Privacy Policy
How we collect, use and protect personal information
Last updated: 8 October 2026
This policy explains how Fullbrook Law Limited collects and uses personal information about people who visit this website, contact us, instruct us, or deal with us on a client's behalf. If you are a client, or you act for a client, please read sections 3 to 11 in particular.
1. Who we are
Fullbrook Law Limited (company number 15835110, registered in England and Wales, registered office Kitley View, Wembury Road, Wembury, Plymouth, Devon, PL9 0DQ) is the controller of your personal information. Legal services on any matter we accept are provided by Zachary Taylor, Solicitor Advocate (SRA number 7013058).
Contact: zak@fullbrooklaw.co.uk or 07722 576519. We are not required to appoint a data protection officer.
2. Who this policy covers
- Visitors to this website.
- People who enquire about our services.
- Our clients.
- People who instruct us or deal with us on a client's behalf, such as an attorney under a lasting power of attorney, a deputy, or a family member the client has authorised.
- Other people whose information appears in a client's matter, such as the other party or officers of an organisation we deal with.
3. The information we collect
If you contact us: your name, email address, telephone number and anything you include in your message.
If you are a client, or act for one, we may also hold:
- your address and date of birth, and proof of your identity;
- documents showing who may act for a client, such as a lasting power of attorney;
- financial information, such as income, savings, property, benefits and pensions;
- information about health, care needs and care arrangements, where it is relevant to the matter;
- correspondence and other documents about the matter; and
- records of our discussions.
Information about health is "special category" data and receives extra protection under data protection law. We collect it only where the matter requires it.
Website analytics: if you accept analytics cookies, we collect information about how you use this website (see section 8).
4. Where we get it from
Mostly from you directly, through our contact form, by email or telephone, or when you instruct us. We may also obtain information about a client from:
- the person acting for the client, such as their attorney or a family member they have authorised;
- public bodies, such as a local authority, and care homes or care providers, with the client's authority; and
- the other side in a dispute, and other professionals involved in the matter.
5. Why we use it, and our lawful basis
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Respond to enquiries | Our legitimate interests in responding to people who contact us (art 6(1)(f)); or steps taken at your request before entering into a contract (art 6(1)(b)) |
| Provide legal services to a client | Performance of our contract with the client (art 6(1)(b)) |
| Deal with someone acting for a client, such as an attorney | The legitimate interests of the client and of Fullbrook Law Limited in having the client's matter properly conducted (art 6(1)(f)) |
| Use information about health | Necessary for the establishment, exercise or defence of legal claims (art 9(2)(f)); and, where given, the person's explicit consent (art 9(2)(a)) |
| Meet our legal and regulatory obligations, including SRA rules, tax and accounting rules, and the Money Laundering Regulations 2017 where they apply to the work | Legal obligation (art 6(1)(c)) |
| Run our business, keep records and accounts, and deal with complaints or claims | Our legitimate interests (art 6(1)(f)) |
| Website analytics | Your consent (art 6(1)(a)), and regulation 6 of the Privacy and Electronic Communications Regulations 2003 for non-essential cookies |
Where we rely on consent, you can withdraw it at any time. That does not affect processing already carried out, or processing we are entitled to carry out on another basis.
6. Who we share it with
We keep client information confidential. We do not sell personal information or share it for marketing. We share it only where it is needed for the matter, where the client agrees, or where the law requires it, including with:
- the other side in a dispute, public bodies such as a local authority, care providers, experts and other professionals involved in the matter;
- a person authorised to act for the client, such as their attorney;
- our professional indemnity insurers and professional advisers;
- the providers of our email, document and cloud storage services, Google (Google Workspace) and Apple (iCloud), who process information on our behalf and only on our instructions;
- Google (Google Analytics), for website analytics where you have consented;
- our accountants; and
- the Solicitors Regulation Authority, the Legal Ombudsman, a court, or anyone else where the law requires it.
7. Transfers outside the UK
We use three service providers that may store or process information outside the UK, including in the United States: Google (Google Workspace, for email and documents), Apple (iCloud, for document storage) and Google (Google Analytics, for website analytics).
Where information is transferred outside the UK, we make sure it is protected by UK adequacy regulations (including, for US organisations that participate in it, the UK Extension to the EU-US Data Privacy Framework) or by appropriate safeguards, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for details.
8. Cookies and analytics
We use Google Analytics only if you accept analytics cookies through our cookie banner. Analytics cookies are kept for up to 2 years. You can withdraw consent at any time by clearing your browser's site data for this website or blocking cookies.
9. How long we keep it
- Enquiries that do not lead to instructions: deleted within 12 months.
- Client matter files, including information about people acting for the client: kept for at least 6 years after the matter ends, reflecting our professional obligations and limitation periods, then securely destroyed.
- Information may be kept for longer where the law or a regulator requires it, or because of a complaint or claim.
10. Do you have to provide your information?
No, but if a client or their representative does not give us the information we need, we may be unable to act, or to act effectively. We do not make decisions about anyone by automated means.
11. Your rights
You have the right to:
- ask for a copy of your information;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information, or restrict how we use it, in certain circumstances (subject to our legal obligations);
- object to processing based on our legitimate interests;
- ask us to transfer information you gave us, in certain circumstances; and
- withdraw consent, where we rely on it.
Some rights are limited where information is protected by legal professional privilege or professional confidentiality. To exercise your rights, email zak@fullbrooklaw.co.uk.
If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commission (formerly the Information Commissioner's Office): ico.org.uk, telephone 0303 123 1113. Complaints about our legal services are dealt with under our complaints procedure.
12. Changes to this policy
We may update this policy. The date at the top shows when it was last changed.