Privacy Policy — Lister Langley Solicitors

Lister Langley Limited Privacy Policy

We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are, and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us, complain to us, or complain to the Information Commission.

This privacy policy does not apply to any third-party websites that may be linked from our website.

Clients of this firm should read this policy alongside our general terms of business, which provide further information on confidentiality.

Who are we and what do we do?

Lister Langley Limited is a limited company, authorised and regulated by the Solicitors Regulation Authority under number 637181

We collect, use, and are responsible for certain personal data about you. When we do so, we are subject to the UK General Data Protection Regulation (UK GDPR) and the Data protection Act 2018. We are the data controller of that personal data.

Our services and website are not aimed specifically at children. If you are a child and want further information about how we might use your data, please contact us (see ‘How to contact us’ below).

Key terms

In this privacy policy:

“we”, “us”, “our” means Lister Langley Limited - company number 0923005 trading as Lister Langley Solicitors.

”personal data” means any information relating to an identified or identifiable living individual.

“special category personal data” means more sensitive personal data, including information about a person’s health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, sex life, or sexual orientation.

“you” means the person whose personal data we hold or use.

Personal data we collect about you

The personal data we collect will depend on the nature of your enquiry, instruction, or matter. In the course of advising and/or acting for you, we will or may collect the following types of personal data:-

Personal data we will collect

· Your name, address, and contact details, including your telephone number, email address, and postal address

· Information to enable us to check and verify your identity, such as your date of birth, passport, driving licence, or other identification details

· Information relating to the matter in which you are seeking our advice or representation

· Information needed to comply with our legal and regulatory obligations, including anti-money laundering, financial crime, sanctions, and source of funds or source of wealth checks

· Records of our communications with you, including letters, emails, telephone notes, meeting notes, and attendance notes

· Billing and payment information relating to our services

· Your National Insurance number, tax details, and Unique Taxpayer Reference, where relevant

· Your bank or building society details, and information about payments made to or from you

· Information about your assets, liabilities, income, savings, investments, pensions, insurance policies, business interests, property, trusts, or estate

· Information about your family members, beneficiaries, executors, trustees, attorneys, deputies, personal representatives, or other people connected with your matter

· Information about your health, capacity, care needs, vulnerabilities, or personal circumstances, where relevant to your instructions or the service we provide

· Information contained in Wills, Lasting Powers of Attorney, trust documents, estate papers, probate documents, tax forms, financial records, correspondence, and other documents provided to us or prepared during your matter

Personal data we may collect depending on why you have instructed us

· Your National Insurance number, tax details, and Unique Taxpayer Reference, where relevant

· Your bank or building society details, and information about payments made to or from you

· Information about your assets, liabilities, income, savings, investments, pensions, insurance policies, business interests, property, trusts, or estate

· Information about your family members, beneficiaries, executors, trustees, attorneys, deputies, personal representatives, or other people connected with your matter

· Information about your health, capacity, care needs, vulnerabilities, or personal circumstances, where relevant to your instructions or the service we provide

This personal data is required to enable us to provide our service to you, respond to your enquiry, comply with our legal and regulatory obligations, and manage our relationship with you. If you do not provide personal data we reasonably ask for, it may delay or prevent us from providing services to you.

How your personal data is collected

We collect most of this information from you. However, we may also collect personal data from other sources where this is relevant to your enquiry, instructions, or matter, including:

· from publicly accessible sources, such as Companies House, HM Land Registry, the Probate Registry, and the Office of the Public Guardian;

· directly from a third-party provider, such as an electronic identity verification provider, which may carry out identity checks, sanctions screening, and client due diligence checks on our behalf, and credit reference agencies where relevant;

· from third parties connected with your matter, where appropriate, such as:

o your bank, building society, other financial institution, financial adviser, accountant, pension provider, or tax adviser;

o other solicitors, barristers, estate agents, valuers, surveyors, or other professional advisers;

o executors, administrators, trustees, attorneys, deputies, beneficiaries, family members, or other people involved in your matter;

o doctors, medical professionals, care providers, or capacity assessors, where relevant to your instructions or matter;

· via our website, including through cookies and similar technologies.

· via our information technology (IT) systems, including our case management, document management, email, telephone, and communication systems;

· through automated monitoring of our website and technical systems such as computer networks, connections, security systems, email, and instant messaging systems.

How and why we use your personal data

Under data protection law, we can only use your personal data if we have a proper reason for doing so. The reasons we may rely on include:

· to comply with our legal and regulatory obligations;

· to fulfil our contract with you or to take steps at your request before entering into a contract;

· for our legitimate interests or those of a third party;

· for a recognised legitimate interest, where this applies under data protection law; or

· where you have given consent - where we need your consent, we will ask for it separately to this privacy policy, and you can withdraw it at any time.

A legitimate interest is when we, or a third party, have a proper reason to use your personal data, provided this is not overridden by your own rights, interests and freedoms.

You have the right to object to processing based on legitimate interests. If you object, we must stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms, or the processing is required to establish, exercise, or defend legal claims.

The table below explains what we use your personal data for and our reason for doing so.

Where we process special category personal data such as information about health, capacity, vulnerability, or personal circumstances, we will only do so where data protection law allows us to. Depending on the circumstances, this may be because:

· you have given explicit consent;

· the processing is necessary to establish, exercise, or defend legal claims;

· the processing is necessary for reasons of substantial public interest, where permitted by law;

· the processing is necessary to protect your vital interests, or someone else’s, where you are physically or legally incapable of giving consent; or

· the information has been made public by you.

We will only use special category personal data where it is relevant and necessary for your enquiry, instructions, matter, or our legal and regulatory obligations.

Marketing

We may use your personal data to send you occasional information about our services, legal updates, newsletters, or events that may be of interest to you.

We will only send marketing communications where we are allowed to do so by data protection and electronic marketing laws. This may be because you have given consent, or because we are permitted to contact you about similar services and have given you the opportunity to opt out.

We will not sell your personal data or share it with other organisations for their own marketing purposes.

You can ask us to stop sending marketing communications at any time by contacting us using the details in the ‘How to contact us’ section below.

We may ask you to confirm or update your marketing preferences if you ask us to provide further services in the future, or if there are changes in the law, regulation, or the structure of our business.

Who we share your personal data with

We may share your personal data where this is necessary for your matter, our business administration, or our legal and regulatory obligations. This may include sharing information with:

· third parties who help us provide and manage our services such as our case management, accounts, IT, cloud storage, email, and telephone service providers;

· electronic identity verification, sanctions screening, and client due diligence providers;

· professional advisers or others involved in your matter such as barristers, accountants, financial advisors, tax advisers, medical professional, valuers, estate agents, care providers, or other experts;

· people connected with your matter, such as executors, administrators, trustees, attorneys, deputies, beneficiaries, family members, or other representatives;

· banks, building societies, financial institutions, and payment providers;

· HMRC, HM Land Registry, the Probate Registry, the Office of the Public Guardian, courts, tribunals, law enforcement agencies, and regulatory bodies, where relevant;

· our insurers, brokers, auditors, accountants, legal advisers, compliance consultants, and other professional advisers;

· third parties connected with a business transfer, merger, restructuring, or sale, if relevant.

We only allow third partes to handle your personal data where we are satisfied that appropriate confidentiality and security arrangements are in place. Where we use outsourced service providers, we require them to act consistently with our legal and professional obligations, including confidentiality.

If you would like more information about who we share personal data with and why, please contact us using details in the ‘How to contact us’ section below.

Where your personal data is held

Your personal data may be held at our offices, in our paper files, on our IT systems, in our email and communication systems, and in cloud-based systems used by us.

Your personal data may also be held by third-party service providers, representatives, and others where this is relevant to your matter or to the services described in this privacy policy.

Some third parties may process or store personal data outside the UK. For more information about this, and how we safeguard your personal data where this happens, see the ‘Transferring your personal data abroad’ section below.

How long your personal data will be kept

We will not keep your personal data for longer than we need it for the purpose for which it was collected, or for longer than is required by law or our professional obligations.

As a general rule, we will keep matter files and related personal data for at least seven years from the end of the matter. This is so that we have the information needed if you, or we, need to bring or defend any complaints, claims, or regulatory enquiries. Different retention periods may apply depending on the type of work and nature of the records. For example:

· trust records may need to be kept for the duration of the trust and for a minimum of seven years afterwards;

· in probate matters where there is a surviving spouse or civil partner, relevant information may be retained until the survivor has died, for example to deal with the transferable inheritance tax allowances;

· Wills, Codicils, Lasting Powers of Attorney, and related documents may be kept indefinitely;

· deeds and documents relating to unregistered property may be kept indefinitely where they evidence ownership or legal rights;

· where the matter involves a person who is under 18, for example a child of a client or a beneficiary under a Will or Trust, we may need to keep relevant information for an appropriate period after they turn 18.

At the end of the relevant retention period, we will securely delete, destroy, or anonymise your personal data, unless we need to retain it for a lawful reason.

Transferring your personal data abroad

We may need to transfer your personal data outside the UK. For example, this happen if your matter involves a client, beneficiary, professional adviser, lawyer, asset, or other relevant person or organisation in another country, or where we use a service provider whose systems or support services are based located overseas.

We will only transfer your personal data outside the UK only where data protection law allows us to do so. This may be because the country has been recognised as providing adequate protection, appropriate safeguards are in place, or a specific exception applies.

Where required, we will take steps to ensure that the protection given to your personal data is not materially lower than the protection provided under UK data protection law.

Please contact us using the details in the ‘How to contact us’ section below if you would like more information.

Your rights

You have rights in relation to your personal data. These rights are not absolute and may only apply in certain circumstances.

Access: The right to be provided with a copy of your personal data.

When responding to a data subject access request, we will carry out searches that are reasonable and proportionate in the circumstances. If clarification is genuinely required to respond to your request, we may ask you for further information. Where we do so, the time limit for responding will be paused until the clarification is received.

Rectification: The right to require us to correct any inaccurate or incomplete personal data.

Erasure: The right to ask us to delete your personal data in certain circumstances.

Restriction: The right to ask us to how we use your personal data in certain circumstances.

Data portability: The right to receive certain personal data you provided to us, in a structured, commonly used, and machine-readable format and to transmit that data to another organisation in certain circumstances.

Objection: The right to object to your personal data being used for direct marketing, and to object to certain other processing based on legitimate interests;

Automated decision-making: The right not to be subject to a decision based solely on automated processing (including profiling) where that decision produces legal effects or similarly significantly affects.

We do not use automated decision-making to make decisions about you that produce legal effects or similarly significant impacts. Where automated tools are used as part of our internal processes, for example for identity verification or security screening, these are subject to appropriate safeguards and human oversight.

Withdraw of consent: Where we rely on your consent, the right to withdraw that consent at any time. This will not affect the lawfulness of our use of your personal data before consent was withdrawn.

To exercise your rights: Please contact us using the details in the ‘How to contact us’ section below. Please tell us what right you want to exercise and provide enough information to identify you and understand your request. We may ask for proof of your identity if we reasonably need this.

Keeping your personal data secure

We have appropriate technical and organisational security measures in place to protect your personal data against unauthorised access, use, disclosure, or damage.

We limit access to your personal data to those who need it for their work. Anyone who handles your personal data must do so in an authorised way and is subject to confidentiality obligations.

Where we use third-party service providers, we require them to have appropriate security arrangements in place to protect your personal data.

We have procedures for dealing with suspected personal data breaches. Where required, we will notify the Information Commission, the Solicitors Regulation Authority, and/or affected individuals.

Cookies

Our website uses cookies and similar technologies. Some cookies are needed for the website to work properly. Others may be used to help us understand how the website is used or to improve the user experience.

Further information about the cookies we use, why we use them, and how you can manage your cookie preferences is available in our Website Use and Cookies Policy.

How to complain

We hope that we can resolve any query or concern you may raise about our use of your personal data. Please contact us in the first instance using the details in the ‘How to contact us‘ section below.

If you wish to make a complaint about how we use your personal data, or if you are dissatisfied with the way we have handled a data subject request, we will deal with your complaint fairly and promptly. We will acknowledge your complaint within 30 days of receiving it, make appropriate enquiries, keep you informed, and tell you the outcome without undue delay.

You have the right to complain to the Information Commission which will generally expect that you have raised your concerns with us first. You can contact them at: https://ico.org.uk/make-a-complaint/ or by telephone on 0303 123 1113.

Changes to this privacy policy

This privacy policy was first published on 24 May 2018 and was last updated on 19 June 2026.

We may update this privacy policy from time to time. When we do, we will publish the updated version on our website.

If we make any significant changes to how we use your personal data, we will take appropriate steps to bring those changes to your attention.

Updating your personal data

We take reasonable steps to ensure your personal data remains accurate and up to date. Please tell us if any personal data you have provided to us changes, such as your name, address, telephone number, or email address. You can do this using the details in the ‘How to contact us’ section below.

How to contact us

Please contact us by post, email or telephone if you have any questions about this privacy policy or the personal data we hold about you. You can also contact us if you wish to exercise a right under data protection law or to make a complaint.

Our contact details are shown below:

Data Privacy Manager: Mr Mark Lister

Address: Belgrave House, 2 Winner Street, Paignton, Devon, TQ3 3BJ

Email: mark@listerlangley.co.uk or info@listerlangley.co.uk

Telephone: 01803 896820

Do you need extra help?

If you would like this policy in another format (for example audio, large print, braille) please contact us using the details in the ‘How to contact us’ section above.