Free consultation

0207 458 4790 davidcammack@forwardlaw.co.uk
Enquiry Form

Privacy Policy

Last updated: 8 October 2026

Contents

Table of contents

1. About this policy

This is our privacy policy and it explains how Forward Law Ltd collects, uses and also protects personal information that we obtain when you visit our website, contact us or use our services.

Forward Law Ltd is registered in England and Wales under company number 11762474, with its registered office at 15 Ann Beaumont Way, Hadleigh, Ipswich, Suffolk, IP7 6SA.

References in this policy to Forward Law, we, us and our mean Forward Law Ltd.

For the purposes of UK data protection law, Forward Law Ltd is the controller of the personal information described in this policy.

2. Information we collect

The reality is that the personal information we collect depends on your dealings with us and how you use our website.

Pay attention – This may include:

  • Your name, job title and the organisation you work for.
  • Your email address, telephone number and other contact details.
  • Information provided when you contact us or submit an enquiry through our website.
  • Information about your business and the legal or commercial services you require.
  • Correspondence and other information generated during our relationship with you.
  • Details of the services we provide.
  • Your preferences regarding newsletters and other communications.
  • Technical information about your use of our website, including your IP address, browser and device information, pages visited and interactions with the website.

We do not normally require special category personal data, such as information about your health, ethnicity, religion, political opinions or sexual orientation, through our website. Please do not include this information in an enquiry unless it is necessary.

We do not collect payment card or bank account details through our website.

3. How we collect information

We collect personal information in a variety of ways. These are:

  • Directly from you, when you contact us, submit an enquiry, subscribe to our communications or instruct us to provide services.
  • Through our dealings with you, including correspondence, telephone calls, meetings and work undertaken on your behalf.
  • Automatically through our website, including through cookies and similar technologies.
  • From third parties or publicly available sources, where relevant to an enquiry or the services we provide.

4. How we use your information

As you’d expect from a small team of two seasoned lawyers, David and Stephen use personal information only where we have a lawful basis for doing so. The principal purposes and relevant lawful bases are explained below.

Responding to enquiries

We use your information to respond to enquiries (which we do our best to do promptly), discuss potential engagements, prepare proposals or quotations and take any other steps you request before instructing us.

Our lawful basis will generally be taking steps at your request before entering into a contract. Where an enquiry concerns services for your organisation rather than you personally, we will ordinarily rely on our legitimate interests in responding to business enquiries and developing our business.

Providing our services

Where you instruct us, we use personal information to provide and administer our services, communicate with you, manage our relationship and maintain appropriate records.

Our lawful basis will generally be performing our contract with you or our legitimate interests in providing services to the organisation you represent.

Running our business

The nature of our business means we must collect certain personal data to enable us to work with you or your business. We use personal information for normal business administration, including maintaining records, invoicing, accounting, managing our website and systems, protecting our legal rights and maintaining business security.

We do this where necessary to comply with our legal obligations or in pursuit of our legitimate interests in operating, protecting and administering our business.

Improving our website

We strive to make our website the best it can be – That means we collect information about how visitors use our website to understand traffic and performance, identify issues and improve our content and services.

Depending on the technology and its configuration, we rely on your consent or an applicable exception under the Privacy and Electronic Communications Regulations 2003 (PECR).

Further information is provided in section 8 and our Cookies Policy.

Marketing and newsletters

We may send occasional newsletters (although truth be told not as frequently as we should), legal and business updates and information about our services to clients and business contacts where permitted by law.

For electronic marketing sent to corporate contacts, we will generally rely on our legitimate interests in communicating with businesses that may reasonably be interested in our services.

Where the recipient is an individual subscriber, such as a sole trader or certain types of partnership, we will only send electronic marketing where we have the necessary consent or can rely on an applicable soft opt-in.

You can opt out of marketing communications at any time using the unsubscribe link in our emails or by contacting us.

Opting out will not affect communications necessary for work we are carrying out on your behalf.

5. Who we share your information with

We do not sell your personal information (absolutely never!).

We may share personal information, where reasonably necessary, with:

  • Suppliers providing website hosting, IT, email, cloud storage, communications and other technology services.
  • Providers supporting website operation, analytics and marketing.
  • Providers managing and distributing newsletters and other communications.
  • Accountants, insurers, professional advisers and other suppliers supporting our business.
  • Courts, regulators, government bodies and law enforcement authorities, where disclosure is required or appropriate.
  • Other organisations in connection with a sale, merger, restructuring or transfer of all or part of our business.

Where an organisation processes personal information on our behalf, we require it to protect that information and use it only for the purposes for which it was provided.

6. International transfers

Some of our technology providers may store or process personal information outside the United Kingdom. Like most businesses, we rely on cloud services from organisations like Microsoft and Google.

Where personal information is transferred internationally, we take appropriate steps to ensure it remains protected in accordance with UK data protection law.

Depending on the destination and provider, this may include relying on UK adequacy regulations or contractual safeguards approved or recognised under UK data protection law.

You can contact us for further information about the safeguards applicable to a particular transfer.

7. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including meeting legal, accounting and record-keeping requirements and protecting our legal rights.

As a general approach:

  • Client records: Information relating to client work will normally be retained for an appropriate period following completion of the engagement.
  • Enquiries: Information relating to enquiries which do not lead to an engagement will be retained only for as long as reasonably necessary to deal with the enquiry and any subsequent contact.
  • Marketing: Information relating to marketing communications will be retained while relevant to our business relationship with you or until you opt out.
  • Opt-outs: Where you unsubscribe from marketing, we may retain limited information on a suppression list to ensure your preferences are respected.

We may retain information for longer where required by law or where there is another legitimate reason to do so.

8. Cookies and similar technologies

Our website uses cookies and similar technologies to operate securely, understand how visitors use the website and, where enabled, support our marketing activities.

Cookies (not the type you snack on) are small files stored on your computer, phone or other device when you visit a website. Similar technologies may store or access information on your device or recognise your browser.

Our use of these technologies falls into the following categories.

Essential and security technologies

We use technologies necessary to operate and protect our website, remember your privacy preferences and prevent spam, fraud and automated activity.

These may include technologies provided by our website platform, cookie management system and security providers.

Where these technologies are strictly necessary to provide the website or a service you have requested, your consent is not required.

Analytics

Like we said we aim to make sure our website provides a great user experience. That means we must understand how people use it – We use Google Analytics 4 (GA4) to understand how visitors use our website, including which pages are viewed, how visitors navigate between them and how the website performs.

Google Analytics uses cookies, including _ga and related identifiers, to produce website statistics.

We rely on the statistical purposes exception under PECR, as amended by the Data (Use and Access) Act 2025, for qualifying analytics cookies. This permits their use without prior consent where the relevant conditions are met, including providing clear information and a simple, free way to object.

Where analytics activities fall outside this exception, we will obtain consent before using the relevant technologies.

We also use Google Tag Manager to manage website tags. It does not itself set cookies, although services deployed through it may do so.

Further information, including how to object to analytics cookies, is provided in our Cookies Policy.

Embedded content

Some pages may contain content hosted by third parties, including YouTube videos – you’ll likely see David and Stephen in many of those.

We use YouTube’s privacy-enhanced embedding mode. Videos do not load until you choose to play them.

Once activated, the relevant provider may collect information about your interaction with the content and use cookies or similar technologies for its own purposes.

Where other embedded content requires consent, we will obtain it before activating the relevant technologies.

Advertising and marketing technologies

We do not currently use advertising cookies, but intend to introduce technologies including Google Ads conversion tracking, the LinkedIn Insight Tag and the Meta Pixel.

These technologies may be used to:

  • Measure whether advertising generates website visits and enquiries.
  • Assess advertising performance and conversions.
  • Understand how visitors interact with our website.
  • Create and refine advertising audiences, including for remarketing where enabled.

Advertising and marketing technologies requiring consent will only be activated where you have accepted them through our cookie controls.

Newsletter technologies

We use, or may use, third-party email marketing services to manage subscriptions, distribute newsletters and assess engagement with our communications.

Emails may contain technologies which indicate whether they have been delivered or opened, or whether links have been selected.

We use these technologies only where permitted by applicable data protection and electronic communications laws.

For further details about the cookies and similar technologies used on our website, please refer to our Cookies Policy or contact us if you have any niggling specific questions you want to ask.

9. Managing cookies and your choices

When you first visit our website, you will be provided with information and choices about cookies and similar technologies, where required by law. Most of us click ‘accept all’ but you have the option to decline.

Our cookie controls allow you to accept or reject optional technologies and change your preferences at any time.

Where we rely on a statutory exception rather than consent, we provide the information and means of objecting required by law.

You can also manage or delete cookies through your browser settings. Blocking certain cookies may affect how parts of the website operate.

You can review or change your choices at any time using the Cookie settings link in the footer of our website.

Further information is available in our Cookies Policy.

10. Third-party websites and services

Our website may contain links to websites and services operated by third parties. We do our best to make sure that they are to reliable information-worthy locations.

We are not responsible for how those organisations collect or use personal information. If you follow an external link or interact with a third-party service, we recommend reviewing the relevant provider’s privacy policy.

11. Keeping your information secure

We take appropriate technical and organisational measures to protect personal information against accidental or unlawful loss, misuse, alteration, disclosure or unauthorised access.

Access is restricted to those who reasonably require the information for the purposes described in this policy, including relevant service providers.

Although no method of transmitting or storing information is entirely secure, we take reasonable precautions appropriate to the information we hold and the risks involved.

12. Your rights

Yes, you do have rights! UK data protection law gives you certain rights in relation to your personal information.

Depending on the circumstances, these may include the right to:

  • Access: Request a copy of the personal information we hold about you.
  • Rectification: Ask us to correct inaccurate or incomplete information.
  • Erasure: Request deletion of your information in certain circumstances.
  • Restriction: Ask us to restrict how we use your information.
  • Objection: Object to certain uses of your information, including direct marketing.
  • Data portability: Receive certain information you have provided to us in a portable format.
  • Withdrawal of consent: Withdraw consent where we rely on it to process your information.
  • Complaints: Raise a complaint about how we use your personal information.

These rights are subject to the conditions and exceptions set out in data protection law and will not apply in every case.

If you wish to exercise any of your rights, please contact us using the details in Contact us below.

You will not normally be required to pay a fee. We may ask for information reasonably necessary to verify your identity and deal with your request.

13. Complaints

We are a friendly pair, so if you have concerns about how we use your personal information, please contact us in the first instance so that we can seek to resolve them.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Further information about the ICO and its complaints procedure is available at www.ico.org.uk.

14. Changes to this policy

Keep your eyes peeled as we may update this policy from time to time, including where we change our services, website technologies or service providers.

The current version will be published on our website, with the date of the latest update shown at the beginning of the policy.

15. Contact us

If you have any questions about this policy, how we use your personal information or your data protection rights, please contact:

Forward Law Ltd
50 Liverpool Street
London
EC2M 7PY

Telephone: 0207 458 4790

Email: stephenavila@forwardlaw.co.uk

Registered office: 15 Ann Beaumont Way, Hadleigh, Ipswich, Suffolk, IP7 6SA

Company number: 11762474