Privacy Notice

1.1 Moor Edge Law Limited (“we”, “us” or “our”) is committed to protecting personal data and respecting privacy. This notice explains how we collect, use, disclose, retain and protect personal data when you enquire about, receive or are otherwise connected with our legal services.

1.2 We process personal data in accordance with applicable UK data protection law, including the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 and the Data (Use and Access) Act 2025, in each case as amended or replaced from time to time.

1.3 This notice applies to prospective, current and former clients and, where relevant, to beneficiaries, attorneys, deputies, trustees, executors, witnesses, counterparties, family members, representatives and other individuals whose personal data we process in connection with a legal matter.

2.1 Moor Edge Law Limited is the controller of the personal data described in this notice unless we tell you otherwise.

2.2 Our registered or principal office is 3 Hawksworth Street, Ilkley, LS29 9DU. You may contact us by telephone at 07989 527041 or by email at hello@mooredge.law.

2.3 Our Data Protection Lead is Jo Tindall, who may be contacted at jo.tindall@mooredge.law or by writing to the address above.

3.1 Depending on the nature of your matter and our relationship with you, we may collect identification and contact information, including your name, address, previous addresses, date of birth, telephone number, email address, nationality, residency status, occupation and signature.

3.2 We may collect identity verification and due diligence information, including copies of passports, driving licences and other identification documents, proof of address, source of funds and source of wealth information, tax information, sanctions and politically exposed person screening results and the outcome of fraud-prevention checks.

3.3 We may collect financial information, including bank details, payment information, assets, liabilities, income, expenditure, transaction details and information needed to administer client money, issue invoices and recover sums due.

3.4 We may collect matter-related information, including instructions, correspondence, contracts, deeds, court documents, evidence, property information, company information, family information, testamentary documents, medical records and any other information relevant to the legal services we provide.

3.5 Where it is necessary and lawful, we may process special category personal data, including health information, biometric data used for identification, racial or ethnic origin, religious or philosophical beliefs, trade union membership, sex life or sexual orientation information, and genetic data.

3.6 Where it is necessary and permitted by law, we may process personal data relating to criminal allegations, investigations, proceedings, convictions or offences.

3.7 If you use our website or digital services, we may collect technical and usage information, including your internet protocol address, device and browser information and website activity. Further information is provided in section 16.

3.8 We treat all information received from clients as confidential and will only disclose information where authorised by you, required by law, required by a regulatory obligation, or necessary for the provision of legal services. Our professional duty of confidentiality operates alongside our obligations under UK data protection legislation.

4.1 We may collect personal data directly from you when you contact us, complete forms, provide instructions, verify your identity, use our website, make a payment, attend a meeting or otherwise communicate with us.

4.2 We may also obtain personal data from people and organisations connected with your matter, including family members, representatives, employers, professional advisers, counterparties, witnesses, beneficiaries and organisations that you ask us to contact.

4.3 Other sources may include courts, tribunals, regulators, law enforcement bodies, government departments, HM Land Registry, Companies House, probate records and other public registers or publicly available sources.

4.4 We may obtain information from banks, insurers, estate agents, medical professionals, experts, barristers, identity verification providers, credit reference agencies, fraud-prevention services, anti-money laundering providers and sanctions screening providers.

5.1 We use personal data to consider whether we can act, carry out conflict and risk checks, verify identity, assess legal needs, provide advice and representation, manage legal matters, communicate with relevant parties and complete transactions, claims, proceedings or other work for which we are instructed.

5.2 We use personal data to meet legal, professional and regulatory obligations, including obligations relating to anti-money laundering, counter-terrorist financing, sanctions, fraud prevention, tax, court orders, professional conduct, complaints handling, record keeping and cooperation with regulators and law enforcement bodies.

5.3 We use personal data to manage our business, including opening and administering files, recording time, billing, collecting debts, managing client money, undertaking audits and file reviews, obtaining insurance, handling claims, managing risk, maintaining security, improving services and planning our operations.

5.4 We may use contact information to provide legal updates, invitations or information about our services where the law permits. You may opt out of direct marketing at any time by using the unsubscribe facility in a message or contacting us at jo.tindall@mooredge.law.

6.1 We will rely on one or more lawful bases according to the circumstances. Processing may be necessary to enter into or perform a contract with you, to comply with a legal obligation, or for our legitimate interests or those of another person where those interests are not overridden by your rights and freedoms.

6.2 Our legitimate interests may include providing and administering legal services, managing risk and conflicts, preventing fraud, securing our systems, improving services, recovering debts, defending claims and operating our business efficiently and professionally.

6.3 We may rely on consent where the law requires it. If we rely on consent, you may withdraw it at any time, although withdrawal will not affect processing that took place before consent was withdrawn.

6.4 Where we process special category personal data, we will also rely on an appropriate condition, which may include the establishment, exercise or defence of legal claims, the provision of legal advice, substantial public interest, employment or social protection law, vital interests, information made public by you, health or social care purposes, or explicit consent where appropriate.

6.5 Where we process criminal offence data, we will do so only where authorised by law and, where required, in accordance with an appropriate policy document.

7.1 Where permitted by the Data (Use and Access) Act 2025 and applicable data protection law, we may rely on a recognised legitimate interest for specified processing, including certain processing needed to safeguard vulnerable individuals, respond to requests made in the public interest, or prevent or detect crime. We will consider and document whether the relevant statutory conditions are met.

8.1 We do not generally make decisions about clients or prospective clients solely by automated means where the decision produces legal or similarly significant effects.

8.2 We may use technology to assist identity verification, fraud detection, sanctions screening, document review or risk assessment, but such tools will ordinarily support rather than replace human judgment.

8.3 If we undertake solely automated decision-making that is subject to statutory safeguards, we will provide appropriate information about the processing and explain any applicable rights to obtain human intervention, make representations and contest the decision.

9.1 We may share personal data where necessary and lawful with courts, tribunals, counterparties, witnesses, barristers, experts, mediators, process servers, search providers, medical professionals, estate agents and other persons involved in your matter.

9.2 We may share personal data with regulators, ombudsmen, law enforcement agencies, government departments, tax authorities, HM Land Registry, Companies House and other public bodies where required or permitted by law.

9.3 We may share personal data with banks, payment providers, insurers, auditors, accountants, professional advisers, identity and anti-money laundering providers, sanctions screening providers, document storage providers, IT providers, cloud service providers and other suppliers that support our operations.

9.4 We may also disclose personal data in connection with a merger, acquisition, reorganisation or transfer of all or part of our practice, subject to appropriate confidentiality and data protection safeguards.

9.5 Legal professional privilege and duties of confidentiality may affect whether and how information is disclosed. We will not disclose personal data unless there is a lawful basis and the disclosure is necessary and proportionate in the circumstances.

10.1 Some recipients or service providers may process personal data outside the United Kingdom. Where they do, we will use an applicable lawful transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another safeguard permitted by law.

10.2 You may contact jo.tindall@mooredge.law for further information about the safeguards used for a relevant transfer, subject to any legal or confidentiality restrictions.

11.1 We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet legal, regulatory, insurance, accounting and professional requirements.

11.2 The retention period will depend on the type of matter, limitation periods, the possibility of a claim, the age or capacity of relevant individuals, regulatory requirements and whether original documents or continuing obligations are involved.

11.3 When personal data is no longer required, we will securely delete, destroy or anonymise it. Further information about relevant retention periods is available from jo.tindall@mooredge.law.

12.1 We use appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, alteration or damage.

12.2 Our measures may include access controls, authentication, encryption where appropriate, secure document management, backups, staff training, supplier due diligence, cybersecurity monitoring and incident response procedures.

12.3 No method of transmission or storage is completely secure. If you become aware of a suspected security issue affecting information connected with your matter, please contact us promptly at jo.tindall@mooredge.law.

13.1 Depending on the circumstances, you may have the right to be informed about processing and to request access to, rectification of or erasure of your personal data. You may also have the right to restrict processing, object to processing, receive eligible data in a portable format, withdraw consent and exercise rights relating to automated decision-making.

13.2 These rights are not absolute. Legal professional privilege, duties of confidentiality, crime and taxation provisions, regulatory requirements, legal proceedings and other statutory exemptions may limit the information we can provide or the action we can take.

13.3 To exercise a right, please contact jo.tindall@mooredge.law. We may ask for information needed to confirm your identity and understand your request.

14.1 You may request confirmation of whether we process your personal data and, where applicable, a copy of that data and related information.

14.2 We will respond within the period required by law and will carry out searches that are reasonable and proportionate. We will tell you if we need clarification, additional identification, an extension of time or if a lawful exemption applies.

14.3 A request will usually be handled without charge, although a reasonable fee may be permitted by law in limited circumstances.

15.1 If you have a concern about our use of personal data, please contact our Data Protection Officer or Data Protection Lead at jo.tindall@mooredge.law, by telephone at 07989 527041, or by writing to 3 Hawksworth Street, Ilkley, LS29 9DU.

15.2 We will acknowledge, investigate and respond to your complaint in accordance with our Data Protection Complaints Procedure and applicable law. We may ask for further information in order to understand and resolve the concern.

15.3 If you remain dissatisfied, you may complain to the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, by telephone on 0303 123 1113, or through its website at https://ico.org.uk. You may contact the Information Commissioner’s Office at any time, although it will commonly expect you to have raised the matter with us first.

16.1 This website does not use cookies and stores nothing on your device. We use Fathom Analytics to understand how the site is used, which is built to measure traffic without identifying visitors.

16.2 When you view a page, Fathom processes your IP address and browser user-agent to produce an anonymised identifier. These are combined with a salt that changes daily and converted into a one-way hash, so the identifier cannot be traced back to you, and your visits on one day cannot be linked to your visits on another. The salts are deleted after approximately 48 hours.

16.3 We use these statistics only in aggregate, to see which pages are read and where visitors come from. We cannot identify you from them and we do not use them to build a profile of you. Because nothing is stored on your device, this website does not ask you to accept cookies.

16.4 Where consent is required, we will not place non-essential cookies or send electronic direct marketing unless valid consent or another lawful permission applies.

17.1 We may update this notice to reflect changes in law, regulatory guidance, technology or our services and operations.

17.2 The current version will be available on our website or on request. If a change materially affects how we use personal data, we will take reasonable steps to bring it to the attention of affected individuals.