Privacy Notice
This privacy notice ('Privacy Notice') relates to the use of our website and applies to all individuals ('you', 'your') who access our website at www.lockyersonline.co.uk ('Website') and engage our legal services ('Services'). Lockyers Limited ('Lockyers', 'we', 'our', 'us') respects your right to privacy.
This Privacy Notice explains who we are and how we collect, store, share and use your personal data. It also contains information on how you can exercise your privacy rights and how to contact us or a relevant regulator in the event that you have a complaint.
We recommend that you read this Privacy Notice in full to ensure that you are fully informed about your personal data. However, if you only want to access a particular section of this Privacy Notice you can click on the relevant link in the table of contents below to jump to that section.
Table of contents
What personal information does Lockyers Limited collect about you, how do we collect it and why?
When and with whom might Lockyers Limited share your personal information
1. Who are we?
Lockyers Limited is the owner of this website and provides non-reserved legal advice and services. Paul Lockyer is a director of Lockyers Limited and also a consultant solicitor for other law firms. He is authorised and regulated by the Solicitors Regulation Authority. His details can be found here.
Lockyers Limited is the data controller of personal data obtained through our interactions with website visitors, clients and other third parties. We are registered in the UK with the Information Commissioner's Office with registration number: ZA092393.
For more information about Lockyers and the legal services we provide, please see the “About Us” section of our website here.
2. What personal information does Lockyers collect about you, how do we collect it and why?
We process personal data in accordance with the UK General Data Protection Regulation ('UK GDPR'), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 ('PECR').
The personal data that we may collect from you, either directly or indirectly, will depend on how you interact with us.
| Which individuals? | What personal information? | Why? |
|---|---|---|
| Website visitors | Our website servers may automatically receive certain information about your device, including your IP address, browser type, device type, usage data and similar technical information. This website does not use cookies or similar tracking technology; see our Cookie Notice. | We use this information to ensure our website is rendered correctly to you. We do not collect website analytics or engage in targeted advertising. |
| Clients | Lockyers may collect the following:
Lockyers may collect personal data directly from you or your personal data may be collected indirectly from third party sources (e.g. service providers that provide operational assistance, email and marketing services, as well as financial and credit related services, payment services and social media platforms). Information received from third parties will be checked to ensure that the third party either has your consent or are otherwise legally permitted or required to disclose your personal data to us. |
We use this information for the purposes of onboarding new clients and to provide legal advice. You may have the opportunity to voluntarily subscribe to marketing communications from Lockyers. We will use the contact information you have provided for this. |
| Other third parties | Clients may disclose information about third parties when seeking advice from Lockyers. The data that is shared with us may include personal data and some data that is deemed as sensitive or special category data. This data will be processed under the applicable data protection laws. | For the provision of legal advice to our clients. |
If we ask you to provide any other personal information not described above, we will make clear to you at the point of collection the personal data required, and the reason why you are asked to provide such data.
3. Legal basis for processing personal information
Our legal basis for collecting and using your personal data will depend on the personal data concerned and the specific context in which we collect it. However, we will only process your personal data for the purposes described in this Privacy Notice or for purposes that we explain to you at the time we collect your information.
Depending on our purpose for collecting your information, we rely on one of the following legal bases:
Consent – in certain circumstances, before collecting, using or disclosing your information, we may ask for your consent, separately from any contract between us (e.g. to allow us to contact you following a website inquiry). You can voluntarily choose to give or deny your consent without any negative consequences to you;
Contract - we require certain personal data to perform a contract with you (e.g. when providing our Services);
Legitimate Interests – We may use or disclose your personal data for the legitimate business interests of either Lockyers or a third party, but only when we are confident that such interests are not overridden by your data protection interests or fundamental rights and freedoms; and
Legal obligation - in some cases, we may also have a legal obligation to process personal information about you or may need to process personal information in order to exercise, establish or defend legal claims.
The following table provides more details on our purposes for processing your personal data and the related legal bases. The legal basis under which your personal data is processed will depend on the data concerned and the specific context in which we use it.
| Purpose/Activity | Type of personal data | Lawful basis for processing including basis of legitimate interest |
|---|---|---|
| Engaging in communications with you for the purposes of customer support and feedback on our Services or the performance of our Website and other communications with us including information from client surveys or similar research. | Identity and Contact Data Communications Data Demographic Data Device Data Usage Data Other Data |
Necessary for our legitimate interests (to operate, provide and improve our business; to communicate with you) – where our communications are not necessary to perform or enter into a contract with you. |
| Keep our business, including our Website visitors secure and address threats to their safety or the safety of others; to detect and prevent fraud (online). For example, online we use malware and spyware monitoring tools to detect suspicious activity and algorithms to detect unauthorised access. | Identity and Contact Data Communications Data Device Data Usage Data |
Necessary for our and our third parties' legitimate interests (to operate and provide our business including our Website; to detect or prevent illegal activities (e.g. fraud) and/or to manage the security of our IT infrastructure, and the safety and security of our employees, customers, vendors, and visitors. |
| To administer and maintain our Website and our IT systems (including monitoring, troubleshooting, data analysis, testing, system maintenance, repair and support, reporting and hosting of data). | Identity and Contact Data Device Data Usage Data |
Our and our third parties' legitimate interests (to operate, provide and improve our business, including our Website). |
| Contact current and prospective clients (including Website visitors) about our services and events we think may be of interest including promotional mailers and electronic communications. | Identity and Contact Data Usage Data Communication Data |
Consent (where required under applicable law). Otherwise our legitimate interests (to operate, provide and improve our business; to communicate with you and to promote services). |
| Comply with legal and regulatory obligations to which we are subject, including our obligations to respond to your requests under data protection law. | Identity and Contact Data Usage Data Communication Data |
Legal obligation. |
| Protect our legal rights (including where necessary, to share information with law enforcement and others), for example to defend claims against us and to conduct litigation to defend our interests. | Identity and Contact Data Usage Data Device Data Communication Data |
Our legitimate interests to protect our business interests. |
If we collect your personal data to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you on whether the provision of your personal data is mandatory or not (as well as the possible consequences, if any, if you do not provide your personal data).
If you have questions about or need further information concerning the legal basis on which we collect and use your personal data (including any legitimate interests relied upon), please contact us using the contact details provided under the “How to contact us” section below.
4. When and with whom might Lockyers share your personal information?
We may disclose your personal data to the following categories of recipients:
third party services providers and partners we use to help deliver our services. This includes data processing service providers, website spam security service providers and website hosts.
any competent law enforcement body, regulator, government agency, court or other third party (such as our professional advisers or auditors) where we believe disclosure is necessary: (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
any other person with your consent to the disclosure (obtained separately from any contract between us).
We only allow those organisations to handle your personal data if we are satisfied that they have taken appropriate measures to protect your personal data. We also impose contractual obligations on them to ensure they can only use your personal data to provide services to us and to you.
5. Cookies and similar tracking technology
This website does not use cookies or similar tracking technology (such as local storage or tracking pixels). If that changes, we will update our Cookie Notice and ask for your consent where the law requires it.
6. How does Lockyers keep my personal information secure?
We use appropriate technical and organisational measures to protect the personal data that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal data.
7. International data transfers
Lockyers is a UK business. We use carefully selected service providers to run our business, including Google (Google Workspace for email and documents, and Google Cloud for this website). This means your personal data may be processed outside the UK, including in the European Economic Area ('EEA') and the United States.
We transfer personal data outside the UK only where UK data protection law allows it, using one of the following:
UK adequacy regulations: transfers to countries the UK recognises as providing adequate protection (including the EEA), and to US organisations certified under the UK Extension to the EU-U.S. Data Privacy Framework ('DPF'), which you can check on the DPF List;
appropriate safeguards under Article 46 of the UK GDPR, such as the ICO's International Data Transfer Agreement ('IDTA') or the International Data Transfer Addendum to the European Commission's Standard Contractual Clauses ('UK Addendum'), for recipients not covered by adequacy regulations; or
a specific exception under Article 49 of the UK GDPR, where one applies.
Google LLC is certified under the DPF, including the UK Extension. Google's data processing terms also include standard contractual clauses for transfers the DPF does not cover.
Where we rely on the UK Extension to send special category data or criminal offence data to the United States, we identify that data to the recipient as sensitive, as the UK Extension requires.
You can ask us for a copy of the safeguards we rely on by emailing paul.lockyer@lockyersonline.co.uk. We may redact commercially sensitive information.
We use appropriate technical and organisational measures to protect any such personal data we may process. The measures we take will be appropriate to the risk, taking into account the nature, scope, context and purposes of our processing and the potential risks to the rights and freedoms of natural persons.
8. Data retention
We will not keep your personal data for longer than we need it for the purpose for which it is used.
We retain personal data we collect from you where we have an ongoing legitimate business need to do so. When we have no ongoing legitimate business need or legal reason to process your personal data, we will either delete or anonymise it or, if this is not possible, we will securely store your personal data and isolate it from any further processing until deletion is possible.
9. Your data protection rights
You have the following data protection rights. To exercise any of these rights, please use the contact details provided under the “How to contact us” section below.
You may access, correct, update or request deletion of your personal data.
You can object to the processing of your personal data, ask us to restrict processing of your personal data or request portability of your personal data (i.e. your data to be transferred in a readable and standardised format).
You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. To opt out of other forms of marketing (such as postal marketing or telemarketing), please contact us. If you choose to opt out of marketing communications, we may still send you non-promotional emails, such as emails about our ongoing business
Similarly, if we have collected and process your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance of lawful processing grounds other than consent.
You also have a right to complain about how we have used or handled your personal data. If you wish to make a complaint to us or have any questions about this, you can contact us using the details provided under the “contact us" details heading below.
You have the right to complain to a supervisory authority about our collection and use of your personal data. For more information, please contact your local supervisory authority. Contact details for the ICO, the UK's data protection authority, are available here. Certain supervisory authorities will require that you exhaust our own internal complaints process before looking into your complaint.
These rights are not absolute and are subject to various conditions under applicable data protection and privacy legislation; and the laws and regulations to which we are subject.
Should you wish to exercise your rights under the UK GDPR, please contact paul.lockyer@lockyersonline.co.uk.
10. Updates to this Privacy Notice
We may update this Privacy Notice from time to time in response to legal, regulatory, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, which will be consistent with the significance of the changes we make.
You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the end of this Privacy Notice.
11. How to contact us
If you have any queries or concerns about our use of your personal data, please contact: paul.lockyer@lockyersonline.co.uk.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.
The Information Commissioner can be contacted using the details at https://ico.org.uk/make-a-complaint or by telephone: 0303 123 1113.
Last updated: 20 October 2026