Privacy Policy
How we collect, use, and protect your personal data
Your Privacy Matters
Fullbrook Law Limited is committed to protecting your privacy and personal data. This policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Fullbrook Law Limited is the data controller for the personal data collected through this website. Fullbrook Law Limited is a company registered in England and Wales under company number 15835110.
Legal services on any retained matter are provided by Zachary Taylor, Solicitor Advocate, who is individually regulated by the Solicitors Regulation Authority (SRA number 7013058).
Contact: zak@fullbrooklaw.co.uk or 07722 576519
How We Handle Your Data
What We Collect
Your name, email address, telephone number, and any information you provide when you contact us. If you instruct us, we may also collect information relevant to your legal matter, which may include financial information, correspondence, and other documents you provide.
How We Collect It
We collect personal data directly from you when you complete our contact form, send us an email, telephone us, or instruct us to provide legal services. We do not collect personal data from third parties unless this is necessary for our services and you have been informed.
Why We Process It
To respond to your enquiries, to provide legal advice and services, to comply with our legal and regulatory obligations (including the SRA's rules and the Money Laundering Regulations 2017), and to manage our business including maintaining records and accounts.
Lawful Basis
Under Article 6 of the UK GDPR, we rely on: performance of a contract (where you have instructed us), legitimate interests (to respond to enquiries and manage our business), and legal obligation (where required by regulatory or legal requirements).
How Long We Keep Your Data
We retain your personal data only for as long as is necessary for the purpose for which it was collected.
Enquiries (no instructions)
If your enquiry does not result in instructions, we will delete your data within 12 months.
Client matter files
We retain data for a minimum of 6 years after the conclusion of the matter, in line with our professional obligations and limitation periods.
Extended retention
We may retain data for longer where required by law or regulation.
Who We Share Your Data With
We do not sell or share your personal data with third parties for marketing purposes. We may share your data with the following where necessary:
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Communications by email are not guaranteed to be secure. If you have concerns about sending sensitive information by email, please contact us to discuss alternative arrangements.
Cookies and Website Analytics
This website uses Google Analytics 4 to understand how visitors use the site so that we can improve our service. Analytics is only enabled after you give your consent through the cookie banner. No analytics cookies are set and no data is sent to Google until you click Accept.
Consent First
When you first visit the site, a cookie banner appears at the bottom of the page. No analytics cookies are set and no data is sent to Google until you click Accept. If you click Decline, no tracking takes place and no analytics cookies are written to your device.
Cookies We Set
If you consent, Google Analytics 4 (Measurement ID G-20HYQETW7E) sets two first-party cookies. _ga is used to distinguish unique visitors and is retained for 2 years. _ga_20HYQETW7E is used to persist session state and is also retained for 2 years.
IP Anonymisation
We enable Google Analytics' IP anonymisation feature (anonymize_ip: true), so that the last octet of your IP address is truncated before any data is stored or processed. Your precise IP address is not retained by Google.
International Transfers
Google LLC is the data processor and processes analytics data in the United States. The transfer is protected by the Standard Contractual Clauses approved by the European Commission and adopted by the UK. For more information see Google's privacy policy.
Lawful basis: we rely on your consent under Article 6(1)(a) of the UK GDPR and on Regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR) for the placing of non-essential cookies on your device. No strictly necessary exemption is claimed for our analytics cookies.
Withdrawing consent: you can withdraw your consent at any time. The simplest way is to clear your browser's local storage for this site, or to clear site data in your browser settings. The cookie banner will then reappear on your next visit so that you can make a fresh choice. You can also block cookies for this site altogether using your browser's cookie controls.
Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
Access
Request a copy of the data we hold about you.
Rectification
Have inaccurate data corrected.
Erasure
Have your data erased, subject to our legal obligations.
Restrict Processing
Limit how we use your data in certain circumstances.
Data Portability
Receive your data in a portable format.
Object
Object to certain types of processing.
To exercise any of these rights, please contact us at zak@fullbrooklaw.co.uk.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). The ICO can be contacted at ico.org.uk or on 0303 123 1113.
If your complaint relates to the quality of our legal services rather than data protection, please refer to our complaints procedure.
Get in Touch
If you have any questions about this privacy policy or how we handle your data, please contact us.
This policy was last updated in April 2026.