Privacy Policy

How we protect and manage your personal information

Last Updated: January 2024

Privacy Policy for Irwin Solicitors

Irwin Solicitors ("we", "our", or "us") is committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, and protect your personal information when you use our services, visit our website, or contact us.

As an international law firm regulated by the Solicitors Regulation Authority (SRA Number: 654321), we have additional professional and legal obligations to protect client confidentiality and handle personal data with care across multiple jurisdictions.

1. Information We Collect

1.1 Personal Information We May Collect:

  • Name, address, and international contact details
  • Date of birth, passport numbers, and national identification numbers
  • Financial information relevant to your international case
  • Information about your international legal matter
  • Identification documents (passport, driving licence, utility bills)
  • Employment and income details where relevant
  • Health information (for personal injury/medical negligence cases)
  • Any other information necessary to provide international legal services

1.2 Information Collected Through Our Website:

  • Contact form submissions (including country selection)
  • Newsletter sign-ups
  • Website usage data (via cookies)
  • IP addresses and geographic location data
  • Browser and device information

2. How We Use Your Information

We use your personal information for the following purposes:

  • To provide international legal advice and services
  • To communicate with you about your international case
  • To process international payments and manage accounts
  • To comply with international legal and regulatory requirements
  • To prevent international fraud and money laundering
  • To send relevant legal updates (with your consent)
  • To improve our international services and website
  • To coordinate legal services across multiple jurisdictions

3. Legal Basis for Processing

Our processing of your personal data is based on:

  • Contractual necessity: To provide legal services under our retainer agreement
  • Legal obligation: To comply with international regulatory requirements
  • Legitimate interests: To manage our international business and provide quality services
  • Consent: For marketing communications (where applicable)
  • Vital interests: To protect your rights in emergency situations

4. Data Sharing and International Disclosure

We may share your information with:

  • International courts, tribunals, and legal bodies
  • Expert witnesses and international barristers
  • Opposing parties and their international legal representatives
  • Government agencies across multiple jurisdictions
  • Professional indemnity insurers
  • IT service providers (under strict international confidentiality agreements)
  • Our international professional advisers (accountants, auditors)
  • Local counsel in other countries (when necessary for your case)

We will never sell your personal data to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data across all our international offices, including:

  • Secure electronic systems with end-to-end encryption
  • Restricted physical access to all our international offices
  • Confidentiality agreements with all international staff
  • Regular international security audits and staff training
  • Secure document storage and destruction procedures
  • Encrypted international communications

6. International Data Retention

We retain client files in accordance with our international legal obligations and professional requirements:

  • Client files: Minimum of 6 years from file closure (longer for certain international matters)
  • Financial records: 6 years from end of tax year (UK) or as required by local laws
  • Identity documents: 5 years after business relationship ends
  • Marketing data: Until consent is withdrawn
  • Cross-border cases: Retention periods may vary by jurisdiction

7. Your International Rights

Under international data protection laws (including GDPR, CCPA, PIPEDA), you have rights including:

  • Right of access: To request copies of your personal information
  • Right to rectification: To request correction of inaccurate data
  • Right to erasure: To request deletion of your data in certain circumstances
  • Right to restrict processing: To limit how we use your data
  • Right to data portability: To receive your data in a structured format
  • Right to object: To object to processing in certain circumstances
  • Right to withdraw consent: Where processing is based on consent
  • Right to non-discrimination: (CCPA) For exercising your privacy rights

8. Cookies and Tracking

Our website uses cookies to improve user experience for international visitors. You can control cookie settings through your browser. We use:

  • Essential cookies: Necessary for website functionality
  • Analytics cookies: To understand international website usage
  • Marketing cookies: To track international marketing campaign effectiveness
  • Preference cookies: To remember your location and language preferences

9. International Data Transfers

As we handle international cases across the UK, USA, and Canada, your data may be transferred between these countries. We ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses for EU/UK to US/Canada transfers
  • Adequacy decisions where applicable
  • Client consent for specific international transfers
  • Binding corporate rules for intra-group transfers
  • Compliance with international data protection frameworks

10. Changes to This Policy

We may update this privacy policy periodically to reflect changes in international data protection laws. The latest version will always be available on our website. Significant changes will be communicated to existing clients across all jurisdictions.

11. Contact Us

If you have any questions about this privacy policy or how we handle your international data, please contact:

International Data Protection Officer
Irwin Solicitors
45 Legal Chambers, London EC1A 1AA, United Kingdom
Email: privacy@irwinsolicitors.com
UK Telephone: +44 7441 460994
US Telephone: +1 315 203 9741

You may also contact our regional offices:

  • USA Office: 250 Park Avenue, Suite 900, New York, NY 10177
  • Canada Office: 100 King Street West, Suite 5600, Toronto, ON M5X 1C9

12. International Complaints

If you have concerns about our international data handling, you can complain to the relevant supervisory authority in your jurisdiction:

United Kingdom:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: https://www.ico.org.uk

United States:
Various state authorities (California Privacy Protection Agency for CCPA)
Website: https://cppa.ca.gov

Canada:
Office of the Privacy Commissioner of Canada
30 Victoria Street, Gatineau, Quebec K1A 1H3
Telephone: 1-800-282-1376
Website: https://www.priv.gc.ca

Note: This privacy policy does not override our professional duty of confidentiality to clients, which is protected by legal professional privilege in many international jurisdictions. Different legal protections may apply in different countries.