Moss Solicitors LLP (“We”/”Us”) are committed to respecting and protecting your privacy.
This privacy policy, together with our terms of business, explains how We collect, use and process personal data about you. It applies to our clients, website users, marketing contacts and individuals involved in legal matters with Us .
Please read it carefully to understand our approach to personal data and how it will be handled.
Controller and contact details
For the purposes of the UK General Data Protection Regulations and the Data Protection Act 2018, the data controller is Moss Solicitors LLP of 80-81 Woodgate, Loughborough LE11 2XE.
Our Data Protection Officer can be contacted at gdpr@moss-solicitors.co.uk
Categories of data
We process personal data such as name, address, date of birth, contact details, proof of identification (eg passport or driving licence), marital status, third party members (eg family members or other relevant parties), financial information (such as income and expenditure, bank details), employment details (eg salary) and special category data including health and criminal records for anti-money laundering (“AML”) purposes.
Sources of data
Data is collected directly from you (for example, from information that you provide by completing enquiry forms on our website or on our client acceptance forms), legal bodies, public registers, credit agencies and other third parties as necessary for legal compliance.
Lawful bases for processing
We rely on the following lawful bases for processing your data:
- consent (for marketing);
- contract (to provide legal services);
- legal obligation (AML checks); and
- legitimate interests (business operations).
Use of data
We process personal data for any or all of the following purposes:
- improving the way our website content is delivered so that it works more effectively for you and your device;
- supplying information or services that you have requested or which may be relevant to you, where you have agreed to receive such communications;
- meeting our contractual responsibilities to you;
- keeping you informed of updates or changes to our services.
Sharing data
We share data with processors, insurers, auditors, regulators, professional or legal advisors, emergency services, courts and other parties as required by law.
We will ask for your permission if we wish to use your personal data for marketing purposes or if we intend to disclose it to a third party for such purposes (including if we need to share your personal data with third parties outside the UK).
Security measures
We take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy. All information you provide to Us is stored on secure servers.
Whilst We take appropriate measures to protect your personal data, the transmission of information over the internet (such as via an enquiry form on our website) is not entirely secure. Therefore, we cannot guarantee the security of data transmitted to our website and any such transmission is at your own risk. Once your information has been received, We apply strict procedures and security measures to try to prevent unauthorized access (eg implementation of encryption, access controls, secure storage and staff training).
Your data protection rights
You have a number of rights that give you control over how your personal data is used:
- The right to clear and easy to understand information about how we collect, use and store your personal data. This information is set out in this Privacy Policy.
- You can request a copy of the personal data We hold about you. This is sometimes called a data subject access request. It allows you to understand what information We hold, why We use it and to check that We are handling it lawfully. If We are unable to comply with your request, We will explain why.
- If any personal data We hold about you is inaccurate or out of date, you have the right to ask Us to correct it.
- Also known as the right to be forgotten, this allows you to ask Us to delete your personal data. This right only applies in certain situations and is not absolute. We may need to keep some information for legal or regulatory reasons, for example if you are a client or involved in a legal matter. This right applies only to data We hold at the time your request is made.
- In certain situations, you can ask Us to temporarily limit how We use your personal data. This usually applies where there is a specific reason recognised by the Information Commissioner’s Office (“ICO”).
- You can ask to receive the personal data you have given Us in a commonly used, machine-readable format. Where possible, you can also ask Us to transfer this data directly to another organisation.
- In some circumstances, you can object to Us using your personal data. This may apply to all of your data or only to certain types of processing.
- You have rights that protect you from decisions being made about you solely by automated means where those decisions have a significant impact on you. We do not expect to use automated decision-making or profiling.
Cookies
As with most websites, our website uses cookies. We have a separate Cookies Policy and this can be found on our website.
Retention
Generally, client matter files are retained for 6 years after the date of file closure (unless legal obligations require a longer period).
Original property title deeds are retained for 25 years. Wills are retained until after the death of the client and distribution of their estate (or, if applicable, until a new will is made). Alternatively, upon clients’ request, We can send them the original documents.
Please note that We may exercise a lien over any records or documents in our possession until all fees, disbursements and other expenses are paid in respect of all matters that we have carried out on the client’s behalf.
Marketing data is retained until you withdraw consent.
International transfers
If it is necessary to the legal services we are providing to you for your data to be transferred outside the UK, we will ensure that we obtain your prior written consent before any such transfer is made and that we provide appropriate safeguards for the same.
Complaints
If you have concerns or a complaint regarding the way in which your personal data has been handled or you would like to have access to your personal information, please contact our Data Protection Officer first at gdpr@moss-solicitors.co.uk . You can also complain to the ICO at www.ico.org.uk.
Last updated
This policy was last updated on 12th March 2026.
