Last updated: May 2026
1. Introduction
Mir & Sons Solicitors Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website, contact us, or engage us for legal services.
We are registered with the Information Commissioner’s Office (ICO) as a data controller. Our ICO Registration Number is: ZA127544
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2.Who We Are
Data Controller: Hina Mir
Mir & Sons Solicitors Ltd
Address 12 Longleat Way, Feltham, Middlesex, TW14 8JW, England
Tel: 020 8819 7075
Email: info@mandssolicitors.com
www.mandssolicitors.com
3. What Personal Data We Collect
We may collect and process the following types of personal data about you:
- Identity Data: First name, last name, title, date of birth, gender, marital status, nationality
- Contact Data: Home address, email address, telephone numbers
- Financial Data: Bank account details and billing information where relevant to your matter
- Transaction Data: Details of the legal services you have instructed us to provide
- Technical Data: IP address, browser type and version, time zone setting, and other technology used to access our website
- Usage Data: Information about how you use our website and services
- Special Category Data — in some legal matters, we may need to process sensitive data such as health information, criminal records, or immigration status. We will only do so where strictly necessary and with appropriate safeguards in place
- Anti-Money Laundering (AML) Data — proof of identity and address documents as required by law
4. How We Collect Your Data
We collect personal data in the following ways:
- Direct interactions: when you complete a contact form on our website, instruct us, sign our terms of business, telephone us, or correspond with us by email or post
- Automated technologies: when you browse our website, we may automatically collect Technical and Usage Data via cookies and similar technologies
- Third parties: we may receive data from courts, regulatory bodies, opposing solicitors, estate agents, medical professionals, and other parties involved in your legal matter
5. How We Use Your Personal Data
We will only use your personal data where we have a lawful basis to do so:
| Purpose | Lawful Basis |
|---|---|
| Providing legal services you have instructed us on | Performance of a contract |
| Complying with legal and regulatory obligations (e.g. AML, SRA) | Legal obligation |
| Protecting your vital interests or those of a third party | Vital interests |
| Responding to enquiries and communications | Legitimate interests |
| Improving our website and services | Legitimate interests |
| Sending you relevant legal updates or marketing communications (where opted in) | Consent |
| Maintaining accounting and business records | Legal obligation / Legitimate interests |
We will never sell your personal data to third parties or use it for any purpose unrelated to your legal matter or your express consent.
6. Who We Share Your Data With
In the course of providing legal services, we may share your personal data with:
- Courts and tribunals
- Barristers and counsel
- Expert witnesses
- The other party’s solicitors or conveyancers
- Estate agents and financial advisors where relevant to your matter
- HM Land Registry, HMRC, Companies House, and other government bodies
- Regulatory bodies such as the SRA or ICO where required by law
- IT and cloud service providers who process data on our behalf under strict data processing agreements
All third parties with whom we share your data are required to handle it securely and in accordance with UK GDPR. We do not permit them to use your data for their own purposes.
7. International Data Transfers
We do not routinely transfer your personal data outside the United Kingdom. If a transfer outside the UK is ever required, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements, including UK International Data Transfer Agreements (IDTAs) where applicable.
8. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, or accounting requirements:
- Client files — retained for a minimum of 6 years after the conclusion of your matter, or longer where required by law or professional regulation
- Accounting records — retained for 6 years in line with HMRC requirements
- Marketing data — retained until you withdraw consent or opt out
- Website enquiry data — retained for up to 2 years if no instruction follows
After the applicable retention period, your data is securely deleted or anonymised.
9. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right to be informed — to know how and why we use your data
- Right of access — to request a copy of the personal data we hold about you (a Subject Access Request)
- Right to rectification — to request correction of inaccurate or incomplete data
- Right to erasure — to request deletion of your data in certain circumstances
- Right to restrict processing — to ask us to limit how we use your data in certain circumstances
- Right to data portability — to receive your data in a structured, machine-readable format where processing is based on consent or contract
- Right to object — to object to processing based on legitimate interests, or to direct marketing at any time
- Rights related to automated decision-making — to not be subject to solely automated decisions that significantly affect you
To exercise any of these rights, please contact us at info@mandssolicitors.com. We will respond to all valid requests within one calendar month. There is no charge for exercising your rights unless a request is manifestly unfounded or excessive.
10. Withdrawing Consent
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of any processing carried out before the withdrawal. To withdraw consent, please contact us at info@mandssolicitors.com or click “unsubscribe” in any marketing email.
11. Telephone Calls
Telephone calls to and from our offices may be recorded for training, quality monitoring, and compliance purposes. Recordings are stored securely and deleted in accordance with our data retention schedule.
12. Cookies
Our website uses cookies to improve your browsing experience and to analyse site traffic. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.
13. Website Analytics
We use website analytics tools to monitor and improve the performance of our website. Data collected through analytics is aggregated and anonymised. No special category or sensitive personal data is collected through website monitoring.
14. Data Security
We have implemented appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:
- Secure encrypted email and file transfer
- Password-protected case management systems
- Access controls limiting data to authorised staff only
- Regular staff training on data protection
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform you without undue delay where required.
15. Your Right to Complain to the ICO
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Telephone: 0303 123 1113
Website: www.ico.org.uk
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would appreciate the opportunity to address your concerns before you contact the ICO, so please do get in touch with us first.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, regulation, or our business practices. The date at the top of this page will always show when it was last updated. We encourage you to review this page periodically.
17. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:
Mir & Sons Solicitors Ltd
12 Longleat Way, Feltham
Middlesex, TW14 8JW, England
020 8819 7075
info@mandssolicitors.com
www.mandssolicitors.com