\
Privacy policy

Your information deserves careful handling.

Merlin Contracts uses personal information to respond to enquiries, prepare legal work, and keep this website safe. This policy explains what we collect, why we need it, and the choices available to you.

Last reviewed: 21 February 2025. Please contact us if you need this policy in another format.

Legal adviser reviewing a contract and privacy notes at a wooden desk in a bright office
At a glance

Four clear commitments

We keep our approach practical. You should be able to see what happens to your information without searching through legal jargon.

01 We collect information for stated, useful purposes.
02 We ask for only what the work requires.
03 We protect records with sensible safeguards.
04 We respect your UK GDPR rights.
Information we handle

What we may collect

The details depend on how you use the site and whether you ask us to work on a contract.

Contact details

Your name, email address, telephone number, organisation, and the details you include in an enquiry.

Instruction details

Information about your contract, the parties involved, your objectives, and relevant correspondence.

Website information

Technical data such as browser type, device details, approximate location, and pages visited.

Communications

Messages, meeting notes, and records of decisions needed to provide accurate drafting or review.

Payment records

Billing address, transaction reference, and payment status. Payment card details are handled by the payment provider.

Preferences

Your communication choices and information about how you prefer us to respond.

Why we use it

Purpose comes first.

Merlin Contracts uses information to answer questions, assess instructions, draft and review contracts, manage the client relationship, issue invoices, and meet legal or professional obligations.

We may also use technical website data to understand errors, protect the site from misuse, and improve its content. We do not use client information to build advertising profiles.

The lawful basis will depend on the situation. It may be your consent, steps taken at your request before a contract, performance of a contract, compliance with a legal obligation, or our legitimate interest in operating and protecting the service.

We keep purposes separate. Information supplied for a contract enquiry is not automatically used for unrelated marketing.

Your choices

How to exercise your rights

You can ask us to explain or change how your personal information is handled. Start with a written request.

01

Send the request

Email the request using the details below and tell us what information it concerns.

02

We check identity

We may need reasonable proof that the request relates to you.

03

We review scope

Some records may be restricted by legal duties, confidentiality, or another person's rights.

04

We respond

We normally respond within one month, subject to the UK GDPR rules for complex requests.

  • You can request access, correction, erasure, restriction, or portability where the law allows.
  • You can object to processing based on legitimate interests and withdraw consent where consent is the basis.
  • You can complain to the Information Commissioner's Office if you think your concern has not been resolved.
Keeping information safe

Security with proportionate controls

Access is limited to people who need the information for a defined task. We review records and working practices as the service develops.

Access control

Client material is handled on a need-to-know basis. We expect suppliers who process information for us to protect it too.

Retention limits

We keep information only for as long as it supports the original purpose, a legal duty, professional record keeping, or the resolution of a dispute.

Service providers

Hosting, email, scheduling, payment, and document systems may process limited information under appropriate arrangements.

If something goes wrong

We assess suspected personal data incidents, take steps to reduce harm, and notify the ICO or affected people when the law requires it.

Storage and sharing

Records stay relevant and controlled.

We may share information with professional advisers, technology providers, payment services, regulators, courts, or another party where you ask us to or where the law permits or requires it.

If information is transferred outside the United Kingdom, we use a lawful transfer mechanism and appropriate safeguards. We do not sell personal information.

This website may use cookies or similar tools for essential operation and, where applicable, measured preferences. Your browser can help you control non-essential cookies.

This policy may change when our services, suppliers, or legal duties change. The latest version will be published on this page.

Contact privacy

Ask us about your information.

Please avoid sending sensitive personal data through this form unless we have agreed a secure method. A short description is enough to start.

  • Email
    [email protected]
  • Telephone
    +44 7507 749478
  • Postal address
    Barley Mow Lane, St Albans, Hertfordshire, AL4 0FZ, United Kingdom
We use these details to respond to your enquiry and handle the request described above.