Steinfeld Law LLP – Privacy Notice (last updated June 2026)

Introduction

Steinfeld Law LLP (“we”) is a limited liability partnership registered in England and Wales with number OC343739. It is authorised and regulated by the Solicitors Regulation Authority (SRA No. 508044). and is subject to the Solicitors’ Code of Conduct which can be accessed at www.sra.org.uk/code-of-conduct page.

Steinfeld Law LLP is responsible for the www.steinfellaw.co.uk website (“the Website”). Steinfeld Law LLP is committed to protecting and respecting your privacy and security.

The data controller is Steinfeld Law LLP of 22 Manchester Square, London, W1U 3PT. Our Data Protection Officer is Cyma Hanif (cyma.hanif@steinfeldlaw.co.uk).

This Privacy Policy sets out the basis upon which any personal data we collect from you, or that you provide to us, may be processed by (or on behalf of) Steinfeld Law LLP. Personal data collected or provided via any means, for example our Website, marketing feedback forms and meetings with and emails and telephone calls with us is covered by this Privacy Policy unless we expressly state otherwise in writing.

Please read the following carefully to understand our practices regarding your personal data and how we will treat it. By providing your personal data to Steinfeld Law LLP, you will be deemed to have consented to processing of such data by us as set out in this Privacy Policy. If you do not agree with use of your personal data as set out in this Privacy Policy you should not submit your personal information to us.

It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.

Background

This Privacy Notice is in accordance with  applicable data protection laws, including the UK GDPR and the Data Protection Act 2018.

The GDPR and DPA 2018 apply to organisations worldwide that process personal data of UK citizens. Protecting your personal data, your confidential information and your privacy is important to us and we therefore apply the same level or protection to your data regardless of where you are located.

Collection and use of your personal data

Your personal data may be collected by Steinfeld law LLP through our Website, marketing feedback forms and meetings with and emails and telephone calls with us. Personal data may also be provided about you by third parties.

Personal data we collect for the purposes of compliance with our money laundering obligations will be processed only for the purposes of preventing money laundering and terrorist financing, or as otherwise permitted by law or with your express consent.

The term “Personal Data” as used in this Privacy Notice means any information relating to you such as your name, contact details, bank account details, etc. Personal Data does not include data from which you can no longer be identified such as anonymised aggregate data.

The kinds of Personal Data we may collect include your contact details (such as your address, email address and telephone number) and information such as your business address, nationality, place of residence, job title and payment data such as data necessary for processing payments which we will request from you. In addition, we collect the Personal Data you choose to provide to us, e.g. if you contact us by letter, telephone, email or any other means of electronic or personal communication.

Your personal data may be processed by (or on behalf of) Steinfeld Law LLP for any of the following purposes:

• providing legal advice to you;
• communicating with you by telephone, text, email and/or post
• in relation to events run jointly with a third party;
• conducting analytical studies of the activities of our clients, contacts and other visitors to the Website; and monitoring responses to our email campaigns (e.g. invitations to events and legal updates);
• providing aggregate statistics about our clients, contacts and other visitors to the Website, traffic patterns and related site information to third parties, but these statistics will not normally contain any information about you from which you could be identified;
• if you have given your consent only, we may provide a copy of the personal data that we hold about you to third parties; and
• as otherwise outlined at the time of collection of your personal data in accordance with the preferences that you express.

If you apply for a job, internship and/or work placement online you may need to provide all and/or any of the following: information about your education, employment, racial background and state of health. Your application will constitute your express consent to our use of this information to assess your application and to allow us to carry out the monitoring activities required of us as an equal opportunities employer.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access Personal Data (or to exercise any of your other rights). This is another appropriate security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it.

Accuracy of information

It is important that the Personal Data we hold about you is accurate and current. Please let us know if your Personal Data changes during your relationship with us.

What if you do not provide the personal data we request?

It is in your sole discretion to provide Personal Data to us. If you do not provide us with all or some of the Personal Data we request, we may not be able to accept an engagement from you, to provide all or some of our legal services, to enter into a contract or engagement with you or to send you the requested (marketing) information.

Change of purpose, anonymization

We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason which is compatible with the original purpose. If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

In some circumstances we may anonymise your Personal Data so that it can no longer be associated with you, in which case it is no longer Personal Data.

How long will you keep my personal data?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purpose of satisfying any legal, accounting, reporting or regulatory requirements. To determine the appropriate retention period, we consider the amount, nature and sensitivity of the personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means and the applicable legal requirement.

Changing your preferences

We want to make sure that you are happy with the ways in which we hold and use your personal data. If at any time you wish to check, update or amend your personal data or preferences, please email us at enquiries@steinfeldlaw.co.uk or contact our DPO at cyma.hanif@steinfeldlaw.co.uk

Security measures

Steinfeld Law LLP is registered in accordance with and seeks to comply with the Act. We follow appropriate security procedures in the storage and disclosure of personal data so as to prevent unauthorised access by third parties. We also require those parties to whom we transfer personal data to comply with the same. However, the Internet is not a totally secure medium and you acknowledge and agree that Steinfeld Law LLP shall not be responsible for any unauthorised use, distribution, damage or destruction of personal data, except to the extent we are required to accept such responsibility law.

Who else will we provide your data to?

We will not pass on your personal details to any third party unless

• we have your consent or
• as set out below:
  • your personal data may be shared with our partners, employees and/or third party organisations that we appoint to assist. We shall endeavour to ensure that any such recipients of your personal data use appropriate security measures to protect your personal data;
  • in relation to any events that we run jointly with a third party;
  • in relation to content posted by you ; and
  • in circumstances in which we are required or authorised by law, court order, regulatory or governmental authorities to disclose your personal data.

Your rights in relation to your information

Under the General Data Protection Regulation, you have a number of important rights that you can exercise free of charge. In summary, these rights are:

• Transparency over how we use your personal data and fair processing of your information;
• To require us to correct any mistakes or complete missing information we hold on you;
• To require us to erase your personal information in certain circumstances;
• To receive a copy of the personal information you have provided to us or have this information sent to a third party – this will be provided to you or the third party in a structured, commonly used and machine readable format;
• To object at any time to processing of your personal information for direct marketing;
• To object in certain other situations to the continued processing of your personal information;
• To restrict our processing of your personal information in certain circumstances;
• To request not to be subject to automated decision making which produce legal effects that concern you or affect you in a significantly similar way;

If you want more information about your rights under the GDPR please see the guidance from the Information Commissioners Office on Individuals rights under the GDPR or if you would like to request this data, please contact us at  enquiries@steinfeldlawlaw.co.uk or contact our DPO at cyma.hanif@steinfeldlaw.co.uk

Links and Third Party Advertising

Any links on the Website may take you to third party sites over which we have no control. When linking to another Website you should read the privacy policy stated on that Website. This Privacy Policy does not cover the use of your personal data on any third party Websites.

Queries

If you have any queries about this Privacy Policy or any queries about the protection of personal data we hold about you, please do not hesitate to contact us at enquiries@steinfeldlaw.co.uk or by contacting our DPO at cyma.hanif@steinfeldlaw.co.uk