Privacy Policy

1. Introduction

Sparrow & Trieu Solicitors (“we”, “us”, “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website or engage our legal services.

We are registered with the Solicitors Regulation Authority (SRA) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect and process the following personal data:

Clients and contacts

• Name, email address, phone number, and postal address;
• Information provided through our contact forms or email correspondence;
• Information necessary to provide legal advice and services;
• Information required for compliance checks, including anti-money laundering and conflict checks.

Website users

• IP address;
• Browser type and version;
• Device information;
• Pages visited and usage information;
• Information submitted through website enquiry forms.

Job applicants

• CVs, employment history and qualifications;
• References;
• Right to work information;
• Interview notes and recruitment records.

3. How We Collect Your Personal Data

We collect personal data:

• Directly from you;
• From people connected with your matter;
• From third parties such as agents, brokers, counsel, experts, courts, tribunals, lenders, search providers, government bodies or identity verification providers;
• From publicly available sources; and
• Automatically through our website, including through cookies and similar technologies where applicable.

4. Why We Use Your Personal Data

We use personal data for the following purposes:

• To respond to enquiries;
• To decide whether to accept instructions;
• To provide legal services and manage your matter;
• To verify identity and carry out anti-money laundering, sanctions and conflict checks;
• To communicate with you and others connected with your matter;
• To issue bills, process payments and recover sums due;
• To comply with our legal and regulatory obligations;
• To improve our website, services and client experience;
• To recruit staff and consultants; and
• To establish, exercise or defend legal claims.

5. Our Lawful Bases for Processing

Depending on the circumstances, we process personal data because:

• It is necessary for the performance of a contract with you or to take steps at your request before entering into a contract;
• It is necessary for compliance with a legal obligation;
• It is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not overridden by your rights and interests; or
• You have given consent, where consent is required.

Where we process special category data or criminal offence data, we do so only where a lawful condition applies.

6. Who We Share Your Personal Data With

We may share personal data with:

• Courts, tribunals and regulatory bodies;
• The Solicitors Regulation Authority, Legal Ombudsman, HMRC, HM Land Registry, the Home Office, Companies House and other public authorities where required;
• Counsel, experts, costs lawyers and other professional advisers;
• Banks, lenders and payment service providers;
• Search providers, identity verification providers and anti-money laundering screening providers;
• IT providers, cloud storage providers and software suppliers;
• Document storage and shredding providers;
• Insurers and auditors; and
• Any other party where necessary for your matter or where required by law.

7. International Transfers

We do not routinely transfer personal data outside the UK unless this is necessary for your matter, required by a service provider, or you ask us to do so.

Where personal data is transferred outside the UK, we will take appropriate steps to ensure it is protected in accordance with applicable data protection law.

8. How Long We Keep Your Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected, including for satisfying legal, regulatory, tax, accounting, professional indemnity and file retention requirements. Where we do not specify a fixed retention period, we apply retention criteria based on the nature of the data, the type of matter, legal and regulatory requirements, and limitation periods.

Typical legal file retention periods

We generally retain client files for 7 years after the end of the matter, unless a longer period is required or justified.

9. Your Rights

Subject to legal and regulatory limitations, you may have the right to:

• Request access to your personal data;
• Request correction of inaccurate or incomplete data;
• Request erasure of your personal data;
• Request restriction of processing;
• Object to processing;
• Request transfer of your personal data to you or another provider in certain circumstances; and
• Withdraw consent where we rely on consent.

To exercise any of these rights, please contact us using the details below.

10. Complaints About Data Protection

If you have concerns about how we handle your personal data, please contact us first so that we can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO).

ICO contact details:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: ico.org.uk

11. Cookies

Our website uses cookies and similar technologies. For more information, please see our Cookies Policy.

12. Changes to This Privacy Notice

We may update this Privacy Notice from time to time. Any changes will be posted on this page, and the updated version will take effect when published.

Last updated: 30/03/2026

Contact

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Sparrow & Trieu Solicitors
76 Shaftesbury Avenue
London, W1D 6ND
mail@sparrowandtrieu.com