a DBS matter that will usually include allegations of misconduct, information about criminal investigations, cautions or convictions, employment records and sometimes health information.
- Automatically
- Standard technical information created when anyone visits a website, such as your IP address, browser and the pages you viewed, held in the hosting provider's logs.
Special category and criminal offence information
Most of what I handle in a DBS matter is sensitive in the specific sense used by data protection law. Allegations of harm, information about criminal investigations, cautions and convictions, and health information all carry extra protection.
I process that information because it is necessary for the establishment, exercise or defence of legal claims, which is the condition set out in Article 9(2)(f) of the UK GDPR, and under the corresponding conditions in Schedule 1 of the Data Protection Act 2018 for information about criminal offences. In plain terms, I cannot advise you or make representations on your behalf without processing it.
Why I process it, and on what basis
- Answering your enquiry
- Because you have asked me to, and because it is in both our legitimate interests that I can reply to you. If you do not instruct me, I do not use your details for anything else.
- Advising and acting for you
- To perform the contract between us once you instruct me.
- Meeting legal and professional duties
- Including record keeping, conflict checking, and the professional obligations that apply to the solicitors who give the advice.
- Running the website
- So the site works, stays secure and is not abused.
Where your information is held
This website is hosted by Vercel. The pages themselves are static and are served from Vercel's network. Anything you submit through the enquiry form is processed in Vercel's London region. Case files and correspondence are held on systems used by the practice.
Where any provider transfers information outside the United Kingdom, that transfer is covered by the safeguards data protection law requires, such as approved contractual clauses.
How long I keep it
- Enquiries that do not proceed
- Up to twelve months, then deleted.
- Case files
- Six years after the file closes, which reflects the period in which a claim could still be brought, after which they are securely destroyed.
- Website logs
- A short period set by the hosting provider, typically no more than thirty days.
Your rights
Under the UK GDPR you have the following rights over your information. Some of them are qualified, particularly where I have a legal duty to keep a record.
- The right to be informed about how your information is used, which is what this policy is for.
- The right of access to a copy of the information I hold about you.
- The right to have inaccurate information corrected.
- The right to erasure, where there is no overriding reason for me to keep it.
- The right to restrict processing in certain circumstances.
- The right to data portability.
- The right to object to processing carried out on the basis of legitimate interests.
- The right not to be subject to a decision based solely on automated processing. I do not make any such decisions.
Complaining about how your information is handled
If you are unhappy with how I have handled your information, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.
Security
Information is held on systems protected by access controls and encryption in transit, and access is limited to those who need it to work on your matter. Conversations with a solicitor are also protected by legal professional privilege, which is a stronger protection than data protection law alone provides.
Changes to this policy
If this policy changes, the revised version will appear on this page with a new date at the top. If a change materially affects how your information is used, I will tell you.
Getting in touch about this
If anything here is unclear, or you want to exercise any of the rights set out above, contact me at info@jjwlegal.co.uk or on 01600 735025.
