1. Who we are.

    Baker Street Legal Limited are a limited company registered in England and Wales under company number 16143292, with its registered office address situated at 3rd Floor Eastgate. Castle Street, Castlefield, Manchester, M3 4LZ (“BSL”).

    BSL are authorised and regulated by the Solicitors Regulation Authority, SRA number 8011543.

    BSL are registered with the Information Commissions Office (“ICO”) with the registration number ZB934335.

  2. Purpose of this privacy statement

    BSL are committed to protecting your personal data and privacy and this statement sets out how the law protects you and your rights in relation to your personal data. We process personal data in accordance with the Data Protection Act 2018 (“DPA”) and the Solicitors’ Code of Conduct.

    This privacy statement will inform you how we process your personal data and who we may share your personal data with. It relates to all personal data you may provide us with whether that be over the telephone, via email, via third parties, via the Courts or via our website www.bakerstreetlegal.co.uk (“the Website”).

    We do not knowingly collect data relating to children.

  3. Data Controller

    BSL are the Data Controller and become responsible for your personal data when it is provided to us by you, an Insolvency Practitioner, a financial services provider, another firm of solicitors or any other third-party provider authorised to provide us with your personal data.

    We have appointed a Data Protection Officer (“DPO”) who is responsible for BSL’s compliance with the Data Protection Act 2018. If you have any questions about this privacy statement, including any requests to exercise your legal rights, please contact the DPO@bakerstreetlegal.co.uk.

    You can also contact the DPO by writing to them at the address set out above.

    BSL request that if you have any concerns as to how we are processing your personal data you contact the DPO by emailing     DPO@bakerstreetlegal.co.uk or writing to us at the address above in the first instance.

    If you still have concerns you can contact the ICO via their website     www.ico.org.uk. The ICO, is the UK supervisory authority for data protection issues (www.ico.org.uk) and you can contact them regarding any concerns you may have regarding the processing of your personal data.

  4. The data we collect about you

    Personal data, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

    BSL collect, process and retain personal data about you to enable us to provide legal advice and conduct legal proceedings and transactions on behalf of our clients.

    BSL may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
    • Personal Data such as your name, title, marital status, title, date of birth, gender and if you have any relationship to a member of our staff.
    • Contact Information such as your postal address, previous addresses, email address and telephone numbers.
    • Financial Information such as your bank account details, salary details, mortgage details, national insurance number, income and expenditure and any other relevant information about your finances.
    • Identification information such as copies of your passport or driving licence and proof of address information.
    • Technical information such as your internet protocol (IP) address, usage data, or other information relating to your visits to our Website.
    • Communications Information such as your preferences in relation to how we communicate with you.
    BSL do not generally collect any sensitive personal data (Special Categories of Personal Data) about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership.)

    However, we may on occasion need to ask you information about your health, which may affect your ability to manage your finances or communicate with us and genetic and biometric data. We will expressly ask your permission before we record and hold this information.

  5. Your duty to inform us of changes to your personal data

    It is important that we hold up to date, accurate personal information about you, as it will help us to deal with your legal matter efficiently. Please inform us if your personal data changes during your relationship with us.

    If we are unable to contact you, we may have to use on-line tracing tools and/or third party tracing agents to obtain up to date personal data.

  6. Change of purpose

    We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

    If we need to use your personal data for an unrelated purpose we will only do so if there is a legal basis which allows us to do so. If this is the case, we will notify you and we will explain the legal basis upon which we rely.

    Please note that we may process your personal data without your knowledge or consent where this is required or permitted by law but we will always do so in compliance with the Data Protection Act 2018.

  7. How is your personal data collected?

    Initially we are provided with your personal data by you or by an Insolvency Practitioner or other professional services provider, who has approached our firm for legal advice. The Insolvency Practitioner or other professional services provider is the Data Controller of your personal data and we also become a Data Controller of your personal data when they pass your details to us.

    Directly from you – We may also receive some personal data from you via:
    • Our Website;
    • In hard copy by post;
    • Over the telephone;
    • Via a telephone recording;
    • During the course of our dealings with you;
    • Any of our social media accounts;
    • When you register with us for newsletters, email updates, or other services;
    • When you contact us with queries;
    • When you complete surveys for research or quality purposes; or
    • When you attend in person at one of our offices.
    From Third Parties – We may also collect your personal data from other third parties, for example:
    • Insolvency Practitioners;
    • Selected introducers;
    • Other clients or their representatives;
    • Other parties relating to the legal matter;
    • Other professional service providers;
    • Technical data from analytics providers such as Google.
    Public Information – We may also collect publicly available information about you, in connection with anti-money laundering, directly or indirectly, through electronic data sources.

  8. How we use your personal data

    We will only use your personal data when we have a legitimate reason to do so. Most commonly, we will use your personal data in the following circumstances:
    • For the purpose of providing legal services to you.
    • To carry out conflict checks to ensure we are able to provide legal services to you.
    • For fraud prevention, anti-money laundering and for the prevention or detection of crime.
    • To conduct identity checks.
    • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
    • Where we need to comply with a legal or regulatory requirements and obligations.
    • To deal with queries and complaints.
    • To monitor quality of our services through audit of cases.
    Promotional Communications

    We may use your personal data to send you information via email, text or post, regarding other services we offer or legal developments that may interest you but only when you have provided us with permission to do so.

    You have a right to opt out of receiving promotional communications at any time. Please email DPO@bakerstreetlegal.co.uk with your request.

    Call Recording

    Calls may be recorded for training and monitoring purposes and may be shared with our professional advisors and/or regulators.

  9. Sharing Your Personal Data with Third Parties

    We may have to share your personal data to enable us to provide the legal services to you. We shall only share your personal data with the following third parties, insofar as we are permitted to do so.
    • Third parties such as the Courts, barristers, defendant solicitors, financial experts.
    • Other third parties which may be involved in your matter, such as banks, lenders, HMRC.
    • The Financial Ombudsman Service, Financial Services Compensation Scheme or other similar ombudsman services.
    • An insurance company which is involved in your claim, such as a provider of legal expenses insurance and other third-party funders.
    • The person or organisation which referred you to us, such as an Insolvency Practitioner or other professional services providers.
    • A third-party company who we may use to outsource some of our administration tasks to; such as outsourced postal company, legal-costs draftsperson, typing services.
    • External auditors, such as the Solicitors Regulation Authority, the Law Society, Lexcel, financial auditors.
    • Online I.D. checking companies, who we may use to verify your identity for anti-money laundering purposes.
    • The Legal Aid Agency if you are publicly funded.
    • Third-parties you may authorise to act on your behalf.
    We conduct due diligence on all third-party providers and will only work with them if we are satisfied that they take the appropriate measures to protect your personal data. We also have contractual obligations in place to ensure they only use your personal data to provide services to you and us.

  10. International transfers

    We do not transfer your personal data outside the European Economic Area (“EEA”).

  11. Data security

    We have appropriate security measures in place to prevent your personal data from being accidentally lost, used, altered, disclosed or accessed in an unauthorised way. We also conduct regular testing in relation to the security measures and will update it if appropriate to do so to protect your data.

    In addition, only those employees, agents, contractors and other third parties who have a business need to know basis will have access to your data and they are required to only process your personal data on our strict instructions.

    We also have policies and procedures in place in the event there is any suspected personal data breach. In the unlikely event of this happening we will deal with this in accordance with our policies and procedures and the relevant laws in place at the time.

  12. Data Retention – How long we keep your personal data for

    We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

    We must keep basic information about our Clients (including contact, identity, and financial information) for a period of six years after they cease being clients for legal and regulatory purposes.

    In certain circumstances you can ask us to delete your data: see Request erasure below for further information.

    In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without agreement from you.

  13. Your legal rights

    You have certain rights under the Data Protection Act 2018 in relation to your personal data as more particularly set out below.
    • Request access to your personal data – This enables you to receive a copy of the personal data we hold about you.
    • Request correction of your personal data – This enables you to have any incomplete or inaccurate data we hold about you corrected.
    • Request erasure of your personal data – This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. Please note we may not always be able to comply with this request but if not, we shall inform you of the specific legal reasons at the time of request.
    • Object to processing of your personal data – Where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes.
    • Request restriction of processing your personal data – This enables you to ask us to suspend the processing of your personal data.
    • Request transfer of your personal data to a third party We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.
    • Right to withdraw marketing consent – You can do this at any time by emailing DPO@bakerstreetlegal.co.uk.
    • Right to request a manual decision-making process where an automated decision-making process has been used.
    If you wish to exercise any of the rights set out above, please contact us at DPO@bakerstreetlegal.co.uk

    In the event you make a request to exercise any of the above rights we will ask you to verify your identity and may as part of that process ask you to complete a Data Subject Access Request Form. This is an important security measure to ensure we do not disclose your personal data to any person other than you or a third party acting on your behalf. We may also contact you to request further information in relation to your request.

    No fee for Request for Access to Personal Data

    In most circumstances, you will not have to pay a fee to access your personal data (or to exercise any of the other rights set out above). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. We also reserve the right to refuse to comply with your request in such circumstances.

    Time limit to respond

    We will use all reasonable endeavours to comply with legitimate requests within one month of receipt. On occasion, it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you that we cannot comply with your request within a month and keep you updated with any timescales.

  14. Third-party links

    The Website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and we would encourage you if you leave our Website to read the privacy policy of any other websites you visit.

    Cookies

    You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of the Website(s) may become inaccessible or not function properly. For more information about the cookies we use, please refer to our Cookie Policy.

    Changes to the privacy statement

    This privacy policy was created on the XXXX August 2025 and is the first privacy policy of BSL.

    We may change this privacy policy to reflect changes in how we process your personal data or to reflect any future changes in the law. Please check this policy regularly for any updates. If there are any key updates that you need to be aware of we will inform at the time.