Privacy policy

HS Legal Consulting is the data controller for personal data described in this policy. We are based in Sheffield, South Yorkshire, United Kingdom.

Questions about privacy can be sent to hannah@hs-legalconsulting.co.uk.

Depending on how you interact with us, we may collect:

• Identity and contact details: name, email address, business name, and any other details you include in an enquiry
• Enquiry content: the message and topic you send through our contact form or by email
• Service information: documents and details you share when we are engaged to draft, review, or advise
• Technical data: limited information such as browser type, device, and pages visited, where our hosting or analytics tools record this
• Cookie-related data, as described in our Cookie policy

Most personal data comes directly from you, for example when you fill in the contact form, email us, or instruct us on a matter.

Some technical data may be collected automatically when you visit the site, through hosting logs or cookies (see our Cookie policy).

We use personal data to:

• Respond to enquiries and arrange consultations
• Provide legal support and related services you have asked for
• Manage our client relationship, billing, and records
• Improve and secure our website
• Comply with legal and professional obligations

Under UK GDPR, we rely on one or more of the following bases:

• Consent, where you have clearly agreed (for example optional cookies, or marketing if we ever introduce it)
• Contract, where processing is needed to take steps at your request before a contract, or to perform a contract with you
• Legitimate interests, for example responding to website enquiries, improving the site, and keeping it secure, where those interests are not overridden by your rights
• Legal obligation, where we must keep or disclose information to meet the law

We do not sell your personal data. We may share it with trusted providers who help us run the practice (for example email, hosting, or document tools) only as needed for those services and under appropriate arrangements.

We may also disclose information if required by law, a regulator, or a court, or to protect our legal rights.

If a provider stores or processes data outside the UK, we will take steps required by UK law to protect it, for example using providers that offer adequate safeguards or approved transfer mechanisms.

We keep personal data only as long as needed for the purpose it was collected, including any legal, accounting, or professional record-keeping requirements.

Enquiry emails that do not lead to an engagement are typically kept for a shorter period unless we need them to manage a follow-up or dispute. Client files are retained in line with our engagement terms and professional practice.

Under UK data protection law, you may have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to erase data in certain circumstances
• Object to or restrict certain processing
• Receive data in a portable format where applicable
• Withdraw consent where processing is based on consent

To make a request, email hannah@hs-legalconsulting.co.uk. We will respond within the timeframes required by law. You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data. See ico.org.uk.

We take reasonable technical and organisational steps to protect personal data against loss, misuse, and unauthorised access. No online transmission is completely secure, so please take care when sending sensitive documents by email.

Our website and services are aimed at businesses and adults. We do not knowingly collect personal data from children.

We may update this privacy policy from time to time. The “Last updated” date will change when we do. Please check this page periodically for the latest version.