Privacy policy

Confidentiality and data protection

This privacy policy sets out how Wright Hassall LLP will process your personal and special category data that you may provide us with, or that we may collect from you when you visit our website and/or engage our legal and consultancy services. Please read the following policy carefully to understand how we will manage your personal and special category data.

Wright Hassall LLP is defined as a data controller under the GDPR and Data Protection Act 2018 and is registered with the Information Commissioner’s Office (ICO) under Z5507739. Wright Hassall only collects or uses personal information for those purposes indicated in our notification with the Information Commissioner’s Office.

The information we collect

We process personal data including but not limited to:

  • Name, address and contact details
  • Correspondence with you, such as any information that you have provided
  • Information pertaining to your personal circumstances
  • Information regarding living individuals (e.g. customers / suppliers, staff)
  • Financial details
  • Data provided to prove your identity or the identity of shareholders and directors.

We process sensitive data special category data such as:

  • Racial or ethnic origin
  • Political opinions
  • Religious or  philosophical beliefs
  • Trade union membership 
  • Genetic data
  • Biometric data  
  • Data concerning Health
  • Data concerning a natural persons sex life or sexual orientation

Legal grounds for processing your information

We will rely on the following legal bases under the General Data Protection Regulation to process your personal data:

  1. Consent
  2. Performance of a contract
  3. Legal obligation
  4. Vital interest
  5. Public interest or exercise of official authority
  6. Legitimate interests pursued by the controller or third party

Our contact details

If you have any questions our contact details are:


Wright Hassall LLP
Olympus Avenue
Leamington Spa
CV34 6BF 

01926 886688


How we use information

We may gain information about you from your use of this website. It may be ‘voluntary information’ information that you provide to us such as personal data, (e.g. contact details or information contained in an employment application form) or ‘involuntary information’ information that we gather through our monitoring of visits to this website.

Involuntary information will not generally identify individual visitors to our website and is mainly statistical. It will be used mainly to improve the website and its navigability, and to identify areas that are of most interest to visitors.

Where visitors are identified they can be either individuals in their own right and/or organisations that already have relationships with us, and the information we gain will be used in developing those relationships and improving the services we provide.

The information obtained will be retained and utilised in accordance with all applicable laws in particular, the Data Protection Act 2018 and the General Data Protection Regulation, in accordance with which we will maintain and protect the confidentiality of your information.

Navigating and using our website will not normally require you to provide personal data although, you may need to provide personal data if you would like to use other services available on the website. We are the sole owner of the data collected and will not transfer, trade, sell or share the data.

We will only use the personal data supplied for the purposes set out in this privacy policy: the personal data will be used for our technical and client administration, as well as to deliver a contractual legal service. We may use the data if required to do so by law and for legitimate grounds as a data controller.

We will use the information to improve our services and for marketing purposes only where a person/organisation has supplied explicit consent. Further, we will use your data to respond to your enquiries, provide you with legal and non-legal services and manage your relationship with us.


We may collect your name and contact details (such as your email address, phone number or address) in order to send you information about our services which might be of interest to you.  We may collect this directly from you, or through a third party.  If a third party collected your name and contact details, we will process your professional data based on legitimate interests to send you a fair processing notice and then respect any communication preferences given to us.

You have the right to opt-out of receiving our marketing information.  You may exercise the right at any time by contacting us at: !sales& If we send you any marketing emails we will always provide an unsubscribe option to allow you to opt-out of any further marketing emails. If you opt-out you will be added to our suppression list to ensure we do not accidentally send you further marketing information.  When unsubscribing from any postal marketing, you may initially still receive some content which has already been printed or sent, but we will remove you from any future campaigns.  We may still need to contact you for administrative or operational reasons but we will make sure that those communications do not include direct marketing.

If you are an existing client or acting as a business we use your contact details as necessary for our legitimate interests in marketing to you and maintaining a list of potential clients.

We never share your name or contact details with third parties for marketing purposes.  We do use third party service providers to send out our marketing material but we only allow them to use that information on our instructions and where they have agreed to treat the information confidentially and to comply with the data protection legislation.

We will retain your details on our marketing list until you opt-out at which point we add you to the suppression list.  We keep the suppression list indefinitely to comply with our legal obligations to ensure we do not accidentally send you any more marketing material.

Google Analytics

We use Google Analytics features for Display Advertising. You can opt-out of Google Analytics and disable tracking using the Google Analytics Opt-Out Browser Add-on. We use the data provided by Google Analytics Demographics to develop our website and content in line with our users’ interests.

Cookies Notice - if you continue to use our site we may assume that you agree to our use of cookies

Registration for events

Registration forms may need to be completed in order for you to attend, or show your interest in attending, an event. We may ask you to consent to provide personal data regarding your name, company name, email address and postcode. This information enables us to contact you about the events in which you have expressed an interest. These details will be added to our current contact database and used to identify areas where we can improve our services. You may be taken to third party websites to register and/or make a payment for attending the event. We cannot be responsible for third party websites; we recommend you ensure you read the privacy statements when you visit third party websites.

E-bulletins/ legal research and sector wide newsletters

We will only provide you with e-bulletins / legal research and sector wide newsletters that you have consented to receiving. This will either be through you positively consenting on our subscription forms by ticking a box stating, for example, you wish to receive the employment e-bulletin via email or you have directly contacted us requesting a subscription or in pursuit of our legitimate interests. If you would like to unsubscribe to receiving updates sector please email !Sales&

Prospective clients

We will assume, unless notified of the contrary before the information is provided to us and we approve the position, that data provided by a prospective client or an existing client concerning a prospective matter:

  •  does not carry confidential obligations that are owed to a third party or
  •  is not given in breach of any confidential obligation owed to a third party or
  •  is not confidential and so that we would not be barred from acting for other individuals.

Links and IP addresses

Our websites contain links to various third party websites. We are not responsible for the content or privacy practices of any external websites that are linked from our sites.

We use IP addresses in order to assess patterns, gather broad demographic information for aggregate use, track visitors to the website’s movements, and to manage our website. We do not link the IP addresses with any identifiable personal information.

Applying to work at Wright Hassall

We have a separate privacy policy relating to applications for work.

Information collected at our premises

We collect information about visitors to our premises.  We may record information on your visit, including the date and time you were visiting, your name, contact details and vehicle registration number.  This information is kept for a period of 12 months.


We operate CCTV at our premises which may record you and your activities.  We display notices to make it clear what areas are subject to surveillance.  We will only release footage where there is a legal obligation, to protect the vital interests of the data subject or other person.  Processing is necessary for the purposes of our legitimate interests pursued by us or by a third party except where such interests are overridden by the interests or fundamental rights and freedoms of you which require protection of you or where the data subject is a child.

We use this information as necessary for our legitimate interests in administering your visit, ensuring site security and visitor safety.

CCTV recordings are kept for a period of one month in respect of the ground and first floor of our premises CCTV coverage and for three months in respect of the second floor CCTV coverage.

Information received from third parties

We may receive information about you from various sources. 

Our service providers, for example business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers and credit reference agencies who may provide us with information about you to be used as set out above.

If we have acquired another business, or substantially all of its assets, which originally held your personal data, we will hold and use the personal data you provided to them or which they otherwise held about you in accordance with the Privacy Notice.

We may obtain your data from publicly available sources, for example Companies House.

Why we might share your data with third parties

We may share your personal data with third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our contract with you, to protect the rights, property or safety of us, our clients or others, or where we have another legitimate interest in doing so.

Which third party service providers will process your personal information?

We may share your personal data within the Wright Hassall group.

We may also share your personal data with:

  • Other organisation and service providers that we work with or partner with from time to time including, for example third party websites, analytics providers, advertising and media companies to enable them to show you adverts, including online and mailing houses so that we can send you information in the post.
  • Our professional advisers.
  • Any third party that purchases, or which we transfer, all or substantially all our assets and business.  Should such a sale or transfer occur, we will use reasonable efforts to try and ensure that the entity to which we transfer your information uses it in a manner that is consistent with this policy.

Data security

As well as the measures set out above in relation to sharing your personal data, we have put in place appropriate internal security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.  In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.  They will only process your personal information on our instructions and they are subject to the duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach as required by law.

How long will we keep your information for?

As well as the periods set out above we generally keep your information for a period of seven years from the date in which your file is closed.  There are certain types of work which require a retention period of 15 years.  These include, for example, company and commercial, commercial litigation and property files.  In certain circumstances it may be necessary to keep your personal data for longer than that in order to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.

In determining the appropriate retention period for the retention of personal data we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve these purposes through other means and the applicable legal requirements. 

In certain circumstances we may anonymise your personal data so that it can no longer be associated with you, in such cases we may use such information without further notice to you.

Your rights

The GDPR and Data Protection Act 2018 provide you with a number of rights.  Your key rights are set out below.  Further information may be obtained from the Information Commissioner’s Office.

  • To be informed in a clear, transparent and easily understandable way about how we use your personal data and about your rights
  • Request to access your personal data.  This provides you with the right to obtain a copy of the personal data we hold about you and to check that we are lawfully processing it.
  • Request correction of the personal data that we hold about you.  This allows you have any incomplete or inaccurate data corrected.
  • Request erasure of your personal data.  This enables you to ask us to delete or remove personal data where there is no valid reason for us continuing to process it.
  • Object to processing your personal data.  In cases where we are relying on a legitimate interest or those of a third party and there are particular facts which make you want to object to us using your data on this basis and we do not have a compelling legitimate basis for doing so which overrides your rights, interests and freedoms.  You also have the right to object where we are processing your personal information for direct marketing purposes.
  • Request the restriction of processing of your personal data.  This allows you to ask us to suspend the processing of personal data about you.
  • Request the transfer of your personal data to a third party where you provide it to us and we are using it based on your consent, or to carry out a contract with you, and we process it using automated means.
  • Withdraw consent.  In limited circumstances we will be relying on your consent to the collection, processing and transfer of your personal data for a specific purpose.  You have the right to withdraw your consent for that specific processing at any time.  Once we have received notification that you have withdrawn your consent, we will no longer process your personal data for the purpose or process you originally agreed to, unless we have another legitimate interest in doing so.
  • Lodge a complaint.  If you consider we are using your information in a way which breaches the GDPR or the Data Protection Act 2018, you have the right to lodge a complaint with the ICO.

If you wish to review, verify, correct or request the erasure of your personal data, object to the processing of your personal data, withdraw your consent to the processing of your personal data or request that we transfer a copy of your personal data to a third party please contact either or our Data Protection Officer

We will respond to your request as soon as we can.  Generally this will be within one calendar month from when we receive your request but on occasions it may take longer to deal with your request and in such circumstances we will let you know.

Changes to this Privacy Notice

Any changes we make to our Privacy Notice in the future will be posted on our website and where appropriate notified to you by email or otherwise.

Extranet terms of use

This page tells you the terms of use on which you may access this extranet site (our site). By using our site, you indicate that you accept these terms of use and that you agree to abide by them. If you do not agree to these terms of use, please refrain from using our site.

We are Wright Hassall LLP, a limited liability partnership registered in England and Wales with registered number OC315843. Our registered office is at Olympus Avenue, Leamington Spa, Warwickshire, CV34 6BF.  We are authorised and regulated by the Solicitors Regulation Authority.

Accessing our site

The purpose of providing you with access to our site is to assist in the provision of legal services to our client and access is not to be used for any other purpose.

We will use reasonable efforts to ensure that our site is available at all times. However, we cannot guarantee that our site or any individual function or feature of our site will always be available and/or error free. Without prejudice to the generality of the foregoing, we may suspend access to our site for the purpose of repair and maintenance or for the purpose of redesigning or upgrading our site. 

Access to our site is permitted on a temporary basis, and we reserve the right to withdraw or amend the service we provide on our site without notice for any reason. 

Without prejudice to the generality of the foregoing, we may permanently withdraw your access to our site at any time and without notice if:

  • we are no longer appointed by our client to provide the service made available through our site; or
  • either you or we cease to be retained by our client for the provision of the relevant legal services (as appropriate)

If you are provided with a user identification code, password or any other piece of information as part of our security procedures, you must treat such information as confidential, and you are responsible for ensuring that this is not disclosed to any unauthorised third party. We have the right to disable any user identification code or password, whether chosen by you or allocated by us, at any time, if in our opinion you have failed to comply with any of the provisions of these terms of use.

You are responsible for making all arrangements necessary for you to have access to our site including (without limitation) configuring your information technology, computer programmes and web platform. You are also responsible for ensuring that all persons who access our site through your internet connection are aware of these terms, and that they comply with them.

Materials accessed through our site

Any materials displayed or downloaded from our site are not intended to constitute definitive legal advice or a complete statement of the law on any subject, and are not provided with any guarantees, conditions or warranties as to accuracy or completeness. Without prejudice to the foregoing, you acknowledge and accept that any precedents on our site are not maintained or updated by us. 

To the extent you submit any materials for uploading onto our site, you warrant that prior to delivery, you have used comprehensive and up to date virus checking technology to scan such materials for viruses.

Our liability

We shall not be liable in respect of the content or use of any materials displayed or downloaded from our site.

We shall not be liable if for any reason our site is unavailable at any time or for any period.

To the extent permitted by law, we expressly exclude all conditions, warranties and other terms which might otherwise be implied by statute, common law or the law of equity.

Any liability for any direct, indirect or consequential loss or damage incurred by you in connection with our site or in connection with the use, inability to use, or results of the use of our site, any websites linked to it and any materials and/or content posted on it whether caused by tort (including negligence), breach of contract or otherwise is excluded.

This does not affect our liability for death or personal injury arising from our negligence, nor our liability for fraudulent misrepresentation or misrepresentation as to a fundamental matter, nor any other liability which cannot be excluded or limited under applicable law.

Viruses, hacking and other offences

You must not misuse our site by introducing viruses, trojans, worms, logic bombs or other material which is malicious or technologically harmful. You must not attempt to gain unauthorised access to our site, the server on which our site is stored or any server, computer or database connected to our site. You must not attack our site via a denial-of-service attack or a distributed denial-of service attack. 

We will not be liable for any loss or damage caused by a distributed denial-of-service attack, viruses or other technologically harmful material that may infect your computer equipment, computer programs, data or other proprietary material due to your use of our site or to your downloading of any material posted on it.


We may revise these terms of use at any time by amending this page. 

We shall not be liable in any circumstances for any delay in performing, or failure to perform, any of our obligations under these terms of use if such delay or failure result from events, circumstances or causes beyond our reasonable control including (without limitation) failure of a telecommunications network.

These terms of use shall be governed by and construed in accordance with the law of England. Any dispute arising in relation to these terms of use shall be subject to the non-exclusive jurisdiction of the English courts.

If you have any questions, concerns or comments about our site or these terms of use, please contact us.

Cookie policy

By using our website, you agree that we can place these types of cookies on your device

What are cookies?

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.

We use the following cookies:

  • Strictly necessary cookies. These are cookies that are required for the operation of our website.
  • Analytical or performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
  • Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
  • Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

How to block cookies

You have the ability to accept or decline cookies by modifying the settings in your browser. If you choose to decline cookies used by our website you will still be able to use the site.

If you have any questions about our use of cookies, please contact us.

How can we help?
01926 732512