Privacy Policy
Last Updated: October 2023
At Umbra Legal, we are committed to protecting the privacy and security of our clients' and visitors' personal data. This policy outlines how we collect, use, and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
In the course of providing commercial legal services, contract drafting, and document reviews, we may collect the following types of information:
- Identity Data: Name, job title, and professional affiliation.
- Contact Data: Email address, telephone numbers, and registered business address (61 Kennington Oval, London).
- Technical Data: IP address, browser type, and usage patterns on our website.
- Client Matter Data: Sensitive commercial information contained within legal documents provided for review or drafting.
2. How We Use Your Data
Umbra Legal processes your data only when we have a lawful basis to do so. This includes:
- Contractual Necessity: To fulfill our legal services and negotiate commercial contracts on your behalf.
- Legal Obligation: To comply with professional regulations and anti-money laundering (AML) requirements.
- Legitimate Interests: To improve our site performance and provide you with relevant legal insights.
3. Data Security and Retention
We implement rigid security protocols to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Access to your commercial documents is strictly limited to those professionals who have a business "need to know."
Note: We retain your data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
4. Your Legal Rights
Under data protection laws, you have rights including:
Right of Access
You have the right to request copies of your personal data from our records.
Right to Erasure
Commonly known as the 'right to be forgotten', allowing you to ask for data deletion.
5. Contacting Our Data Controller
If you have any questions about this Privacy Policy or our treatment of your personal data, please contact us at: