Privacy & Website Policy

This notice sets out when and why we collect personal data about you.  It explains how we use it, keep it safe and to whom we may disclose it.

If you are an existing or prospective client of Cunningtons LLP, then we ask you to read and understand this notice.  It should be read in conjunction with our general terms and conditions.

Cunningtons LLP is the data controller and it collects, processes and stores the personal information that you provide us with.  Cunningtons LLP is a limited liability partnership which is authorised and regulated by the Solicitors Regulation Authority (SRA ID 619821).

This notice does not apply to any website which contains links to our website or to any website to which we provide links.

The information we may collect

The information we collect will depend on our instructions and what you have asked us to do.  We do not ask you to provide us with more data than we require in order to provide you with legal services or to enter into a contract with you to provide those services.

When you complete forms on our website, telephone us, email us or otherwise correspond with us, we collect the personal information that you provide to us.  That personal information may include your name, employment details, business activities, personal and business contact details, your personal preferences and requirements, financial information, personal description, photograph, any national identifier, date of birth and your personal circumstances.

Neither our website nor our services are aimed at children.  However, there may be occasions when we receive personal information about children involved in a case.

If you are not our client, we may obtain such information about you from our client or other publicly available sources with a view to providing our client with legal services.  Normally we will not have to tell you that we have this information if you have it already or if doing so would impair the ability for us to provide legal services to our clients and potential clients.

Cookies are small amounts of information which we store on your computer.  Cookies make it easier for you to log on to and use the site during future visits.  They also allow us to monitor website traffic and to personalise the content of the site for you.  You may set up your computer to reject cookies although, in that case, you may not be able to use certain features on our site.  We may also collect technical information and data from your use of our website.

Why we process your personal information

We collect personal information primarily for the purposes of a) providing you with legal services b) complying with our regulatory and legal obligations c) complying with our operational requirements and d) assisting us to improve and market our services.

If you do not provide us with your consent to process your data in this way, we may have to stop working for you, as it may mean that we are unable to provide you with accurate or correct legal advice or comply with our legal or regulatory obligations.

The legal basis’ upon which we may process your personal information include your consent, our legitimate interests, pursuant to a contract between you and us or to comply with our legal or regulatory obligations.

Our legitimate interests include offering to provide you with legal services, quotations and preliminary advice prior to formal instructions.  It also includes enabling us to process payments, manage and develop our business, for marketing activities and to better understand how our website and services are used.  It also includes hosting and maintaining our website.  It also includes enforcing the terms of any contract between us and any client.

We do not process your personal information in any automated way which has a significant effect of the individual concerned or produces legal effects which affect that individual.

To whom we may pass your personal information

We will never sell your data and will keep it safe and secure at all times.

There may be occasions when we need to pass your information to third parties pursuant to our professional and legal obligations.  We may also need to pass your information to third parties during the course of your transaction or pursuant to the work that we are undertaking on your behalf.

The third parties to whom we may pass your personal information may include regulatory, law enforcement and fraud prevention bodies and agencies; companies and individuals that introduce you to us; medical practitioners; barristers; experts; courts and tribunals; people you ask us to provide your information to; and persons and companies who satisfy us that they have your consent to provide them with your personal data, such as those seeking legal advice or quotations on your behalf, provided that we will not be in breach of our legal or regulatory obligations.

We may share limited technical personal information, such as your IP address, with Google Analytics.  We use this information to understand how people use our website and not for direct marketing purposes.

In some cases, payment transactions will be processed securely via our website by Worldpay and we will pass on the personal information required for this purpose.

We share your personal data with some third party service providers, such as our electronic case management system provider.  In some cases, personal information may be transferred (the definition of which includes making available remotely) to countries outside of the EEA.  This will only happen if this is done with your informed consent; is necessary for the performance of a contract between us and a client; or is to a country or international organisation which provides appropriate safeguards.

Retention of your personal information

The information that you provide to us or that we collect is stored on our secure servers or in hard copy in our storage facilities.

We will retain your information for a reasonable period or as long as the law requires and for the specific purposes for which it was obtained.  Generally speaking, your information will be retained for a period of six years but possibly longer, depending on the circumstances of the matter, our legal and regulatory requirements and the risk to us of any future claims.

Your rights

You have the right to request us to provide you with access to and rectification of your personal information.  In some circumstances you have the right to restrict or object to the way in which we process your information or to request the erasure of it.  You may have the right to ask us to transfer your personal information to another person or business.

You have a right for your information not to be used for marketing purposes.  We would ordinarily seek your consent before using your information for marketing purposes.  If you are our client, you will be given the opportunity to opt in or out of marketing.  You can change your mind at any time.  If we have obtained your consent to process your personal information, you can withdraw that consent at any time by contacting us.

You have a right to lodge a complaint with the supervisory authority.  The supervisory authority in the UK is the Information Commissioner’s Office (

Contacting us

We have appointed a Data Protection Administrator.  Any queries in respect of your data, this policy or your rights should be sent to him.  Our Data Protection Administrator’s contact details are:

Mark Taylor
Cunningtons LLP
Great Square
Essex CM7 1UD

Tel: 01376 326868


We may have to verify your identity before fulfilling any request or query that you may have and we may ask you to put your request or query in writing.

Changes to this policy

We may change this privacy policy from time to time, normally if there is a change in the law.  Any changes will be added to our website.