Privacy Policy

We are Neate & Pugh Solicitors Limited, authorised and regulated by the Solicitors Regulation Authority number 568935.

This privacy policy sets out how Neate & Pugh uses and protects personal information (other than employee information which is covered by a separate internal policy). We are committed to ensuring that privacy is protected. We will only use personal data in accordance with this privacy policy and as permitted or required by law.

We will review this policy. Any updated versions will be published on our website or otherwise notified to you. This policy is effective from 28 August 2026.

What we collect

We may collect the following personal data:

  1. Clients (and our key contacts) – name and contact details, banking & billing information, detail of the case(s), results of credit checking.
  2. Suppliers – name and contact details, details about the services provided by suppliers, banking & billing information, results of credit checking.
  3. Marketing contacts – name and contact details.
  4. Job applicants – name, contact details, information relating to an application, CV information, references we receive.
  5. Information we obtain in the course of providing services.
  6. Data gathered from visits to our website.
  7. Information provided to us by third parties.
  8. Personal information available on public sources.

Special category and criminal offence data

As part of providing legal services, we may process special category personal data (such as information relating to health, racial or ethnic origin, religious beliefs or other sensitive personal information) where this is necessary for the establishment, exercise or defence of legal claims, to comply with our legal or regulatory obligations, or where another condition under the UK GDPR and the Data Protection Act 2018 applies.

We may also process information relating to criminal convictions and offences where this is necessary to provide legal services, comply with legal or regulatory obligations, carry out anti-money laundering and fraud prevention checks, or establish, exercise or defend legal claims. We will only process this information where we have a lawful basis and an appropriate legal condition for doing so.

Justification for processing personal data

We process your personal information where:

  1. You have given consent.
  2. We need to do so in connection with our contract with our client (mainly for the provision of services).
  3. The law requires or allows us to do so.
  4. It is for our legitimate interests where there is not an adverse impact on your privacy.

Use of personal data

We will use personal data in general terms to provide legal services, manage our relationships with clients and suppliers, for administration purposes and to improve the services we offer.

In addition, we may process personal data:

  1. To identify clients and their owners or directors.
  2. To identify fraud or suspicious activity or anti-money laundering purposes.
  3. To cross-check against sanctions lists.
  4. For credit checking.
  5. For legal or regulatory purposes.
  6. For any purpose consented to by you.

We may share personal data with others under certain circumstances. Examples may include:

  1. To third-party service providers (which may be based overseas) associated with instructing them to provide services or requesting a cost estimate (such as other law firms, barristers and their clerks, translators, and credit checking and debt collection services).
  2. In connection with any merger, company asset sale, financing, or acquisition of all or a portion of our business by another company.
  3. To the extent that we are required to do so by law, the courts, our regulator the SRA, the Legal Ombudsman, or our insurers.
  4. In connection with any legal proceedings or prospective legal proceedings.
  5. In order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).

How long we keep your personal information

We will only retain your personal information for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting or reporting requirements.

When determining how long to retain personal information, we consider a number of factors, including:

  1. Whether the information is still required for the purpose for which it was collected.
  2. Our professional and regulatory obligations, including guidance and requirements issued by the Solicitors Regulation Authority (SRA). Unless there is a legal, regulatory or business reason to retain a file for longer, client files are archived 12 months after a matter is closed and destroyed 7 years after closure.
  3. Any actual or potential legal claims, disputes or litigation.
  4. The requirements of our professional indemnity insurers.
  5. The nature and sensitivity of the personal information, including whether it contains special category or criminal offence data.
  6. Any statutory or other legal obligations requiring us to retain the information for a specified period.

Security

We are committed to ensuring that your information is secure. We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.

Cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. We may retain information derived from cookies following the date on which the information was created. Our web site may use session cookies to allow you to carry information across pages of our site and avoid having to re-enter information. We may also use technology to track the patterns of behaviour of visitors to our site. You have the ability to accept or decline cookies by modifying the settings in your browser.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. Please be aware, you may not be able to use all the interactive features of our site if cookies are disabled. To find out how to enable/disable cookies see https://www.allaboutcookies.org

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links (including widgets) to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Marketing

You may instruct us not to process your personal data for marketing purposes by email at any time. In practice, we will always provide you with an opportunity to opt-out of the use of your personal data for marketing purposes by email.

Your rights

Under the General Data Protection Regulation (UK GDPR) your rights include the following (subject to certain restrictions as permitted by law):

  1. The right to be informed (including the right to request a copy) of any information we hold concerning you in a clear electronic format (except where disclosing such information would disclose information about another person or certain exceptions apply).
  2. The right of access.
  3. The right to rectification.
  4. The right to erasure.
  5. The right to restrict processing.
  6. The right to data portability.
  7. The right to object.
  8. Rights in relation to automated decision-making and profiling.

If you wish to exercise any of these rights, please contact us on info@neateandpugh.com. We will respond to your request in accordance with applicable data protection legislation.

Data protection complaints procedure

If you wish to enquire or complain about the way we handle your data, please contact the firm by emailing info@neateandpugh.com.

You also have the right to complain to the ICO (ico.org.uk) if you feel there is a problem with the way we are handling your data.

We handle subject access requests in accordance with the UK GDPR. If you would like a copy of the information held on you or you wish to exercise any other rights, please write to us via email – info@neateandpugh.com.

If you request that we delete personal information about you, please be aware that we may need to retain certain information for justifiable legal or record keeping purposes and/or for ongoing business matters.

Neate and Pugh Solicitors Limited

Tel: 0121 321 3333

Email: info@neateandpugh.com

This site uses cookies for analytics and to improve your experience. By clicking Accept, you consent to our use of cookies. Learn more in our privacy policy.