Skip to main content

Privacy Policy

Our Privacy Policy tells you what will happen to any personal data that you provide to us as a result of using this website. The information is written for the benefit of general visitors to the website - if you are a client of ours (or become one) we process a wider range of personal data and deal with a broader range of privacy-related issues. Clients are provided detailed information about this during the engagement process.

Last updated: 1 September 2026

Personal Data You Provide

Your privacy is important to us. By providing personal information such as your name and e-mail address via the forms on this website, you agree to us contacting you with regard to the information provided.

Some forms on our website also include a check box asking you for permission to add you to our mailing list. This is an opt-in mailing list and your personal information will be used solely by us (and all such emails include a link for opt-out).

How We Use Your Personal Data

We use the data you provide via this website to:

  • communicate with you, for example: we use contact details such as email address or phone number when responding to enquiries made via online forms
  • monitor website trends, for example: we use Google Analytics to help us aggregate traffic so we can monitor how the website is being used
  • understand which of our marketing produces enquiries, for example: we record whether you reached us from a search engine, an advertisement, social media or another website, and note this against any enquiry you send us
  • operate our business more effectively, for example: we seek feedback and use this to help improve our service

Our Lawful Reasons For Processing Your Personal Data

The “General Data Protection Regulation” (GDPR) is the primary piece of legislation defining your rights over our processing of your personal information. The GDPR requires us to declare which of six “lawful reasons” we are relying on when we are processing your personal data: we operate on the basis of “consent” when sending newsletters (you won’t get sent a newsletter unless you have explicitly opted in to receive one).... and we operate on the basis of “legitimate interest” when communicating with you in other ways (e.g. when responding to your enquiry).

How Long We Keep Personal Data

Personal data may be stored by the website for a period of up to 90 days after which time it is removed automatically.

Transfer of Personal Data

From time to time we may pass personal data such as your name and email address to other services that we use to send out newsletters and other communications (both electronic and print). Wherever possible your personal data stays in the UK, the EU, or a country the UK Government has decided offers adequate protection, such as Jersey, Guernsey, Switzerland, New Zealand and Canada. Some of the suppliers we use are based in, or owned by companies in, the United States. Where data reaches the USA we rely on the UK Extension to the EU-US Data Privacy Framework where the supplier is certified under it, and otherwise on the UK International Data Transfer Agreement together with additional safeguards. The EU-US Privacy Shield, referred to in earlier versions of this policy, was struck down in 2020 and is no longer relied on.

Cookies, Analytics and Advertising

Cookies are small files stored on your device by the websites you visit. We use them to understand how our website is used and to measure whether our advertising is working.

None of the tools below run until you press “Accept” on the cookie banner that appears the first time you visit. If you decline, or simply ignore the banner, none of them load and nothing is stored on your device. The website works exactly the same either way.

Your choice

You have not yet made a choice on this device.

This choice is stored in a cookie on the device you are using now, so it needs making again on a different browser or device.

What we use, and what each one does

  • Google Tag Manager - the tool that delivers the tags below. It does not analyse anything by itself.
  • Google Analytics (provided by Google) - tells us how the website is being used so we can improve it: which pages are visited, for how long, on what kind of device, and roughly which part of the country you are in. This requires us to pass your IP address to Google. Google uses it to prepare site usage reports for us, and may also share it with other Google services, including using the data to contextualise and personalise the ads of its own advertising network.
  • Meta Pixel (provided by Meta, the company behind Facebook and Instagram) - measures the results of our advertising on Facebook and Instagram. It tells Meta when you view a page on our website and when you take an action such as sending an enquiry form, tapping one of our phone numbers or clicking one of our email addresses. It does not send Meta the contents of your enquiry. Meta may match this activity to your Facebook or Instagram account, and may use it to target and measure advertising.
  • Hotjar - records how pages are used, such as clicks, scrolling and mouse movement, so we can see where the website is confusing. Hotjar hides the text typed into form fields, so what you write in an enquiry does not appear in these recordings.
  • Where you came from - our own website records the marketing channel that brought you to us, for example a search engine, an advertisement, social media or another website. It is kept on your device for up to 90 days and is attached to any enquiry you send us, so we can tell which of our marketing actually helps people find us. It is not used to identify you, and it is not shared with anyone outside the firm.

Changing your mind

You can withdraw your permission at any time using the buttons above. Turning cookies off stops these tools from loading and clears the cookies they have set on the device you are using. You can also delete cookies at any time through your browser’s own settings, and most browsers let you block them altogether.

Where this information goes

Google, Meta and Hotjar are independent companies who decide for themselves how they use the information their tags collect, and each of them may transfer it outside the UK. Their own privacy policies explain what they do with it: Google, Meta and Hotjar.

Questions or Complaints

In the first instance we hope you will contact us directly with any questions or complaints. You should make a complaint in writing to the person at the firm responsible for data protection, which is currently Joseph Long. You can write to him at 2 Quay View Business Park, Barnards Way, Lowestoft, NR32 2HD or at jlong@nicholsonslaw.com. If you are unable to set out your complaint in writing, for example if you have a disability, we will offer reasonable adjustments to this procedure (for example by speaking with you on the telephone or in a meeting to take further details of your complaint).

We will:

  • Acknowledge your complaint within 3 working days;
  • Provide any data access or audit information within 20 working days; and
  • Send a full response within 30 working days, unless the DUAA allows an extension (which we will explain to you).

You may also have the right to raise concerns with the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal data.