Privacy Notice

1. When this Privacy Notice applies

This Privacy Notice (“Notice”) applies when we collect, use, store, or share your personal data.  It also describes the rights you can exercise in respect of your personal data.

2. About Us

Digiphile Services Limited (“Digiphile”) is a company registered in England and Wales. Our registered office is at 86-90 Paul Street, London, EC2A 4NE. Our company registration number is 14179817.

Digiphile is a law firm regulated and authorised by the Solicitors Regulation Authority under SRA number 8001623.

We are also registered as a data controller with the Information Commissioner’s Office. Our registration number is ZB383476.

3. Contact us

If you have any questions about our use of your personal data, or wish to exercise any of your data protection rights, please contact us using the details below:

  • Email [email protected], or
  • Write to us at Digiphile Services Limited, 86-90 Paul Street, London, EC2A 4NE, United Kingdom.

4. What personal data do we collect and use?

We collect and use the following types of personal data for the following reasons:

Who?What?Why?Lawful basis
Clients

Name, contact details, financial information (e.g. payment details), identity information (e.g. photo IDs), and any information the client provides to us when seeking legal advice (which may include personal data relating to third parties).

Clients may provide us with personal data that is considered “sensitive” or “special category data” under applicable data protection laws when seeking legal advice (i.e. data relating to an individual’s health, race or ethnicity, political opinions, religious or philosophical beliefs, trade union membership, sex life or sexual orientation, genetic data or biometric data).

We use this data to perform client verification checks and to provide legal advice to our clients.

If clients subscribe to our marketing, we will also use their contact details to send marketing communications.

When we use this data to perform client verification checks and provide legal advice, legitimate interests.

If we need to use “special category data” to provide legal advice, we will do so only where permitted by data protection law – for example, with the data subject’s explicit consent, where the data has been manifestly made public by the data subject, or where necessary to exercise, establish or defend legal claims.

When we use this data to send marketing communications, consent.

Website visitorsOur website servers may automatically receive certain information about your device, including your IP address, browser type, device type and similar technical information.We use this data to ensure our website is rendered correctly to you. We do not collect website analytics or engage in targeted advertising.When we use this data to operate our website, legitimate interests.
Other third partiesClients may disclose information about third parties when seeking legal advice from us. The specific personal data we receive is determined solely by the client, and may include personal data that is deemed “sensitive” or “special category data” under applicable data protection laws.We use this data to provide legal advice to our clients.

When we use this data to provide legal advice, legitimate interests.  

If we need to use “special category data” about third parties to provide legal advice, we will do so only where permitted by data protection law – for example, with the data subject’s explicit consent, where the data has been manifestly made public by the data subject, or where the processing is necessary to exercise, establish or defend legal claims.

5. Who do we share personal data with?

We may disclose your personal data:

  • to our third party service providers, such as IT hosting providers, email providers and data backup providers, under strict contractual terms that protect the personal data in accordance with data protection law;
  • to law enforcement, judicial or regulatory authorities if we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
  • to a potential buyer (and its agents and advisers) in connection with any proposed purchase of any part of our business. We will inform the buyer to use your personal data only for the purposes set out in this Notice; and
  • to any other person if you have consented.

6. International transfers

Some of the service providers we use may be located outside the United Kingdom and European Economic Area (“EEA”).  This means that the personal data we collect may be transferred to non-UK and non-EEA countries where our service providers are located.

Where we can, we use service providers in countries that have adequate data protection laws (as recognised by the UK and EU authorities) or who agree to process our data in the UK or EEA. Where this is not possible, we implement appropriate safeguards with our service providers, such as the International Data Transfer Addendum or International Data Transfer Agreement (issued by the UK Information Commissioner) and the EU Standard Contractual Clauses (adopted by the European Commission).

7. How long we store personal data

We will store the personal data we collect for as long as we have an ongoing legitimate need to do so (for example, to provide you with legal advice or to comply with applicable legal, tax or accounting requirements).

When we have no ongoing legitimate need to use your personal data, we will either delete or anonymise it or, if this is not possible (for example, because your personal data is stored in backup archives), we will securely store your data and isolate it from any further processing until deletion is possible.

8. Your rights

You have the following rights:

  • You can ask to accesscorrectupdate, delete or port your personal data.
  • You can object to our use of your personal data, or ask us to restrict use of your personal data.
  • You have the right not to have automated decisions made about you.
  • If we collect and use your personal data with your consent, you can withdraw your consent at any time.
 
You can exercise any of the rights above by emailing [email protected] or writing to us at the postal address given above in this Notice.  

 

In addition:

  • You can opt-out of marketing at any time, by clicking the “unsubscribe” or “opt-out” link in any marketing e-mails we send you. Alternatively, you can email us at [email protected] or write to us at the postal address given above.  
  • You can complain to a data protection authority about our use of your personal data. Contact details for the ICO, the UK’s data protection authority, are available here. Contact details for data protection authorities in the European Economic Area, are available here.
 

We respond to all requests received from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

9. We don’t use cookies (unless they are strictly necessary)

We don’t use any cookies or similar tracking technologies unless they are strictly necessary to make our website work. This means we don’t use cookies for analytics or advertising purposes.

10. Updates

We may update this Notice from time to time. We may do this if it is necessary, for example, to respond to legal, technical or business developments. When we update our Notice, we will take appropriate measures to inform you (for example, for minor changes, we will post an updated notice on our site).

This Notice was last updated 4 September 2025.