1. Who we are
We are Virgo Solicitors Ltd. We are committed to protecting and respecting your privacy. This notice (our “Privacy Notice”) sets out the basis on which personal data we collect will be processed by us. Please read this Privacy Notice carefully to understand our practices and your rights in relation to your personal data.

By visiting or using our website (e.g. www.virgosolicitors.co.uk) or engaging our services, your personal data will be processed in the ways described in this policy.

For the purposes of data protection law, the data controller is Virgo Solicitors Ltd (registered office: Imperial House, 64 Willoughby Lane, London, N17 0SP).

Our Data Protection Officer (DPO) (or other designated contact) is Abess Ali Nasralla Taqi. If you have any queries, complaints or requests, you may contact our DPO using the following:

• Email: info@virgosolicitors.co.uk
• Telephone: 0208 885 3999
• Postal address: Imperial House, 64 Willoughby Lane, London, N17 0SP

2. Who this Privacy Notice applies to
This Privacy Notice applies to all individuals whose personal information we collect and process (other than our current or former employees, for whom a separate privacy policy may apply). This includes:

• Our clients / prospective clients
• Other legal professionals, law firms and barristers
• Individuals involved in legal or court proceedings (e.g. witnesses, experts)
• Our service providers, campaigners, regulators, insurers, auditors, professional advisers
• Prospective employees / job applicants

3. What information we collect from you
We may collect and process the following types of personal data (this list is illustrative, not exhaustive):

• Identity & Contact Data: your name, date of birth, family details, copy of ID (e.g. passport, driving licence), national insurance number (if applicable), postal address, email address, telephone number
• Financial Data: bank account details, credit / debit card information (where needed)
• Client / Case Data: data you provide to us in connection with legal services (e.g. income, employment, financial affairs, health / medical details, property ownership, criminal record where relevant)
• Technical Data: data about your visits to our website (such as IP address, browser type, device information, operating system, pages visited, referring/exit pages)
• Sensitive / Special Category Data: where relevant, data concerning health, medical conditions, or other special categories of personal data
• Recruitment Data: for job applicants, your CV, interview notes, references, application details
• Data from third parties: e.g. from regulatory authorities, public bodies (Legal Aid Agency, local authorities, NHS, Courts, etc.)
• Marketing & Communications Data: when you sign up for newsletters or contact us via forms, your preferences, contact details, etc.

4. How we use your personal data
We will process your personal data only when there is a lawful basis to do so. The most common bases we rely on include:

• Performance of contract: processing necessary to deliver legal services you have engaged us for
• Legitimate interests: where we need to process data for our business operations, provided that your rights and freedoms do not override those interests
• Legal / regulatory obligations: to comply with laws, regulatory or professional obligations (e.g. anti-money laundering, court orders)
• Consent: where you have given explicit consent (e.g. to receive marketing communications)

We also use your data for:

• Communicating with you (e.g. about your case, updates, responding to enquiries)
• Internal record-keeping, accounting, auditing, billing
• Improving our website, services, and client experience
• Protection against fraud, safeguarding, risk management, ensuring confidentiality and security

5. Who we may share your personal information with
In order to carry out the purposes listed above, we may share your personal data with:

• Experts, medical professionals or other consultants (for reports, expert evidence)
• Barristers or counsel engaged in your matter
• Courts, tribunals, regulatory authorities, or statutory bodies
• The Legal Aid Agency (where relevant)
• Other law firms or partner organisations (if we subcontract or share matters)
• IT, analytics or hosting providers, website / software support providers
• Auditors, insurers, professional advisers
• Fraud prevention agencies, credit reference agencies, anti-money laundering bodies
• Third parties as required by law, regulation or court order

6. How is your data stored and kept secure
We are committed to ensuring that your information is secure. We take appropriate technical, organizational and physical measures to prevent unauthorized or unlawful processing, accidental loss, destruction or damage to your data.

Access to your information is limited to those who have a legitimate need to know. Where required, data is encrypted in transit and at rest. We regularly review our security practices in line with evolving standards.

We do not routinely transfer personal data outside the European Economic Area (EEA). If, in the future, it becomes necessary to transfer data outside the EEA, we will ensure appropriate safeguards are in place (e.g. standard contractual clauses, adequacy decisions) in accordance with applicable law.

7. Your rights
In certain circumstances, you have rights under data protection law in relation to your personal data. These include:

• The right to access the personal data we hold (Subject Access Request)
• The right to correct inaccurate or incomplete data
• The right to erase your personal data (in certain situations)
• The right to restrict or object to our processing of your data (where applicable)
• The right to data portability (in certain circumstances)
• The right to withdraw consent (where processing is based on consent)
• The right to lodge a complaint with the Information Commissioner’s Office (ICO)

If you wish to exercise any of these rights, please contact our DPO (see section 1 above). We will respond in accordance with applicable law.

You will not normally have to pay a fee to exercise these rights (unless your request is manifestly unfounded or excessive). In some cases, we may refuse or limit your request to the extent permitted by law.

8. Changes to this Privacy Notice
We may update this Privacy Notice from time to time (for example, to reflect changes in law, regulation, technology, or our business). The date of the latest version will be indicated at the top of this document. Please revisit this page periodically to stay informed of any changes.

9. Cookies
We use cookies and similar tracking technologies on our website to help improve your experience. Cookies are small text files stored on your device.

We may use:

• Strictly necessary cookies – essential for the operation of our site
• Analytical / performance cookies – to collect visit statistics, track how users move about the site
• Functionality cookies – to remember your preferences, recognise you on subsequent visits
• Targeting / advertising cookies – to understand which links you have clicked, pages you have visited, to deliver more relevant content

You may choose to block or delete cookies via your browser settings. However, be aware that blocking all cookies may affect your ability to access certain features of the website.

For more detail, including a table of cookies used (names, purposes, lifetimes), see our separate Cookie Policy or the annex below.

10. Contact & Complaints
If you have any questions, concerns, or complaints about our handling of your personal data, please contact our DPO in the first instance (see section 1).

If you are dissatisfied with our response or believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (or relevant supervisory authority).

---

Annex: Example Cookie Table (if needed)

Cookie Name	Type	Purpose	Expires / Duration
CookieConsent	Functionality	Stores your cookie consent status	1 year
_ga	Analytical	Registers a unique ID for visitor statistics	2 years
_gid	Analytical	Registers a unique ID for visitor statistics	24 hours / session
_gat	Analytical	Throttles request rate for Google Analytics	Session