Privacy notice

Privacy notice

How I collect, use and protect personal data, and what rights you have over it.

Email me

This notice explains what I do with personal data when you visit this website, subscribe to my newsletter, make an enquiry or instruct me. It is written to be read rather than skimmed, so it is shorter than most.

Who is responsible for your data

I am. Geoffrey Caesar, a solicitor of England and Wales practising in my own name from London. I am the data controller for the personal data described in this notice.

  • Contact for any data protection question: geoffrey@caesar.co.uk
  • Geoffrey Caesar, 66 Paul Street, London, EC2A 4NA
  • SRA ID 483394. Freelance practice SRA number 666497. Registered with the Information Commissioner's Office, registration reference ZC205343.

What I collect, and why

If you make an enquiry

When you email me I receive your name, email address, whatever you tell me about your business or your situation, and any documents you attach. I use it to scope the work and to quote a fee.

My lawful basis is that the processing is necessary to take steps at your request before entering into a contract, and my legitimate interest in responding to people who contact me about my services.

If you instruct me

I hold the information needed to do the work and to run the engagement: your contact details, the matter file, correspondence, the documents you send me, and billing records. Where a document you send contains personal data about other people, such as employees, counterparties or shareholders, I process that too.

My lawful bases are performance of our contract, compliance with legal obligations that apply to me as a solicitor, and my legitimate interests in keeping proper records of the advice I have given.

If you subscribe to the newsletter

I hold your email address and, if you give it, your name. I use it only to send the newsletter. My lawful basis is your consent, and you can withdraw it at any time using the unsubscribe link in any issue.

When you use this website

My website host records standard technical information such as IP address, browser type and the pages requested, in order to serve the site and keep it secure. See the cookie notice for what is stored on your device.

Special category data

I do not seek out special category data such as health information or information about race, religion or political opinions. Commercial and corporate work rarely involves it. If a document you send me happens to contain it, I process it only so far as is necessary to give the advice, on the basis that the processing is necessary for the establishment, exercise or defence of legal claims or for obtaining legal advice.

Who else sees it

As few people as possible. There is no team here, so your information is not passed around an office. The categories of recipient are:

  • My IT and email providers, who host my email and store my files
  • My website and newsletter platform, Ghost, which stores subscriber email addresses
  • My consent management provider, CookieYes, which records the cookie choices you make on this site
  • My accountant and payment providers, for invoicing and bookkeeping
  • My professional indemnity insurers and their advisers, if a claim or a potential claim arises
  • Regulators and law enforcement, where I am legally obliged to disclose

I do not sell personal data, I do not share it for anyone else's marketing, and I do not use it to train AI models. Where I use AI tools in the course of my work I do so on terms that do not permit your data to be used for training, and I remain accountable for the advice.

Where your data is held

Some of my suppliers are based outside the United Kingdom or store data outside it. Where that is the case, the transfer is covered by an adequacy decision or by appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the standard contractual clauses. You can ask me for details of the safeguards that apply to a particular supplier.

How long I keep it

  • Enquiries that do not become instructions: up to twelve months, then deleted
  • Matter files: at least six years after the matter ends, reflecting the limitation period for claims and my need to be able to answer questions about advice I have given
  • Billing and accounting records: six years, to meet tax requirements
  • Newsletter subscribers: until you unsubscribe

Your rights

Under UK data protection law you can ask me to give you a copy of the personal data I hold about you, correct it if it is wrong, delete it, restrict what I do with it, or provide it in a portable format. You can object to processing I carry out on the basis of legitimate interests, and you can withdraw consent to the newsletter at any time.

To exercise any of these, email geoffrey@caesar.co.uk. I will respond within one month. There is no charge. Some rights are qualified: I may not be able to delete a matter file where I need to keep it to defend a claim or to meet a legal obligation, and I will explain if that is the position.

Confidentiality

Separately from data protection law, everything you send me in seeking advice is confidential, whether or not you go on to instruct me. That duty is professional as well as legal and it does not expire.

Complaining

If you are unhappy with how I have handled your personal data, please tell me first at geoffrey@caesar.co.uk so I can put it right. You also have the right to complain to the Information Commissioner's Office at any time.

  • Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
  • Helpline: 0303 123 1113
  • Online: ico.org.uk/make-a-complaint

If your complaint is about the service I have provided rather than about data, see complaints.

Changes to this notice

If I change how I handle personal data I will update this page and change the date below. If the change is significant and affects people who have instructed me, I will tell them directly.

Last reviewed: August 2026. Questions about this notice: geoffrey@caesar.co.uk.