fbpx

Privacy Policy

PRIVACY NOTICE

Last Updated: June 2026

Oliver Fisher is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, store, share and protect personal data and sets out your rights in relation to that information.

We process personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (“PECR”), the Data (Use and Access) Act 2025 and other applicable laws and regulations.

Who We Are

Oliver Fisher is a firm of solicitors authorised and regulated by the Solicitors Regulation Authority.

Our contact details are:

Oliver Fisher

87 Lancaster Road

London

W11 1QQ

Telephone: 0203 219 0145

Email: advice@oliverfisher.co.uk

For any queries relating to this Privacy Notice or the processing of your personal data, please contact our Privacy and Compliance Team at advice@oliverfisher.co.uk.

The Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity information, including your name, title, date of birth, passport details and other identification documents.
  • Contact information, including postal addresses, email addresses and telephone numbers.
  • Financial information, including bank account details, payment information and information required for anti-money laundering compliance.
  • Matter-related information, including information relevant to legal advice, legal proceedings, transactions and instructions provided to us.
  • Employment information, professional details and business contact information.
  • Technical information, including IP addresses, browser types, operating systems and website usage information.
  • Correspondence, communications and records of enquiries made to us.

Special Category Data and Criminal Offence Data

In the course of providing legal services, we may process special category personal data and criminal offence data where necessary and lawful to do so.

This may include information concerning health, ethnicity, religious beliefs, trade union membership, criminal allegations, criminal convictions or other sensitive matters relevant to the legal services we provide.

How We Collect Personal Data

We may collect personal data:

  • Directly from you.
  • From your employer, professional advisers or representatives.
  • From courts, tribunals, government bodies, regulators and public authorities.
  • From financial institutions, estate agents, surveyors and other third parties involved in a matter.
  • From publicly available sources.
  • Through our website and online services.
  • Through correspondence, meetings, telephone calls and electronic communications.H

How We Use Personal Data

We may use personal data for the following purposes:

  • Providing legal advice and legal services.
  • Managing and administering legal matters.
  • Verifying identity.
  • Conducting anti-money laundering, sanctions and compliance checks.
  • Managing conflicts of interest checks.
  • Communicating with clients and third parties.
  • Managing payments and accounts.
  • Complying with legal and regulatory obligations.
  • Defending legal claims and protecting legal rights.
  • Managing recruitment and employment processes.
  • Maintaining and improving our systems, services and website.
  • Preventing fraud, crime and unauthorised access to our systems.

Lawful Bases for Processing

We process personal data on one or more of the following lawful bases:

  • Performance of a contract.
  • Compliance with legal obligations.
  • Legitimate interests pursued by Oliver Fisher or a third party.
  • Consent where required.
  • The establishment, exercise or defence of legal claims.
  • Substantial public interest conditions where applicable.

Where we process special category personal data, we do so on the basis that such processing is necessary for the establishment, exercise or defence of legal claims, the provision of legal advice, compliance with legal obligations, or for reasons of substantial public interest where permitted by law.

Where we process criminal offence data, we do so in accordance with the Data Protection Act 2018 and the applicable conditions set out in Schedule 1 to that Act.

Artificial Intelligence and Technology-Assisted Services

Oliver Fisher may use approved technology-assisted tools, including artificial intelligence (“AI”), to support certain administrative, operational, drafting, research and document management functions.

Any use of such tools is subject to our professional obligations of confidentiality, legal professional privilege, data protection legislation and appropriate internal safeguards.

AI systems are used solely as support tools and are not relied upon to provide legal advice, determine legal outcomes, make decisions on behalf of clients or replace the professional judgment of qualified solicitors.

Where technology-assisted tools are used, Oliver Fisher remains responsible for the services provided to clients and maintains appropriate human oversight and review.

Oliver Fisher does not input legally privileged or confidential client information into publicly available generative AI systems unless appropriate contractual, technical and organisational safeguards are in place.

We implement reasonable measures designed to protect confidential and personal information, including access controls, contractual safeguards with service providers, staff training and internal policies governing the use of technology-assisted tools.

Oliver Fisher does not carry out solely automated decision-making that produces legal effects or similarly significant effects on individuals.

Sharing Personal Data

Where necessary, we may share personal data with:

  • Barristers and expert witnesses.
  • Courts and tribunals.
  • Opposing parties and their professional advisers.
  • Government bodies and regulators.
  • Banks, lenders and financial institutions.
  • Professional advisers and consultants.
  • Insurers.
  • IT service providers and cloud hosting providers.
  • Compliance and identity verification providers.
  • Technology service providers engaged to support our operations.
  • Auditors and external advisers where required.

We only disclose personal data where we are satisfied that there is a lawful basis for doing so.

International Transfers

Where personal data is transferred outside the United Kingdom, we will take appropriate measures to ensure that it receives an adequate level of protection.

Where required, we will rely upon adequacy regulations, the UK International Data Transfer Agreement (IDTA), the UK Addendum to the European Commission’s Standard Contractual Clauses or other lawful transfer mechanisms recognised under UK data protection law.

Data Security

We maintain appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

These measures include:

  • Access controls.
  • Encryption where appropriate.
  • Secure systems and networks.
  • Multi-factor authentication where appropriate.
  • Staff training.
  • Information security procedures.
  • Incident response and business continuity measures. 

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, regulatory, professional, accounting and risk management requirements.

The retention period applied will depend upon the nature of the information, the legal matter involved and our professional obligations.

Where appropriate, files and records may be retained after a matter concludes in accordance with our retention policies, legal obligations and professional requirements.

Your Rights

Subject to applicable law, you may have the right to:

  • Request access to your personal data.
  • Request correction of inaccurate personal data.
  • Request erasure of personal data.
  • Request restriction of processing.
  • Object to processing.
  • Request transfer of personal data in certain circumstances.
  • Withdraw consent where processing is based upon consent.

You will not usually have to pay a fee to exercise these rights. However, we may charge a reasonable fee or refuse to act on a request where permitted by law, including where a request is manifestly unfounded, excessive or repetitive.

Any request concerning your personal data should be sent to advice@oliverfisher.co.uk.

Data Protection Complaints

Oliver Fisher is committed to handling data protection concerns fairly, transparently and promptly.

If you are dissatisfied with how we have collected, used, stored, disclosed or otherwise processed your personal data, you may make a data protection complaint.

Complaints may be submitted by email, post or telephone using the contact details set out in this Privacy Notice.

To help us investigate your complaint, please provide:

  • Your name and contact details.
  • Details of the concern.
  • Any supporting information.
  • The outcome you are seeking.

Upon receipt of a complaint, we will:

  • Acknowledge receipt as soon as reasonably practicable and normally within five working days.
  • Investigate the complaint appropriately.
  • Make reasonable enquiries where necessary.
  • Keep you informed of progress where appropriate.
  • Provide our response and inform you of the outcome without undue delay.
  • Maintain appropriate records of complaints and their outcomes.

Where a complaint relates to the exercise of a data protection right under applicable legislation, we will respond within the timescales prescribed by law unless an extension is permitted.

Nothing in this procedure affects your right to complain to the Information Commissioner’s Office.

Information Commissioner’s Office

If you remain dissatisfied following our response, or believe that we have processed your personal data unlawfully, you may complain to the Information Commissioner’s Office.

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Website: www.ico.org.uk

Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns before you contact the ICO.

Cookies

Our website uses cookies and similar technologies to improve functionality, analyse website usage and enhance user experience.

Further information regarding our use of cookies is available in our Cookie Policy.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices, policies or content of those websites and encourage users to review their privacy notices.

Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in legal requirements, regulatory guidance, technology, our services or business practices.

Any updated version will be published on our website and will take effect upon publication unless otherwise stated.