Privacy Policy

Effective date: 31 July 2026
Last updated: 31 July 2026

1. Who we are

Review A Solicitor is an online solicitor directory, review and comparison platform operated by:

In this Privacy Policy, “Review A Solicitor”, “we”, “us” and “our” refer to UK REAL REVIEWS LTD.

For the purposes of the UK General Data Protection Regulation, the Data Protection Act 2018 and other applicable UK data-protection legislation, UK REAL REVIEWS LTD is the controller of the personal information described in this policy unless we state otherwise.

2. About Review A Solicitor

Review A Solicitor helps members of the public find, research, compare and contact solicitors, law firms and other legal service providers.

Directory profiles may contain:

• regulatory and authorisation information;
• firm and office details;
• information about solicitors and other legal professionals;
• areas of legal practice;
• professional biographies;
• contact information;
• maps and location information;
• reviews and ratings;
• firm replies;
• information supplied by authorised firm representatives; and
• other relevant public or licensed business information.

Law firms and authorised representatives may be able to claim and manage Firm Profiles, publish additional information or purchase enhanced services.

Review A Solicitor is independent from the Solicitors Regulation Authority. We are not a law firm and do not provide legal advice.

3. When this Privacy Policy applies

This Privacy Policy applies when you:

• visit or search the site;
• view a solicitor or law firm profile;
• create or use an Account;
• submit a Review, rating or reply;
• claim or manage a Firm Profile;
• submit information for publication;
• send an enquiry to a Firm;
• use a contact form, messaging or live-chat feature;
• purchase or enquire about a paid service;
• subscribe to marketing communications;
• report Content or make a complaint;
• exercise a data-protection right; or
• otherwise communicate or interact with us.

This policy also applies where we obtain professional or business information about you from a public, regulatory or authorised third-party source.

4. Our role and the roles of other organisations

4.1 UK REAL REVIEWS LTD

UK REAL REVIEWS LTD is generally the controller of personal information collected and used to operate Review A Solicitor.

This means that we decide why and how that information is processed.

4.2 Law firms receiving enquiries

Where you ask us to send your details to a Firm, we are responsible for collecting and transmitting the enquiry through our site.

Once the Firm receives your information, the Firm will generally act as an independent controller and will be responsible for how it uses that information. Its own privacy policy should explain its processing.

4.3 Solicitors Regulation Authority

The Solicitors Regulation Authority is responsible for the personal and regulatory information contained in its own systems and records.

Review A Solicitor is separately responsible for how SRA-derived information is collected, combined, displayed and otherwise used on our site.

4.4 Google and other third parties

Google, payment providers, map providers, social-media platforms, law firms and some other third parties may act as independent controllers when they collect or receive information through their own services.

4.5 Service providers acting for us

Some organisations process personal information on our behalf as data processors. These organisations must follow our instructions, protect the information and use it only to provide the contracted service.

5. Personal information we collect

The information we collect depends on how you interact with Review A Solicitor.

5.1 Website usage and technical information

When you access or use the site, we may collect:

• your Internet Protocol address;
• browser type and version;
• device type and operating system;
• approximate geographical location derived from your IP address;
• referring website, advertisement or search engine;
• pages viewed and links selected;
• directory searches, search terms and filters used;
• date and time of visits;
• session duration and navigation paths;
• cookie identifiers and consent preferences;
• login, authentication and security information;
• error, diagnostic and performance information; and
• information about interactions with Firm Profiles, forms and site features.

This information may be collected through server logs, cookies, analytics services and similar technologies.

5.2 Account information

When you create or use an Account, we may collect:

• your name;
• display name or username;
• email address;
• telephone number;
• password in securely hashed or encrypted form;
• Account identifier;
• Account type and permissions;
• organisation or Firm represented;
• Account creation and modification dates;
• Account preferences and administrative settings;
• marketing preferences;
• verification information;
• Account login and activity records; and
• records of suspension, closure or enforcement action.

5.3 Reviewer information

When you submit or manage a Review, we may collect:

• your name or chosen public display name;
• email address;
• Account details;
• the Firm reviewed;
• your written Review and star rating;
• the date and time of submission;
• information about your relationship with the Firm;
• evidence supplied to verify your experience;
• records of edits, reports, challenges or moderation decisions;
• technical information associated with the submission;
• communications concerning the Review; and
• information used to identify suspicious, duplicated or manipulated Reviews.

Your email address, verification evidence and technical information will not ordinarily be published as part of the Review.

The display name, Review, rating and publication date may be publicly visible.

5.4 Information contained in Reviews and replies

A Review, Firm reply or complaint may contain personal information about:

• the reviewer;
• a solicitor or other Firm employee;
• a client or prospective client;
• a witness;
• another professional;
• an opposing party; or
• another person connected with a legal matter.

Please do not include confidential, legally privileged, excessive or unnecessary personal information in a public Review or reply.

Firms should not disclose confidential client information when responding to a Review, even where the reviewer has referred to that information first.

5.5 Solicitor and legal-professional information

Directory profiles may contain professional information relating to solicitors, law firm employees, managers, owners, partners, directors and other legal professionals.

This may include:

• name and professional title;
• job title, role or position;
• the Firm or organisation with which the person is associated;
• SRA number or another professional identifier;
• regulatory and authorisation status;
• professional qualifications and accreditations;
• areas of practice and professional specialisms;
• office location;
• professional telephone number and email address;
• professional biography and career information;
• languages spoken;
• publicly available regulatory conditions or decisions;
• photographs and profile images;
• information supplied by the professional or Firm; and
• other relevant professional information from lawful public or authorised sources.

Professional information may still be personal data even where it relates to a person’s working life.

5.6 Information obtained from the Solicitors Regulation Authority

Some directory information is obtained from data made available by the Solicitors Regulation Authority through its data services, professional registers and public resources.

This may include:

• Firm and office names;
• SRA numbers;
• authorisation and regulatory status;
• office addresses and contact information;
• trading names and previous names;
• areas of legal practice;
• reserved legal activities;
• company information;
• office and branch information; and
• information relating to regulated individuals.

More information about the source is available in the SRA firm data attribution statement.

The SRA does not endorse Review A Solicitor or our use of its data.

5.7 Public business and location information

We may collect information from lawful public or appropriately licensed sources, including:

• Firm names and trading names;
• office addresses;
• telephone numbers;
• email addresses;
• website addresses;
• opening hours;
• geographical coordinates and map locations;
• areas served;
• business descriptions;
• professional biographies;
• logos and other business images;
• public ratings and Reviews where their use is permitted; and
• other publicly displayed professional information.

Sources may include Firm websites, professional registers, public business directories, mapping services and information provided directly by the Firm.

5.8 Profile claims and Firm administration

When a Firm or representative claims or manages a Firm Profile, we may collect:

• the representative’s name;
• work email address;
• work telephone number;
• job title or position;
• the Firm or organisation represented;
• proof of identity where reasonably required;
• evidence that the person is authorised to act for the Firm;
• communications relating to verification;
• profile descriptions and information submitted for publication;
• photographs, logos and media files;
• Account permissions and administrative settings; and
• records of changes made to the Firm Profile.

We may contact a Firm using independently verified contact information before approving a profile claim.

5.9 Enquiries sent to Firms

Where the site allows you to contact a Firm, request a call or submit a legal-service enquiry, we may collect:

• your name;
• email address;
• telephone number;
• preferred contact method or time;
• the Firm you wish to contact;
• the type of legal assistance requested;
• the contents of your enquiry;
• attachments or supporting information;
• your consent and communication preferences;
• technical information associated with the form submission; and
• records showing that the enquiry was transmitted.

5.10 Correspondence and complaints

When you contact us, make a complaint, report Content or exercise a legal right, we may collect:

• your name;
• email address;
• telephone number;
• postal address;
• the organisation you represent;
• the contents of your message;
• relevant profile, Review, Account or page information;
• attachments and supporting evidence;
• proof of identity or authority;
• records of our investigation and response; and
• subsequent correspondence.

5.11 Payments, advertising and subscription information

If we offer paid profiles, advertising, subscriptions or other paid services, we may collect:

• billing name and address;
• business or Firm name;
• purchase, advertising or subscription details;
• transaction dates and amounts;
• invoices and payment status;
• VAT and accounting information;
• limited payment-method information supplied by the payment provider;
• records of refunds, disputes or chargebacks; and
• communications concerning payment or the service.

Complete card information will normally be collected and processed directly by the payment provider. We do not ordinarily receive or store complete payment-card numbers or security codes.

5.12 Marketing information

Where you subscribe to updates or where we are otherwise legally permitted to send marketing communications, we may collect:

• your name;
• email address;
• telephone number;
• Firm or business name;
• professional role;
• marketing interests and preferences;
• the source and date of consent;
• information about marketing interactions; and
• records of unsubscribe requests and objections.

5.13 Security, moderation and fraud-prevention information

We may collect and generate information to protect Review A Solicitor and its users, including:

• IP addresses and device identifiers;
• login and authentication records;
• failed login attempts;
• Account activity patterns;
• duplicate Review indicators;
• records of reports and moderation decisions;
• information about suspected false or incentivised Reviews;
• information about unauthorised profile claims;
• spam and malware indicators;
• security incident records; and
• information supplied by users, Firms, regulators or law-enforcement authorities.

6. Special-category and criminal-offence information

6.1 Special-category information

Special-category information receives additional protection under data-protection law. It includes information concerning:

• health;
• racial or ethnic origin;
• religious or philosophical beliefs;
• political opinions;
• trade-union membership;
• genetic information;
• biometric information used for identification;
• sex life; and
• sexual orientation.

Review A Solicitor does not generally need this information to operate ordinary Accounts or directory profiles.

However, special-category information may appear in:

• a Review describing a legal matter;
• an enquiry submitted to a Firm;
• a complaint or moderation report;
• verification evidence;
• public professional or regulatory information; or
• information relevant to a legal claim.

Where we process special-category information, we will identify both an Article 6 lawful basis and an additional condition required by Article 9 of the UK GDPR.

Depending on the circumstances, the additional condition may include:

• your explicit consent;
• information manifestly made public by the person concerned;
• processing necessary for the establishment, exercise or defence of legal claims;
• processing necessary to protect vital interests where the legal conditions apply; or
• another condition permitted by applicable data-protection law.

We may redact, restrict or remove unnecessary sensitive information from publicly submitted Content.

6.2 Criminal-offence information

Reviews, complaints, regulatory information or correspondence may contain information concerning alleged or proven criminal offences, investigations, proceedings or related security measures.

We process criminal-offence information only where:

• the processing has an appropriate Article 6 lawful basis;
• the processing is authorised by UK law;
• an applicable condition or exemption is satisfied; and
• appropriate safeguards are used.

We may remove unsupported, excessive or unlawful allegations from public Content.

7. Where we obtain personal information

We may obtain personal information:

• directly from you;
• from another person acting with your authority;
• from a Firm or organisation you represent;
• from another authorised Firm representative;
• from reviewers and other site users;
• from the Solicitors Regulation Authority;
• from another legal or professional regulator;
• from professional registers and public records;
• from Firm and professional websites;
• from public business listings and mapping services;
• from publicly available professional profiles;
• from search engines;
• from appropriately licensed data providers;
• from payment, hosting, analytics and security providers;
• from regulators, courts and law-enforcement authorities; and
• automatically when you use the site.

Where information has not been obtained directly from you, we process it only where we have an appropriate lawful basis and where its use is fair, necessary and compatible with your rights and reasonable expectations.

8. How we use personal information

We may use personal information to:

• operate and maintain Review A Solicitor;
• create and maintain solicitor and Firm Profiles;
• display professional and regulatory information;
• help users research and compare legal service providers;
• publish, administer and moderate Reviews and replies;
• verify Review authenticity where appropriate;
• calculate and display ratings;
• allow Firms to claim and manage profiles;
• verify that a person is authorised to act for a Firm;
• process profile corrections and updates;
• provide Account and profile-management functionality;
• transmit enquiries to Firms;
• provide messaging or live-chat functionality where available;
• respond to questions and support requests;
• investigate reports, disputes and complaints;
• process data-protection requests;
• provide paid profiles, advertising or subscription services;
• process payments, invoices and refunds;
• send operational communications;
• send marketing communications where legally permitted;
• analyse and improve the site;
• understand how searches, profiles and other features are used;
• prevent fraud, Review manipulation and unauthorised profile claims;
• maintain site, Account and information security;
• keep appropriate business and compliance records;
• obtain insurance and professional advice;
• establish, exercise or defend legal claims;
• comply with legal, regulatory, accounting and tax obligations;
• respond to courts, regulators and law-enforcement authorities; and
• enforce our terms, policies and contractual rights.

9. Our lawful bases for processing

We must have a lawful basis whenever we process personal information. The lawful basis depends on the purpose and circumstances of the processing.

9.1 Legitimate interests

We rely on legitimate interests where processing is necessary for our interests or those of another person, provided those interests are not overridden by the individual’s rights and freedoms.

Our legitimate interests include:

• operating an accurate, accessible and useful directory;
• helping consumers find and research regulated legal-service providers;
• making public professional and regulatory information easier to locate and understand;
• facilitating genuine consumer Reviews;
• helping Firms maintain accurate profiles;
• verifying profile claims and preventing impersonation;
• detecting fraudulent, fabricated or manipulated Reviews;
• maintaining network, Account and information security;
• improving the site and understanding how it is used;
• communicating with users, Firms and business contacts;
• handling complaints and disputes;
• protecting users and the public from misleading information;
• maintaining appropriate business records; and
• protecting our business and legal rights.

Where we rely on legitimate interests, we consider:

• the purpose of the processing;
• whether the processing is necessary;
• the type and source of the information;
• what the individual would reasonably expect;
• the effect on the individual;
• whether less intrusive means are available; and
• the safeguards that can reduce any privacy impact.

9.2 Contract

We may process personal information where this is necessary to enter into or perform a contract with you, including to:

• create and administer an Account;
• process a Firm Profile claim;
• provide a paid or enhanced directory service;
• provide advertising or subscription services;
• manage a purchase or payment;
• provide customer support relating to a contracted service; or
• take steps you request before entering into a contract.

9.3 Legal obligations

We may process personal information where necessary to comply with:

• data-protection law;
• tax and accounting rules;
• company law;
• court orders;
• regulatory requirements;
• lawful requests from public authorities; or
• another legal obligation that applies to us.

9.4 Consent

We may rely on consent for:

• certain marketing communications;
• non-essential cookies and similar technologies;
• optional analytics, advertising or personalisation services;
• optional embedded third-party services; or
• processing sensitive information where explicit consent is the appropriate condition.

You may withdraw consent at any time. Withdrawal will not affect processing that lawfully took place before consent was withdrawn.

9.5 Vital interests

In exceptional circumstances, we may process or disclose information where this is necessary to protect someone’s life or physical safety and the applicable legal conditions are satisfied.

10. Public directory profiles and Reviews

Solicitor and Firm Profiles are intended to be publicly available.

Information displayed publicly may be:

• viewed by site visitors;
• indexed by search engines;
• cached or archived by third parties;
• quoted or linked to by other websites;
• included in search-engine results; or
• shared through the site’s ordinary sharing functionality.

Publicly visible information may include:

• professional and regulatory information;
• Firm and office details;
• professional biographies and images;
• Review display names;
• Review text and star ratings;
• Firm replies;
• aggregate ratings; and
• the date of publication or update.

We take reasonable steps to distinguish between:

• information obtained from official or public sources;
• information supplied directly by a Firm;
• user-generated Content; and
• information generated by Review A Solicitor.

Removing information from Review A Solicitor will not necessarily remove copies already cached, archived or republished by an independent third party. Search engines may take additional time to update their results.

11. Accuracy and correction of directory information

We want directory information to be accurate and current.

A solicitor, Firm or authorised representative may ask us to correct inaccurate or incomplete personal information.

Correction requests should be sent to info@reviewasolicitor.co.uk and should include:

• the URL of the relevant profile;
• a clear description of the alleged error;
• the correct information;
• evidence supporting the correction where appropriate; and
• confirmation of the requester’s connection to the person or Firm.

Where information originates from the SRA or another official register, we may:

• check the applicable official source;
• ask the individual or Firm to update the source record;
• wait for corrected source information to become available;
• temporarily mark information as disputed; or
• correct information ourselves where it is appropriate and lawful to do so.

Claiming a profile does not necessarily allow a Firm to alter information obtained from an official regulatory source.

12. Enquiries sent to law firms

Where you ask us to send an enquiry to a Firm, we will use your information to:

• receive and record the request;
• identify the selected or relevant Firm;
• transmit the enquiry;
• confirm that the enquiry has been sent;
• detect spam, fraud or misuse;
• provide technical support;
• investigate complaints; and
• maintain appropriate service records.

The receiving Firm will use your information under its own privacy policy and professional obligations.

We cannot guarantee:

• that a Firm will respond;
• how quickly it will respond;
• that it will accept your matter;
• that no conflict of interest exists; or
• that a solicitor-client relationship will be formed.

If a legal deadline may be approaching, you should contact an appropriate Firm directly and should not rely solely on an online enquiry.

13. Who we share personal information with

We may share personal information with:

• Firms that you ask us to contact;
• website-hosting and cloud-infrastructure providers;
• content-delivery and performance providers;
• cybersecurity, spam-detection and fraud-prevention providers;
• email, communications and customer-support providers;
• Account authentication providers;
• analytics and website-performance providers;
• payment and subscription providers;
• mapping and location-service providers;
• moderation and verification service providers;
• professional advisers, including accountants, insurers and solicitors;
• debt-recovery providers where appropriate;
• regulators, courts, tribunals and law-enforcement authorities;
• government departments and other public authorities;
• prospective buyers, investors and advisers involved in a sale, merger, financing or restructuring; and
• another person where you have asked or authorised us to make the disclosure.

Service providers processing information on our behalf are required to:

• use the information only for the agreed service;
• follow our lawful instructions;
• protect the information appropriately;
• maintain confidentiality; and
• assist us with relevant data-protection obligations.

We may also disclose information where reasonably necessary to:

• comply with a law, court order or regulatory requirement;
• respond to a lawful request from a public authority;
• investigate fraud, crime, security incidents or misuse;
• protect a person from serious harm;
• enforce our Terms and Conditions or other agreements;
• protect the rights, safety or property of us, our users or another person; or
• establish, exercise or defend a legal claim.

We do not sell personal information.

14. Payment providers

Payments for subscriptions, advertising or other services may be processed by an independent payment provider.

We will share payment-related information only to the extent needed to:

• process a payment;
• confirm payment status;
• issue an invoice or receipt;
• process a refund;
• deal with a payment query or complaint;
• investigate fraud; or
• manage a chargeback or payment dispute.

The payment provider will process card and payment information under its own privacy policy.

15. Google Maps, Google Reviews and third-party services

The site may use Google Maps, Google Places, Google Analytics or other Google services to display locations, measure site use or provide related functionality.

Some Firm Profiles may also contain ratings, Reviews, photographs or business information supplied by Google or another third party.

When a map, video, social-media feature or other embedded service loads, its provider may receive:

• your IP address;
• browser and device information;
• cookie or device identifiers;
• the page you visited;
• your approximate location; and
• information about your interaction with the service.

Google and other independent providers process information under their own policies.

Further information about Google is available through:

• Google’s Privacy Policy;
• Google’s Terms of Service; and
• Google’s information about its use of data from partner sites.

Where consent is legally required before a non-essential third-party service is loaded, we will seek that consent through our cookie or privacy controls.

16. Links to third-party websites

Firm Profiles and other pages may contain links to:

• law firm websites;
• regulatory websites;
• government services;
• social-media accounts;
• mapping providers;
• review providers; and
• other external services.

We do not control independent third-party websites and are not responsible for their privacy practices.

Visiting an external website is subject to that website’s own privacy policy and terms.

17. International transfers

Some organisations that provide hosting, analytics, email, security, payment, mapping or other services may store or process personal information outside the United Kingdom.

Where a restricted international transfer takes place, we will use a legally recognised transfer mechanism where required.

Depending on the country and provider, this may include:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to the European Commission’s standard contractual clauses;
• binding corporate rules;
• another appropriate safeguard; or
• a limited exception permitted by UK data-protection law.

Where appropriate, we will assess whether additional contractual, technical or organisational safeguards are needed.

Information that you deliberately submit for public publication may be accessible through the internet from countries around the world. We cannot control all subsequent use of publicly available information by independent third parties.

18. How long we keep personal information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

We consider:

• the amount, nature and sensitivity of the information;
• the purpose for which it is used;
• whether that purpose can be achieved in another way;
• legal and regulatory requirements;
• contractual and accounting obligations;
• complaint and dispute-resolution periods;
• fraud and Review-manipulation risks; and
• the time limits for bringing or defending legal claims.

Our usual retention approach is:

• Public solicitor and Firm information:
  for as long as the information remains relevant to the directory, remains available through an applicable official or public source, or its continued publication is otherwise justified.
• Published Reviews and replies:
  for as long as the Content remains published. Records may be retained for up to six years after removal where necessary for complaints, fraud prevention, legal claims or regulatory purposes.
• Review verification information:
  only for as long as reasonably necessary to verify the Review, address a challenge, prevent manipulation or comply with legal obligations.
• Account and claimed-profile information:
  for the duration of the Account or business relationship and normally for up to six years after closure or termination where needed for contractual, dispute, security or legal purposes.
• Profile claim evidence:
  for as long as required to verify and administer the claim, and for an appropriate period afterwards to prevent unauthorised claims and resolve disputes.
• Legal-service enquiries:
  for the period needed to transmit and support the enquiry and ordinarily for up to three years afterwards, unless a shorter or longer period is justified.
• General enquiries and correspondence:
  for as long as necessary to answer the enquiry and ordinarily for up to three years afterwards.
• Complaints, moderation disputes and legal correspondence:
  normally for up to six years after the matter is closed, or longer where necessary for an active dispute or legal requirement.
• Payment, invoice and transaction records:
  normally for six years after the relevant financial year or for any longer period required by tax, accounting or legal rules.
• Security and access logs:
  for a limited period appropriate to detecting, investigating and preventing security incidents, normally no longer than reasonably necessary for those purposes.
• Marketing information:
  until consent is withdrawn, an objection is received or the information is no longer required.
• Marketing suppression records:
  for as long as necessary to ensure that a person who has opted out is not contacted again.
• Cookie and analytics information:
  for the periods stated in our Cookie Policy, cookie controls or applicable service settings.

We may retain information for longer where necessary to:

• comply with a legal obligation;
• respond to a regulator or court;
• resolve an ongoing complaint or dispute;
• prevent fraud or Review manipulation;
• protect vital interests; or
• establish, exercise or defend a legal claim.

When information is no longer needed, we will delete it, anonymise it or securely dispose of it.

Residual copies may remain temporarily in secure backups until those backups are overwritten or deleted in accordance with our backup cycle.

19. Security

We use reasonable technical and organisational measures designed to protect personal information against:

• unauthorised access;
• accidental loss;
• unlawful use;
• alteration;
• unauthorised disclosure; and
• destruction.

Measures may include:

• encrypted website connections;
• password hashing and secure authentication;
• role-based access controls;
• restricted administrative access;
• system monitoring and security logging;
• spam, malware and fraud detection;
• backups and recovery procedures;
• security updates and vulnerability management;
• staff and contractor confidentiality obligations;
• supplier due diligence; and
• contractual safeguards for relevant service providers.

No internet-based service can guarantee complete security.

You should use a strong and unique password, protect your login credentials and tell us promptly if you suspect unauthorised Account access.

20. Cookies and similar technologies

We use cookies and similar storage or access technologies to operate, secure, measure and improve the site.

These technologies may include:

• browser cookies;
• local storage;
• tracking pixels;
• software development kits;
• device identifiers; and
• similar technologies that store or access information on a device.

They may be used to:

• keep the site functioning correctly;
• maintain secure login sessions;
• remember privacy and Account preferences;
• protect Accounts and prevent fraud;
• balance traffic and maintain performance;
• measure website traffic and performance;
• understand how directory searches and profiles are used;
• provide maps, videos or other embedded functionality;
• measure marketing activity; and
• provide advertising or personalisation where enabled.

Strictly necessary technologies, and technologies covered by another applicable legal exception, may be used without consent where permitted by law.

Where consent is legally required for analytics, advertising, personalisation or another non-essential purpose, those technologies will be used only after the required consent has been obtained.

You can manage your preferences through the site’s cookie controls.

Further details are available in our Cookie Policy.

21. Marketing communications

We may send information about:

• claimed Firm Profiles;
• Account features;
• directory and advertising services;
• subscriptions and renewals;
• new business features;
• related professional services; and
• relevant updates from Review A Solicitor.

Marketing may be sent where:

• you have given valid consent;
• the electronic-marketing soft opt-in lawfully applies;
• applicable business-to-business marketing rules permit us to contact a corporate subscriber;
• legitimate interests apply and electronic-communications law permits the communication; or
• another lawful basis and communications rule applies.

Sole traders and some partnerships may be treated similarly to individual subscribers under electronic-marketing rules.

Every electronic marketing communication will provide an appropriate way to unsubscribe or object.

You may also opt out by emailing info@reviewasolicitor.co.uk.

When you opt out, we may retain a minimal suppression record to ensure that your preference is respected.

Operational messages concerning an Account, payment, security issue, complaint or claimed profile are not marketing communications and may still be sent where necessary.

22. Your data-protection rights

Depending on the circumstances, you may have the following rights.

22.1 Right to be informed

You have the right to receive clear information about how we collect and use personal information.

22.2 Right of access

You may ask us to confirm whether we process your personal information and request a copy of that information, together with certain additional details.

22.3 Right to rectification

You may ask us to correct inaccurate personal information or complete information that is incomplete.

22.4 Right to erasure

You may ask us to erase personal information in certain circumstances.

The right to erasure is not absolute. We may continue to process information where this is necessary for:

• freedom of expression and information;
• compliance with a legal obligation;
• the establishment, exercise or defence of legal claims;
• fraud prevention and site integrity;
• the protection of another person’s rights; or
• another lawful purpose or exemption.

22.5 Right to restrict processing

You may ask us to restrict processing in certain circumstances, including while we investigate a material accuracy dispute or an objection.

22.6 Right to object

You may object to processing based on legitimate interests where your particular circumstances justify the objection.

We may continue the processing where we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is needed for legal claims.

22.7 Absolute right to object to direct marketing

You may object to direct marketing at any time. If you do so, we will stop using your personal information for that purpose.

We may retain limited suppression information to ensure that you are not contacted again.

22.8 Right to data portability

Where processing is based on consent or contract and is carried out by automated means, you may have the right to receive certain information in a structured, commonly used and machine-readable format.

22.9 Rights concerning automated decisions

You may have rights relating to decisions made solely through automated processing where those decisions produce legal or similarly significant effects.

22.10 Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

22.11 Right to complain

You have the right to complain to us and to the UK’s data-protection regulator about the way your information has been processed.

23. How to exercise your rights

To exercise a data-protection right, contact:

Email:
info@reviewasolicitor.co.uk

Post:
Data Protection Request
UK REAL REVIEWS LTD
Windlehall
Crank Road
St Helens
Merseyside
WA11 7RG

Please provide enough information to allow us to:

• identify you;
• locate the relevant information;
• understand the request; and
• confirm any relevant Account, Review, Firm Profile or correspondence.

We may ask for reasonable evidence of identity or authority before disclosing, changing or deleting personal information.

We will respond without undue delay and within the applicable statutory period, which is ordinarily one month.

Where permitted by law, the response period may be extended if a request is particularly complex or if several requests have been made. We will tell you if an extension applies.

We will not normally charge a fee. Where permitted by law, we may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive.

24. Data-protection complaints

You may complain to us if you believe that we have not handled your personal information in accordance with data-protection law.

A data-protection complaint can be made by emailing info@reviewasolicitor.co.uk.

Please include:

• your name and contact information;
• the personal information or processing concerned;
• a clear explanation of your concern;
• relevant dates, pages, Reviews, Accounts or Firm Profiles;
• supporting evidence where available; and
• the outcome you are seeking.

In accordance with applicable data-protection law, we will:

• provide a clear way for you to make a complaint;
• acknowledge receipt within 30 days;
• take appropriate steps to investigate without undue delay;
• keep you appropriately informed; and
• tell you the outcome without undue delay.

We may ask for additional information where reasonably necessary to investigate the complaint.

25. Complaints to the Information Commissioner’s Office

You also have the right to complain to the Information Commissioner’s Office, the UK’s data-protection regulator.

We encourage you to contact us first so that we have an opportunity to investigate and resolve your concern.

26. Automated decision-making

Review A Solicitor does not currently use personal information to make solely automated decisions that produce legal or similarly significant effects on individuals.

We may use automated tools to assist with:

• spam detection;
• malware prevention;
• Review duplication checks;
• fraud and manipulation detection;
• unusual Account activity;
• security monitoring;
• search ranking and directory functionality; and
• technical error detection.

Where appropriate, material moderation, Account or complaint decisions may be reviewed by a person.

27. Children’s information

The site is not directed at children.

You must be at least 18 years old to:

• create an Account;
• submit a Review;
• claim a Firm Profile;
• send an enquiry to a Firm through the site; or
• purchase a service.

We do not knowingly collect Account information directly from anyone under 18.

Information concerning a child may occasionally appear in a Review, enquiry or legal matter. Users should avoid identifying a child or disclosing unnecessary information about them.

Please contact us if you believe that a child has created an Account or supplied personal information directly to us without appropriate authority.

28. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to:

• the site or our services;
• our data sources;
• our use of service providers;
• our security and moderation processes;
• applicable law or regulatory guidance; or
• our business structure.

The latest version will be published on this page and identified by the effective and last-updated dates.

Where a change materially affects how we use personal information, we may provide an additional notice through the site, an Account or email.

29. Contact us

Questions, correction requests, data-protection requests and complaints should be sent to: