Skip to content

Privacy & Cookies

Last updated: 16 September 2026

This Privacy Policy applies to the website operated by Red Letter Law Limited (“we”, “us” or “our”). Our Website Terms of Use are published separately.

1. Who is responsible for your personal data

Red Letter Law Limited is the controller of the personal data described in this policy. This means that we decide how and why it is used.

You can contact us about privacy matters at info@redletterlaw.co.uk or by post at the address in section 1 of our Website Terms of Use.

2. Personal data we collect

We may collect and use the following categories of personal data:

  • Identity and contact data, such as your name, job title, organisation, address, telephone number and email address.
  • Enquiry and correspondence data, such as the information you give us when you contact us, request information or communicate with us.
  • Technical and usage data, such as your IP address, device and browser information, pages visited, dates and times of access, and information generated through cookies and similar technologies.
  • Marketing preferences, including your preferences about receiving communications from us.

Please do not send confidential, special-category or other sensitive personal data through the website unless and until we have agreed a secure means of doing so. If you instruct us, additional privacy information will be provided in connection with our legal services.

3. How and why we use your personal data

We use personal data only where the law allows us to do so. Depending on the circumstances, we may use it:

  • to respond to your enquiry, request or communication;
  • to consider whether we can act for you and, where appropriate, to take steps at your request before entering into an engagement;
  • to administer and improve our website, services and communications;
  • to protect the security and integrity of our website and systems, and to prevent or investigate fraud, misuse or other unlawful activity;
  • to comply with legal, regulatory, professional and record-keeping obligations; and
  • to send marketing communications where we are permitted to do so.

Our legal bases for this processing are, as applicable: that processing is necessary for our legitimate interests in operating, protecting and improving our business and services; to take steps at your request before entering into a contract or to perform a contract; to comply with legal obligations; and, where required, your consent. You may withdraw consent at any time, without affecting the lawfulness of processing before its withdrawal.

4. Marketing

We may send you information about our services only where permitted by law. You can opt out of marketing emails at any time by using the unsubscribe link in the email or contacting us at info@redletterlaw.co.uk. We will continue to send communications that are necessary for a service you have requested or for another non-marketing purpose.

5. Sharing personal data

We may share personal data with carefully selected service providers that support our website, IT, communications, administration or professional services. They may process personal data only on our instructions and subject to appropriate confidentiality and security obligations.

We may also disclose personal data where required or permitted by law, to our professional advisers and insurers, to regulators or law-enforcement authorities, or in connection with a business restructuring, transfer or acquisition.

We do not sell personal data.

6. International transfers

Where personal data is transferred outside the UK, we will ensure that an appropriate safeguard is in place, such as an adequacy regulation or a contract containing approved data-protection safeguards, unless the law permits otherwise.

7. Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, regulatory, professional, accounting and reporting requirements. We determine retention periods by reference to the nature of the data, the purpose for which it is used, any applicable limitation period and our legal or regulatory obligations.

If an enquiry does not result in an engagement, we will normally retain the associated correspondence for no more than 12 months, unless a longer period is necessary for legal, regulatory, professional or dispute-resolution purposes.

8. Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorised disclosure or access. However, no transmission of information over the internet is completely secure. You should take care when sending information electronically.

9. Your rights

Subject to legal conditions and exemptions, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of your personal data;
  • object to, or request restriction of, certain processing;
  • request transfer of personal data to you or another organisation in certain circumstances; and
  • withdraw consent where we rely on consent.

To exercise a right, please contact info@redletterlaw.co.uk. We may need to verify your identity before acting on a request.

You also have the right to complain to the Information Commissioner’s Office. Information about making a complaint is available at ico.org.uk/make-a-complaint.

10. Cookies and similar technologies

A cookie is a small text file stored on your device when you visit a website. Similar technologies include web storage, pixels and scripts that read information from your device.

This website uses only cookies that are strictly necessary for it to work. Strictly necessary cookies may be used without consent where they are essential to provide a service you request or to operate the website. We do not use analytics, advertising or personalisation cookies or similar technologies, and the website does not load tracking or other content from third parties.

Visitors to the public pages of this website, including visitors who use our contact form, do not receive any cookies. Authentication cookies are set only for authorised administrators who log in to manage the website, and are strictly necessary for that purpose. Because we do not place any non-essential cookies, the website does not display a cookie banner.

If we introduce non-essential cookies or similar technologies in future, we will ask for your consent before placing them, provide cookie controls that let you accept, reject or change your preferences, and update this policy to identify each one, its provider, purpose and duration. Rejecting non-essential cookies will not prevent you from using the website’s core functions.

You can also control cookies through your browser settings, although doing so may affect website functionality.

11. Changes to this policy

We may update this policy from time to time. Any revised version will be posted on this page with the revised “Last updated” date.