PRIVACY NOTICE
Last updated: 9 June 2026
WHO WE ARE
Alium Legal Limited (referred to in this notice as "we", "us" or "our") is a company registered in England and Wales with company number 17212826 and registered office at 1 Stoatley Rise, Haslemere, England, GU27 1AF.
We are the data controller of the personal data we collect through this website and in the course of providing our services.
If you have any questions about this notice or how we handle your personal data, please contact us at hello@aliumlegal.com.
WHAT PERSONAL DATA WE COLLECT
We may collect and process the following categories of personal data about you:
Category | Information collected | Source |
Identity and contact data | Name, email address, telephone number and postal address. | Provided by you |
Know Your Client (KYC) and due diligence data | Identity documents (such as passport or driving licence), proof of address, date of birth, and other information required to verify your identity. | Provided by you |
Matter-related data | Information you provide to us in connection with the legal services we perform on your behalf (to the extent they comprise personal data) | Provided by you |
Technical data | Your IP address, browser type and version, and pages visited on our website | Your device |
Communications data | Records of correspondence and enquiries made to us by email, telephone, or via our website contact form. | Provided by you |
The specific information we collect may change from time to time but always within the categories listed above. While we will aim to keep this table updated with the specific data types that we collect, it may not always be comprehensive.
HOW AND WHY WE USE YOUR PERSONAL DATA
We use your personal data only for the purposes set out in the table below and only where we have a lawful basis for doing so under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).
Purpose | Data used | Lawful basis |
Collect and response to website enquiries | Contact data | Contract |
Performing our services | Contact and matter-related data | Contract |
Onboarding checks | KYC data | Legal obligation |
Complying with legal requirements | Contact data; KYC data | Legal obligation |
Accounting and record keeping | Contact data | Legal obligation |
Analyse website performance and improve user experience | Technical data | Legitimate interests |
Sending marketing communications to you | Contact data | Consent |
WHO WE SHARE YOUR PERSONAL DATA WITH
We do not sell your personal data. We may share your personal data with:
professional advisers, including legal advisors, auditors and accountants;
courts, regulatory bodies or law enforcement where required by applicable law;
IT service providers, cloud storage providers, and other third-party suppliers who process data on our behalf as data processors, and who are bound by appropriate contractual and security obligations; and
successor entities in the event of a merger, acquisition, or reorganisation of our business, where permitted by law.
INTERNATIONAL TRANSFERS
We operate and process your personal data within the United Kingdom but some data processors that we use may be located elsewhere. Where we transfer data to processors or third parties located outside the UK, we will ensure that appropriate safeguards are in place in accordance with UK GDPR.
HOW LONG WE KEEP YOUR PERSONAL DATA
We retain personal data only for as long as is necessary for the purposes set out in this notice, having regard to our legal and regulatory obligations. In particular:
client matter files are generally retained for a minimum of six (6) years following the conclusion of the matter, in accordance with our professional obligations and applicable limitation periods;
any KYC records are retained for five (5) years from the end of the client relationship, as required by anti-money laundering legislation; and
website enquiry data is retained for 1 year where no engagement follows.
After the applicable retention period, personal data is securely deleted or anonymised.
YOUR RIGHTS
You have the following rights in relation to your personal data:
the right to be informed about how we use your personal data;
the right of access to the personal data we hold about you;
the right to rectification of inaccurate or incomplete personal data;
the right to erasure of your personal data in certain circumstances;
the right to restrict our processing of your personal data in certain circumstances;
the right to data portability in certain circumstances;
the right to object to processing based on our legitimate interests; and
rights in relation to automated decision-making and profiling (we do not currently carry out such processing).
To exercise any of these rights, please contact us at hello@aliumlegal.com. We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.
If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.
COOKIES
Our website uses cookies and analytics tools to understand how visitors interact with the site and to improve the user experience. Analytics data is collected and processed on the basis of legitimate interests.
You can control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.
CHANGES TO THIS NOTICE
We may update this privacy notice from time to time. Any changes will be posted on this page with a revised "last updated" date. Where changes are material, we will take reasonable steps to bring them to your attention.