PRIVACY NOTICE

Last updated: 11 September 2026

 

About us
Cathnel Ltd, trading as Cathnel Legal, is a company registered in England and Wales under company number 12569738.

Our registered office is Suite A, 82 James Carter Road, Mildenhall, Bury St. Edmunds, IP28 7DE, United Kingdom.

Cathnel Legal provides legal, commercial and regulatory consultancy services.

For the purposes of UK data protection law, Cathnel Ltd is the controller of personal data processed in connection with

Cathnel Legal's services and this website.

For privacy enquiries, please contact:
privacy@cathnel.com

This Privacy Notice applies to personal data processed through the Cathnel Legal website and

in connection with Cathnel Legal's services and business activities.

Personal data we collect

Depending on how you interact with us, we may collect information including

your name, organisation, job title, email address, telephone number, correspondence and enquiry details.

Where you become a client, supplier, delivery partner or other business contact, we may also process information

necessary to establish and manage our relationship with you, provide or receive services, administer contracts,

carry out appropriate checks, manage invoices and payments, maintain business records and comply with legal or regulatory obligations.

In the course of providing legal and commercial consultancy services, clients may provide us with

personal data relating to employees, customers, suppliers, counterparties or other individuals.

Depending on the matter, this may occasionally include special category personal data or information relating to criminal offences.

We only process such information where it is necessary and lawful to do so.

Limited technical information may also be processed by our website hosting provider in the ordinary operation and security of the

website, such as IP addresses or server logs. We do not currently use website analytics, advertising trackers or similar tracking technologies.

How we obtain personal data

 

We generally obtain personal data directly from you, including when you contact us, submit an enquiry, correspond with us or engage Cathnel Legal.

We may also receive information from our clients, professional advisers, suppliers, delivery partners, publicly

available sources or other third parties where this is relevant to a matter or business relationship.

How and why we use personal data

We process personal data where necessary to respond to enquiries and take steps requested before entering into an engagement;

to provide and administer our services; to communicate with clients and professional contacts; to manage contracts, suppliers and

delivery partners; to maintain appropriate financial and business records; to comply with legal, professional and regulatory requirements;

to establish, exercise or defend legal rights; and to operate and protect our business and website.

Our lawful bases will depend on the circumstances. They may include performance of a contract or taking steps before entering into a contract,

compliance with a legal obligation and our legitimate interests in operating Cathnel Legal, providing professional services,

managing business relationships, protecting our systems and establishing or defending legal rights.

Where consent is required for a particular activity, we will request it separately. You may withdraw consent at any time where processing is based on consent.

We do not currently operate a general email marketing mailing list and do not use information submitted through the

website contact form for unrelated marketing without an appropriate lawful basis.

Special category and criminal offence data

Where a client matter involves sensitive personal information, we will process it only where an additional lawful condition

under applicable data protection legislation is available, for example where necessary in connection with legal advice,

legal claims or another applicable statutory condition.

Who we share personal data with

We may share personal data where reasonably necessary with service providers supporting our business,

including providers of website hosting, email, IT and professional services; accountants, insurers and other professional advisers;

consultants, subcontractors or delivery partners involved in an engagement where appropriate; courts, regulators, public authorities or

law-enforcement bodies where required by law; and other persons where disclosure is necessary for the establishment, exercise or defence of legal rights.

We do not sell personal data.

Anyone processing personal data on our behalf is expected to handle it appropriately and securely.
International transfers

Some suppliers or technology providers may process personal data outside the United Kingdom.
Where personal data is transferred internationally, we take appropriate steps to ensure that the transfer is lawful,

including relying where appropriate on UK adequacy regulations or recognised contractual safeguards.

How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purpose for which it was

collected and to meet legal, regulatory, contractual and legitimate business requirements.

Enquiries that do not result in an engagement will normally be retained for up to 12 months.

Client matter records will normally be retained for six years following completion or termination of the relevant engagement,

unless there is a lawful reason to retain them for a longer or shorter period.

Financial and accounting records will be retained for the period required by applicable law.

Retention periods may be extended where reasonably necessary in connection with an actual or potential dispute, regulatory requirement or legal claim.

Security

We use appropriate organisational and technical measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

No method of electronic transmission or storage is completely secure, but we take proportionate steps appropriate to the nature of the information we process.

Your rights

Depending on the circumstances and the lawful basis for processing, you may have rights to request access to your personal data;

request correction of inaccurate information; request deletion; request restriction of processing; object to certain processing;

request transfer of your data in an appropriate format; and withdraw consent where consent is relied upon.

These rights are not absolute and may be subject to exemptions under applicable law.

To exercise a data protection right, contact privacy@cathnel.com.

You also have the right to complain to the Information Commissioner's Office (ICO) if you are concerned about our handling of your personal data.

Information Commissioner's Office

We would appreciate the opportunity to address any concern directly first, so you are welcome to contact us at privacy@cathnel.com.

Changes to this notice

We may update this Privacy Notice from time to time to reflect changes in our services, business practices or legal requirements.

The latest version will be published on this website.