Skip to content

Privacy policy

This policy explains what personal information I collect through this website and in the course of advising you, why I collect it, who I share it with, and what rights you have over it.

People who contact me are usually dealing with allegations that are distressing and private. I have written this so you can see exactly what happens to that information.

Last updated September 2026

Who is responsible for your information

JJW Legal is the data controller. JJW Legal is the trading name of LLW Legal Limited, registered in England and Wales under company number 13637775, with its registered office at 124 City Road, London, EC1V 2NX. That address is not used for case correspondence.

LLW Legal Limited is registered with the Information Commissioner's Office under reference ZB229426.

What I collect

The information I hold falls into four groups.

If you use the enquiry form
Your name, and whichever of a phone number and email address you give me, together with the type of matter you select and anything you write in the message box.
If you call or email
Whatever you choose to tell me about your situation, and the contact details you use to reach me.
If you instruct me
The documents relating to your case. In a DBS matter that will usually include allegations of misconduct, information about criminal investigations, cautions or convictions, employment records and sometimes health information.
Automatically
Standard technical information created when anyone visits a website, such as your IP address, browser and the pages you viewed, held in the hosting provider's logs.

Special category and criminal offence information

Most of what I handle in a DBS matter is sensitive in the specific sense used by data protection law. Allegations of harm, information about criminal investigations, cautions and convictions, and health information all carry extra protection.

I process that information because it is necessary for the establishment, exercise or defence of legal claims, which is the condition set out in Article 9(2)(f) of the UK GDPR, and under the corresponding conditions in Schedule 1 of the Data Protection Act 2018 for information about criminal offences. In plain terms, I cannot advise you or make representations on your behalf without processing it.

Why I process it, and on what basis

Answering your enquiry
Because you have asked me to, and because it is in both our legitimate interests that I can reply to you. If you do not instruct me, I do not use your details for anything else.
Advising and acting for you
To perform the contract between us once you instruct me.
Meeting legal and professional duties
Including record keeping, conflict checking, and the professional obligations that apply to the solicitors who give the advice.
Running the website
So the site works, stays secure and is not abused.

Who I share it with

I do not sell your information, I do not share it for marketing, and I do not add you to any mailing list.

In the course of acting for you, and only with your instructions, I may share information with the bodies your case involves. Depending on the matter that can include the Disclosure and Barring Service, the relevant police force, the Independent Monitor, the Upper Tribunal, Disclosure Scotland, and your professional regulator.

  • Service providers who help run the practice, such as the website host and email provider, who act on my instructions and may not use your information for their own purposes.
  • Barristers or other professionals instructed on your case, where that is agreed with you.
  • Anyone I am required to disclose to by law or by a court.

Where your information is held

This website is hosted by Vercel. The pages themselves are static and are served from Vercel's network. Anything you submit through the enquiry form is processed in Vercel's London region. Case files and correspondence are held on systems used by the practice.

Where any provider transfers information outside the United Kingdom, that transfer is covered by the safeguards data protection law requires, such as approved contractual clauses.

How long I keep it

Enquiries that do not proceed
Up to twelve months, then deleted.
Case files
Six years after the file closes, which reflects the period in which a claim could still be brought, after which they are securely destroyed.
Website logs
A short period set by the hosting provider, typically no more than thirty days.

Your rights

Under the UK GDPR you have the following rights over your information. Some of them are qualified, particularly where I have a legal duty to keep a record.

  • The right to be informed about how your information is used, which is what this policy is for.
  • The right of access to a copy of the information I hold about you.
  • The right to have inaccurate information corrected.
  • The right to erasure, where there is no overriding reason for me to keep it.
  • The right to restrict processing in certain circumstances.
  • The right to data portability.
  • The right to object to processing carried out on the basis of legitimate interests.
  • The right not to be subject to a decision based solely on automated processing. I do not make any such decisions.

Complaining about how your information is handled

If you are unhappy with how I have handled your information, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113.

Cookies

This website does not use advertising cookies or tracking pixels, and nothing here is used to identify you personally.

I use Google Analytics to understand how many people find the site and which pages are useful to them. It sets cookies and collects information about your visit, such as the pages you viewed, how you arrived and your approximate location derived from your IP address, which is anonymised. It only runs if you accept it when you are asked. If you decline, or simply ignore the question, no analytics cookies are set and nothing is sent to Google. You can change your mind at any time by clearing this site's data in your browser, which brings the question back.

This site uses Zoho SalesIQ to provide live chat. It is served from Zoho's European data centres. It sets cookies so that a conversation can continue as you move between pages and so that a returning visitor is recognised, and it records information about your visit such as the pages you viewed, your approximate location derived from your IP address, and anything you type into the chat. If you start a chat, that conversation is stored by Zoho on my behalf and is treated in the same confidential way as any other enquiry.

You can block or delete cookies through your browser settings. The site works without them.

Security

Information is held on systems protected by access controls and encryption in transit, and access is limited to those who need it to work on your matter. Conversations with a solicitor are also protected by legal professional privilege, which is a stronger protection than data protection law alone provides.

Changes to this policy

If this policy changes, the revised version will appear on this page with a new date at the top. If a change materially affects how your information is used, I will tell you.

Getting in touch about this

If anything here is unclear, or you want to exercise any of the rights set out above, contact me at info@jjwlegal.co.uk or on 01600 735025.