Privacy Policy
Broadfield Website – PrivacyNotice
Your privacy is important to us. This Privacy Notice, together with our website terms of use and any other documents referred to in it, sets out the types of personal information we collect, how we collect and process that information, who we share it with in relation to the services we provide and certain rights and options that you have in this respect.
Broadfield Law (UK) LLP (referred to in the agreement as “Broadfield”) owns and operates this site: https://broadfieldlaw.com/
Who is responsible for your personal data?
Broadfield is responsible for your personal data. Broadfield is an LLP incorporated in England & Wales, registered number OC320798
For the purposes of applicable data protection law (in particular, the General Data Protection Regulation (EU) 2016/679 (the “GDPR”)), your data will be controlled by Broadfield or affiliate or subsidiary undertaking that you have instructed or that is providing services to you or communicating to you and each such entity is regarded as an independent controller of your personal data. This Notice applies to all such entities.
Useful Contacts
Questions, comments and requests regarding this Privacy Notice are welcomed and should be addressed to the Broadfield Law Privacy Team, dataprotectionofficer@broadfieldlaw.com, or send a letter to Broadfield Law Privacy Team, One Bartholomew Close, London, EC1A 7BL.
we collect about you
We process personal information for different purposes depending on our relationship with you. To help you understand how your data is used, we have organised our processing activities into the following categories:
| Category of Personal Data | Data types |
|---|---|
| Identity and contact data | your name, your postal address, telephone and mobile numbers, email address and other electronic contact details. |
| Due Diligence & Compliance Data | information collected for client onboarding, Know Your Client (KYC) procedures, anti-money laundering checks, sanctions screening, and conflict of interest checks. This includes identity verification documents (government-issued photo identification), address verification documents (utility bills, bank statements, mortgage statements, leases), photographs, place of birth, nationality, jurisdiction of residency, professional background and business connections (including directorships, memberships, management roles, shareholdings), family member information and relationships, and criminal convictions or related compliance issues obtained directly from clients or through third-party databases and screening services; |
| Contact details: | |
| Matter data: | information relating to the matter on which you instruct us, including the documents, correspondence and instructions relating to your matter. |
| Financial and tax data: | your financial details so far as relevant to your instructions, such as the source of your funds, your bank or building society details, your National Insurance and tax details, your pension arrangements, and information to enable us to undertake credit or other financial checks. |
| Family data: | details of your spouse, partner, dependants or other family members, where relevant to your matter (for example if you instruct us on a family matter or a will). |
| Employment data: | your employment status and details, including salary and benefits, and employment records such as those relating to sickness and attendance, performance, disciplinary, conduct and grievance matters, where relevant to your matter (for example if you instruct us on an employment matter). |
| Immigration data: | your nationality and immigration status and information from related documents, such as your passport or other identification, where relevant to your matter (for example if you instruct us on an immigration matter) |
| Social media and digital data | details of your professional online presence, such as publicly available posts on LinkedIn or other social media. |
| IT and monitoring data: | information about your use of our IT, communication and other systems, and other monitoring information, such as CCTV, access control and system logs. |
| Call and meeting recordings, transcripts and AI-generated content: | audio (and, in video meetings, visual) recordings of calls and meetings you take part in, written transcripts of those calls and meetings, and the summaries, notes, action points, suggested drafts and other outputs generated from them by artificial intelligence (AI) tools. |
| Other identifying information: | other personal details we may need for your matter, such as your eye colour or your parents’ names (for example if you instruct us to incorporate a company). |
| Special category and criminal offence data: | we may represent you and/or your organisation in legal matters that require us to collect and use sensitive personal information relating to you (that is, information about your racial or ethnic origin, political opinions, religious beliefs, trade union activities, physical or mental health, sexual life and sexual orientation or details of criminal offences, or genetic or biometric data). For example, if we represent you in a criminal case, we will collect information about the alleged offences and any related criminal history and/or international sanctions. In some employment representations, such as disputes involving alleged discrimination, information about medical conditions, race, religion and/or sexual orientation may be relevant to the representation. Similarly, representations in tax or social security matters may also require us to collect sensitive personal information, such as if we are advising on whether certain disabilities qualify for social security or tax benefits. Where we process sensitive personal information in the course of these and other similar client services, we do so to assist you and/or your organisation to establish, exercise or defend legal claims or to assist you and/or your organisation in fulfilling the rights and obligations of applicable employment or social security laws |
This personal information is required to enable us to provide our service to you. If you do not provide personal information we ask for, it may delay or prevent us from providing services to you.
How your personal data is collected
We collect most of this information from you or your organisation. However, we may also collect information:
-
from publicly accessible sources, e.g. Companies House, HM Land Registry or publicly available posts in social media;
-
directly from a third party, e.g.: sanctions screening providers and client due diligence providers and from a third party with your consent, e.g.:
-
your bank or building society or another financial institution or advisor;
-
consultants and other professionals we may engage in relation to your matter;
-
your employer and / or trade union, professional body or pension administrators; and
-
your medical and occupational health professionals.
-
-
via our website – we use cookies on our website (for more information on cookies, please see our cookies policy on our website);
-
via our information technology (IT) systems, e.g.:
-
case management, document management and time recording systems; and
-
monitoring of our websites and other technical systems, such as our computer networks and connections, CCTV and access control systems, communications systems and email.
-
-
via call and meeting recording, transcription and AI tools built into or connected to our systems, e.g. video-conferencing, telephony and productivity platforms.
How and why we use your personal data
Under data protection law, we can only use your personal data if we have a proper reason for doing so, e.g.:
-
to comply with our legal and regulatory obligations;
-
for the performance of our contract with you or to take steps at your request before entering into a contract;
-
for our legitimate interests or those of a third party; or
-
where you have given consent.
A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests.
The table below explains what we use (process) your personal data for and our reasons for doing so:
| Purpose of processing | Category of Personal Information | Rea |
|---|---|---|
|
What we use your personal data for To provide legal services to you. |
Identity and verification data; Contact details; Matter data; Financial and tax data. |
Our reasons For the performance of our contract with you or to take steps at your request before entering into a contract. |
| Conducting checks to identify our clients and verify their identity. Screening for financial and other sanctions or embargoes. Other processing necessary to comply with professional, legal and regulatory obligations that apply to our business, e.g. under health and safety regulation or rules issued by our professional regulator, the Solicitors Regulation Authority (SRA). | Identity and verification data; Contact details; Financial and tax data. | To comply with our legal and regulatory obligations. |
| Gathering and providing information required by or relating to audits, enquiries or investigations by regulatory bodies. | Identity and verification data; Contact details; Matter data; Financial and tax data. | To comply with our legal and regulatory obligations. |
| Ensuring business policies are adhered to, e.g. policies covering security and internet use. | IT and monitoring data. | For our legitimate interests or those of a third party, i.e. to make sure we are following our own internal procedures so we can provide a high level of service to you. |
| Operational reasons, such as improving efficiency, training and quality control. | Matter data; IT and monitoring data; Call and meeting recordings, transcripts and AI-generated content. | For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can provide a high level of service to you. |
| Ensuring the confidentiality of commercially sensitive information. | Matter data; IT and monitoring data. | For our legitimate interests or those of a third party, i.e. to protect our intellectual property and other commercially valuable information. To comply with our legal and regulatory obligations. |
| Statistical analysis to help us manage our practice, e.g. in relation to financial performance, client base, work type or other efficiency measures. | Contact details; Matter data; Financial and tax data. | For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can provide a high level of service to you. |
| Preventing unauthorised access and modifications to systems. | IT and monitoring data. | For our legitimate interests or those of a third party, i.e. to prevent and detect criminal activity that could be damaging for us and for you. To comply with our legal and regulatory obligations. |
| Updating and enhancing client records. | Identity and verification data; Contact details; Matter data. | For the performance of our contract with you or to take steps at your request before entering into a contract. To comply with our legal and regulatory obligations. For our legitimate interests or those of a third party, e.g. making sure that we can keep in touch with our clients about existing and new services. |
| Statutory returns. | Identity and verification data; Financial and tax data. | To comply with our legal and regulatory obligations. |
| Ensuring safe working practices, staff administration and assessments. | Contact details; IT and monitoring data. | To comply with our legal and regulatory obligations. For our legitimate interests or those of a third party, e.g. to make sure we are following our own internal procedures and working efficiently so we can deliver the best service to you |
| Marketing our services to: existing and former clients; third parties who have previously expressed an interest in our services; and third parties with whom we have had no previous dealings. | Contact details; Matter data. | For our legitimate interests or those of a third party, e.g. to promote our business to existing and former clients. |
| Credit reference checks via external credit reference agencies. | Identity and verification data; Contact details; Financial and tax data. | For our legitimate interests or a those of a third party, e.g. for credit control. |
| External audits and quality checks, e.g. for Lexcel or ISO accreditation and the audit of our accounts. | Identity and verification data; Matter data; Financial and tax data. | For our legitimate interests or a those of a third party, i.e. to maintain our accreditations so we can demonstrate we operate at the highest standards. To comply with our legal and regulatory obligations. |
| Recording and/or transcribing calls and meetings, and producing summaries, notes and action points, e.g. to keep accurate records of your matter, support quality assurance and training, and handle queries, disputes and complaints. | Contact details; Matter data; Call and meeting recordings, transcripts and AI-generated content. | For the performance of our contract with you or to take steps at your request before entering into a contract. For our legitimate interests or those of a third party, i.e. to keep accurate records and maintain the quality of our services. To comply with our legal and regulatory obligations. |
| Using AI tools to transcribe, draft, summarise, search, categorise and route information, and to assist with quality assurance, e.g. to run our practice efficiently and maintain the quality of our services. | Contact details; Matter data; IT and monitoring data; Call and meeting recordings, transcripts and AI-generated content. | For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can provide a high level of service to you. |
The above table does not apply to special category personal data or criminal offence data. We will only process special category personal data where we have your explicit consent or another condition under UK data protection law applies, e.g. where processing is necessary for the establishment, exercise or defence of legal claims or to comply with our legal or regulatory obligations. We will only process criminal offence data where a condition under the Data Protection Act 2018 permits us to do so, e.g. where necessary for the establishment, exercise or defence of legal claims.
Call recording, transcription and our use of artificial intelligence (AI)
This section explains how we record and transcribe certain calls and meetings, and how we use AI tools in our work. The rest of this policy – including the sections on your rights, international transfers, data sharing, data security and retention – also applies to the processing described here.
Recording and transcription. We record and/or generate written transcripts and summaries of certain calls and meetings. Depending on the platform, this can include internal and external voice calls, video meetings and client- or contact-facing calls, and may capture your voice, name and job role, what you say and (in video meetings) your image. Where a call or meeting is being recorded, we will tell you at the time – for example through an announcement, an on-screen indicator or a calendar notice.
How we use AI tools. We use AI tools that are built into, or connected to, our systems. Typical uses include transcribing calls and meetings and producing summaries, notes and suggested action points; drafting and improving documents and correspondence; searching and summarising information to answer queries; assisting with quality assurance; and categorising, tagging and routing communications and requests. Some of these tools process the content of calls, meetings and messages in order to work. We do not use AI tools to make legal decisions on your matter or to replace the professional judgement of the lawyer responsible for your work.
AI output can be inaccurate. We treat AI-generated transcripts, summaries and drafts as an aid or a draft, not as a final or authoritative record, and a person remains responsible for checking and using them.
Confidentiality and privilege. Where recordings, transcripts or AI outputs contain information subject to legal professional privilege or our duty of confidentiality, we handle them in accordance with those obligations and only use tools that provide appropriate confidentiality and security safeguards.
Special category data. Recordings, transcripts and AI-generated summaries may also, incidentally, capture special category data – for example, if health, religion, race or similar matters are mentioned during a call or meeting. We do not seek out this information through recording or AI tools. Where we do process it, we rely on an appropriate condition under UK data protection law (such as the establishment, exercise or defence of legal claims) and apply additional safeguards, including access restrictions and minimisation.
Automated decision-making
We do not make decisions that have a legal or similarly significant effect on you based solely on automated processing, including profiling, except where permitted by law and where we have notified you. Although we use AI and other automated tools to assist with tasks such as transcription, drafting, summarising, categorising and quality assurance, these tools support human decision-making rather than replace it: the lawyer or member of staff responsible for your matter reviews the relevant information and makes the decision, and any AI output is only one factor they may take into account. If we ever intend to carry out solely automated decision-making with such effects, we will notify you and put in place the additional safeguards required by law, including your right to obtain human intervention, to express your point of view and to contest the decision.
omotionl Communications
We may use your personal data to send you updates (by email or post) about legal developments that might be of interest to you and / or information about our services, including promotions or new services.
We have a legitimate interest in processing your personal data for promotional purposes (see above ‘How and why we use your personal data’). This means we do not usually need your consent to send you promotional communications. However, where consent is needed, we will ask for this consent separately and clearly.
We will always treat your personal data with the utmost respect and never sell or share it with other organisations for marketing purposes.
Who we share your personal data with
We routinely share personal data with:
-
professional advisers who we instruct on your behalf or refer you to, eg barristers, medical professionals, accountants, tax advisors or other experts;
-
other third parties where necessary to carry out your instructions, eg your mortgage provider or HM Land Registry in the case of a property transaction or Companies House;
-
our insurers and brokers;
-
external auditors, eg in relation to ISO or Lexcel accreditation and the audit of our accounts;
-
our banks; and
-
external service suppliers and agents that we use to make our business more efficient, eg typing and copying services, marketing agencies, document collation or analysis suppliers.
We only allow our service providers to handle your personal data if we are satisfied they take appropriate measures to protect your personal data. We also impose contractual obligations on service providers to ensure they can only use your personal data to provide services to us and to you.
We may disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.
We may also need to share some personal data with other parties, such as potential buyers of some or all of our business or during a re-structuring. Usually, information will be anonymised but this may not always be possible. The recipient of the information will be bound by confidentiality obligations.
Where your personal data is held
Information may be held at our offices and those of third party agencies, service providers, representatives and agents as described above (see ‘Who we share your personal data with’).
Some of these third parties may be based outside the UK. For more information, including on how we safeguard your personal data when this occurs, see below ‘Transferring your personal data out of the UK’.
How long your personal data will be kept
We will keep your personal data after we have finished advising or acting for you. We will do so for one of these reasons:
-
to respond to any questions, complaints or claims made by you or on your behalf;
-
to show that we treated you fairly; or
-
to keep records required by law and regulatory requirements.
We will not retain your data for longer than necessary for the purposes set out in this policy. Different retention periods apply for different types of data. Further details of this are available on request from the partner dealing with your matter.
When it is no longer necessary to retain your personal data, we will delete or anonymise it.
Transferring your personal data out of the UK
To deliver services to you, it is sometimes necessary for us to share your personal data outside the UK, eg:
-
with your and our service providers located outside the UK;
-
if you are based outside the UK; and
-
where there is an international dimension to the matter in which we are advising you.
These transfers are subject to special rules under UK data protection law.
Other countries do not have the same data protection laws as the United Kingdom. We will, however, ensure the transfer complies with data protection law and all personal data will be secure. For example, we may rely on your explicit consent to transfer your personal data, the transfer might be necessary for the performance of a contract between you and us, or the destination country may be subject to UK adequacy regulations. Where appropriate, we may use the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses issued by the Information Commissioner’s Office.
If you would like further information please contact our Data Protection Officer (see ‘How to contact us’ below).
Your rights
You have the following rights, which you can exercise free of charge:
Right To Withdraw Consent
If you have provided your consent to the collection, processing and transfer of your personal data, you have the right to fully or partly withdraw your consent. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose(s) to which you originally consented unless there is another legal ground for the processing.
To opt-out of receiving our marketing communications please follow the opt-out links on any marketing message sent to you or contact nickpargeter@broadfieldlaw.com. Opting out of receiving marketing communications will not affect the processing of personal data for the provision of our legal services.
Updating Personal Data About You
If any of the personal data that you have provided to us changes, for example if you change your email address or if you wish to cancel any request you have made of us, or if you become aware we have any inaccurate personal data about you, please let us know by sending an email to nickpargeter@broadfieldlaw.com. We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal data that you provide to us.
| Access | You have the right to request a copy of the personal data that we hold about you. There are exceptions to this right, so that access may be denied if, for example, making the information available to you would reveal personal data about another person, or if we are legally prevented from disclosing such information. You are entitled to see the personal data held about you. If you wish to do this, please contact us using the contact details provided below. |
|---|---|
| Rectification and accuracy | We aim to keep your personal data accurate, current, and complete. We encourage you to contact us to let us know if any of your personal data is not accurate or changes, so that we can keep your personal data up-to-date. |
| To Be Forgotten | The right to require us to delete your personal data – in certain situations. |
| Restrictions of processing | The right to require us to restrict processing of your personal data – in certain situations, eg if you contest the accuracy of data. |
| Data portability | The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and / or transmit that data to a third party – in certain situations. |
| To Object | In certain circumstances, you also have the right to object to processing of your personal data and to ask us to block, erase and restrict your personal data. If you would like us to stop using your personal data, please contact us. |
| Withdraw Consent | Where we rely on your consent to process your personal data, the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent. |
| Automated Decision-Making | The right not to be subject to a decision based solely on automated processing, including profiling, and which has a legal or similar effect concerning you or otherwise significantly affects you, save in limited circumstances permitted by law. |
Keeping your personal data secure
We have appropriate security measures to prevent personal data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
How to complain
We hope that our Data Protection Officer – see below: ‘How to contact us’ – can resolve any query or concern you may raise about our use of your information. The GDPR also gives you the right to lodge a complaint with the Information Commissioner’s Office, who may be contacted at https://ico.org.uk/concerns or telephone: 0303 123 1113.
Changes to this privacy Notice
This Privacy Notice was published and last updated on 13 August 2026.
We may change this Privacy Notice from time to time. When we do this, we will update the policy on our website. If we introduce any fundamental changes which affect how we handle your personal data, we will inform you by email or post.
How to contact us
Please contact our Data Protection Officer, Nick Pargeter, by post, email or telephone if you have any questions about this privacy policy or the information we hold about you.
Our contact details are shown below:
One Bartholomew Close, London EC1A 7BL
E enquiries@broadfieldlaw.com
T +44 (0)345 222 9222
Our data protection officer’s contact details:
One Bartholomew Close, London EC1A 7BL
E nickpargeter@broadfieldlaw.com
T +44 (0)20 7783 3046
