Privacy Policy 

This policy explains how Gazelle Law Ltd collects and uses personal data when you visit our website, contact us, or when we act for you or your organisation. It also explains your rights and how to exercise them.

1. Who we are

Gazelle Law Ltd ("Gazelle Law", "we", "us") is the controller of your personal data. We are a company registered in England and Wales (company number 12662466). We are registered with the Information Commissioner's Office (ICO).

For any question about this policy or your data, contact us below.

2. The data we collect

  • Identity and contact: name, job title, employer, email address and phone number.

  • Enquiry and correspondence: what you tell us in contact forms, emails and calls.

  • Client and matter data: information you or your organisation give us so we can advise, including about other people involved in a matter.

  • Verification data: identity documents and checks we need to carry out before taking on a client.

  • Technical data: IP address, browser and device type, and pages visited (see our Cookie Policy).

  • Billing data: billing contact, invoices and payment records.

We do not seek to collect special category data (such as health, ethnicity or religious beliefs) or criminal offence data. If a matter requires it, or you choose to share it, we will only use it where the law allows, for example to establish, exercise or defend legal claims.

3. How we collect it

  • Directly from you, through our website forms, email, calls and meetings

  • From your organisation, when we act for it

  • From other parties to a matter, their advisers, and public sources such as Companies House

  • Automatically, through cookies and similar technologies when you use our website, subject to your choices

4. How we use it and our lawful basis

  • Responding to enquiries: legitimate interests (responding to people who contact us).

  • Providing legal services and managing our relationship with clients: performance of a contract, or legitimate interests where our client is your organisation.

  • Client verification, conflict checks and anti-money laundering checks: legal obligation and legitimate interests.

  • Billing and keeping financial records: contract and legal obligation.

  • Running and improving our website: legitimate interests, and consent for optional cookies.

  • Sending updates and insights to business contacts: legitimate interests (you can opt out at any time), or consent where the law requires it.

  • Complying with professional, regulatory and legal duties, and handling complaints or claims: legal obligation and legitimate interests.

Where we rely on consent, you can withdraw it at any time. This does not affect processing already carried out.

5. Who we share it with

We share personal data only where needed for the purposes above:

  • Service providers who process data on our behalf, including website hosting (Squarespace), email and document storage, practice management and billing, and technology tools including AI tools used to support our work.

  • Other advisers, counterparties, courts and experts where needed for a matter, on our client's instructions

  • Our professional indemnity insurers, auditors and professional advisers

  • Regulators, law enforcement or other authorities where the law requires

  • A buyer of, or successor to, all or part of our business, under appropriate confidentiality protections

Our service providers may only use your data on our instructions and must keep it secure. We do not sell personal data.

6. International transfers

Some of our service providers are based outside the UK, including in the United States. Where data is transferred outside the UK, we make sure it is protected, for example through a UK adequacy decision (including the UK-US Data Bridge where the recipient is certified) or the ICO's International Data Transfer Agreement or Addendum.

7. How long we keep it

  • Enquiries that do not become instructions: up to 2 years from last contact.

  • Client and matter files: 7 years from the end of the matter, or longer where needed for a legal claim.

  • Client verification and anti-money laundering records: 5 years from the end of the client relationship.

  • Financial records: 6 years from the end of the financial year they relate to.

  • Marketing contact details: until you opt out, or after 3 years without engagement.

8. Your rights

You have the right to:

  • ask for a copy of your personal data

  • ask us to correct inaccurate or incomplete data

  • ask us to erase your data

  • ask us to restrict how we use your data

  • object to our use of your data where we rely on legitimate interests, and to direct marketing at any time

  • ask us to transfer data you gave us to another organisation

  • withdraw consent where we rely on it

Some rights are limited, for example where legal professional privilege or our legal obligations apply. To exercise a right, please contact us below. We will respond within one month, or tell you if we need longer.

9. Complaints

If you are unhappy with how we have handled your data, please contact us below. We will acknowledge your complaint within 30 days and tell you how we will deal with it. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

10. Security

We use appropriate technical and organisational measures to protect personal data, and our staff and service providers are bound by confidentiality. We have procedures for dealing with suspected data breaches and will notify you and the ICO where the law requires.

11. Changes to this policy

We may update this policy from time to time. The date below shows when it was last changed.


Last updated: 22 October 2026