Legal & Compliance

Sinclair Gibson LLP is the data controller of your personal data.  We process your data in accordance with UK GDPR, the Data Protections Act 2018 and our professional obligations. 

What is ‘Personal Data’?

Personal Data is data from which an individual can be identified, such as: 

• an email address containing a name

• a telephone number

• driver’s licence number 

• a home address.

What do we use your Personal Data for

We use your Personal Data primarily for the provision of legal services to you, but also for related purposes such as:

• updating and enhancing client records; 

• analysis to help us manage our practice; 

• statutory returns; and 

• for legal and regulatory compliance. 

You have a right to access, correct, delete, restrict or object to the use of your data and to request a data transfer. 

Our work for you may require communication of your Personal Data to third parties, such as expert witnesses, barristers and other professional advisers. 

We are required to undergo audit and other types of quality checks for legal and regulatory compliance purposes. External organisations who conduct these inspections are required to maintain confidentiality in relation to your Personal Data.

We may use AI tools to support our work and to process your Personal Data.  We ensure use of approved systems with safeguards in place and compliance with confidentiality and legal privilege. 

How long will we keep your Personal Data for?

When we have completed a matter, if you do not want us to return certain papers to you, we will keep them for at least thirteen years.  After this, we may destroy them.  If we keep important original documents such as title deeds, trust deeds and wills, we will store them in our fireproof safes.  We currently do not charge for this service. We will not destroy original documents of this nature unless you ask us to do so. We reserve the right to withdraw this service at any time and return the original documents to you for safekeeping.

What kind of protection and limitation does the GDPR provide?

The GDPR requires that the Personal Data we hold about you must be:

• adequate, relevant and limited to what is necessary;

• accurate and, where necessary, kept up to date; 

• protected from unauthorised or unlawful processing and accidental loss or destruction; and

• stored for no longer than necessary.

If you believe that a member of the firm is not complying with these requirements in relation to your Personal Data, please get in touch with our Data Compliance Officer using the details below. 

Lucy Gibson

The Data Compliance Office

Sinclair Gibson LLP

3 Lincoln’s Inn Fields

London

WC2A 3AA

Email:  dco@sinclairgibson.com

Tel.:     020 7242 9700