Privacy Policy

SALAW Associates LLP ("the firm", "we", "us") is the controller of the personal information described in this policy. Our contact details are set out at the end of this page and on our contact page.

This policy covers information collected through this website and information you provide when enquiring about or receiving legal services. Information you give us in the course of an engagement is additionally protected by professional privilege and our duty of confidentiality, which are stricter than anything set out here.

Information you give us

• Identity and contact details: name, email address, telephone number, and organisation where relevant.
• Enquiry content: the description of your matter, the parties involved, and any documents you later provide.
• Engagement information: instructions, correspondence, and the records required to run your matter.
• Recruitment information: CVs, covering notes and application materials sent to our careers address.

Information collected automatically

• Technical data: IP address, browser type and version, device type, and operating system.
• Usage data: pages visited, time on page, and the referring source.

We do not use advertising cookies or third-party tracking pixels on this site. Any analytics we operate is configured to collect aggregate usage data only, without cross-site identifiers.

• To respond to your enquiry and carry out the conflict check required before we can advise you.
• To provide legal services and to administer the engagement, including billing.
• To comply with legal, regulatory and professional obligations, including anti-money-laundering and client-identification requirements.
• To maintain the security and integrity of our systems.
• To assess applications for employment.

We do not sell personal information. We do not use enquiry content for marketing, and we do not add enquirers to a mailing list unless they ask to be added.

Where a legal-basis framework applies to your information, we rely on: performance of a contract (to provide the services you have instructed); legitimate interests (to respond to enquiries, run conflict checks and secure our systems); legal obligation (to meet statutory, regulatory and professional requirements); and consent (where you have opted in to receive something from us, which you may withdraw at any time).

We disclose personal information only where it is necessary, and only to:

• Counsel, experts, agents and local correspondents instructed on your matter, on your authority.
• Courts, tribunals, registries and regulators, where required to conduct your matter or comply with the law.
• Service providers who host our systems or provide document, email and practice-management infrastructure, under written confidentiality and data-processing terms.
• Auditors and professional indemnity insurers, where required.

We do not disclose privileged or confidential client information except where you have authorised it or where disclosure is compelled by law or by a professional obligation. Where we are compelled, we will tell you unless we are prohibited from doing so.

• Encryption of data in transit and at rest across our systems.
• Access control by matter, so that only the team working on your file can open it.
• Additional internal restrictions on family, criminal and other sensitive matters.
• Multi-factor authentication on all firm accounts, and device-level controls on firm hardware.
• Periodic review of access rights and of our third-party processors.

No transmission over the internet is completely secure. Please do not send confidential documents through the website enquiry form; wait until an engagement is in place and we have provided a secure channel.

We retain client files for the period required by professional rules and applicable limitation periods, and then destroy them securely. Enquiries that do not become engagements are retained only for as long as needed to maintain our conflict-check records. Recruitment materials are retained for twelve months unless you ask us to delete them sooner.

Subject to the law that applies to you, you may have the right to request access to your personal information, to have inaccurate information corrected, to request erasure, to object to or restrict certain processing, to receive your information in a portable format, and to withdraw consent where processing is based on it.

Some of these rights are limited where the information is subject to professional privilege, to a legal-retention obligation, or to the confidentiality we owe another client. Where we cannot give effect to a request, we will explain why.

To make a request, write to us using the details below. We will respond within the period required by applicable law, and in any event within one month of verifying your identity.

Some of our infrastructure providers process data outside the jurisdiction in which the firm is based. Where information is transferred, we require appropriate contractual safeguards from the provider and satisfy ourselves that the protection travelling with the data is adequate.

We review this policy periodically and will publish any updated version on this page with a revised date. Material changes affecting existing clients will be notified directly.

Questions about this policy, or requests relating to your information, should be addressed to counsel@salawassociates.com, or by post to SALAW Associates LLP, Level 12, Meridian Tower, 8 Camden Avenue, Central Business District.

If you are not satisfied with our response, you may be entitled to complain to the data-protection supervisory authority in your jurisdiction.