Privacy Policy
How Kevin Smith Legal collects, uses, stores, and protects your personal data under the UK General Data Protection Regulation and the Data Protection Act 2018.
1. Who is responsible for your data
Kevin Smith Legal is the data controller for personal data processed through this website and in the course of enquiries and engagements. Contact: info@kevinsmithlegal.com, or by post to the address above.
2. What data the practice collects
- Enquiry data: name, email address, country of citizenship or residence, matter type, and the account you choose to provide of what happened.
- Matter data: where you become a client, identification documents, ownership evidence, correspondence, and records necessary to act on your matter.
- Technical data: server logs and, with your consent, anonymised analytics about how the website is used. See the Cookie Policy.
The practice asks you never to submit seed phrases, private keys, passwords, or identity documents through the website forms. If such material is received in error, it is deleted unread wherever practicable.
3. Lawful bases for processing
- Consent: for processing your website enquiry, given through the form declaration.
- Contract: for steps taken at your request before and during an engagement.
- Legal obligation: for anti-money laundering checks, record keeping, and regulatory duties. See the Anti-Money Laundering Policy.
- Legitimate interests: for the security of the website and the practice's records, balanced against your rights.
4. Who your data is shared with
Your data is shared only where necessary and documented:
- Partner professionals instructed on your matter with your knowledge, such as Crypto Justice Legal (Switzerland) or BNG Software (Hong Kong), under separate engagement terms
- Courts, custodians, banks, and authorities where your matter requires it
- Regulators and law enforcement where the law requires it
- Hosting and email providers acting as processors under written terms
The practice does not sell personal data, and it does not share data with marketers.
5. International transfers
Some matters involve partners or custodians outside the United Kingdom. Where personal data is transferred internationally, the practice relies on adequacy regulations or appropriate safeguards such as standard contractual clauses, and transfers only what the matter requires.
6. How long data is kept
Enquiry data that does not lead to an engagement is reviewed and deleted within twelve months. Client and matter records are retained for the periods required by professional regulation and anti-money laundering law, after which they are securely destroyed.
7. Your rights
Under UK GDPR you have the right to request access to your data, rectification, erasure, restriction, portability, and to object to certain processing, subject to legal and professional limitations that apply to a solicitor's records. To exercise any right, write to info@kevinsmithlegal.com. You also have the right to complain to the Information Commissioner's Office, though the practice welcomes the chance to resolve concerns first.
8. Security
The website is served over HTTPS. Enquiry handling is designed around minimal collection: the practice asks for what it needs to assess a matter, and nothing more. Access to matter records is restricted to the solicitor responsible for the file.