1. Who We Are
MediPharmaco Law Limited is the controller of personal data described in this notice. We are an English company, number 16304263. You can contact us about privacy matters at contact@medipharmacolaw.com.
2. Scope
This notice applies when you visit this website, contact us, request a conflict check, enquire about our services, register for a webinar or training session, or otherwise communicate with us before or during a professional relationship. Separate engagement terms may provide additional information for clients.
3. Personal Data We Collect
Depending on your interaction with us, we may process identification and contact details, organisation and role information, correspondence, jurisdiction and matter details, names of adverse parties and affiliates, billing or engagement information, and any other information you choose to provide. Our hosting provider may also process standard technical logs such as IP address, browser type, requested pages, timestamps, and security events.
4. How We Receive Data
We receive data directly from you, from colleagues or representatives acting for an organisation, from counterparties and professional advisers, and from public or professional sources where necessary for conflict checks, due diligence, regulatory work, or legal services. Website enquiry and conflict-check forms prepare an email in your own email application; the website itself does not transmit the form until you choose to send that email. Webinar registration forms work differently: when you submit one, the details you enter (your name, email address, organisation, role and chosen session) are sent to us by email through our form-handling provider, Web3Forms, so that we can manage your registration. You can also register for a webinar by email instead.
5. Purposes and Lawful Bases
We use personal data to respond to enquiries, manage webinar and training registrations, assess whether we can act, perform requested pre-contract steps, deliver legal services, administer relationships, maintain security, establish or defend legal claims, and meet professional, regulatory, tax, anti-money-laundering, and other legal obligations. Depending on the purpose, we rely on steps requested before a contract, performance of a contract, compliance with legal obligations, our legitimate interests in operating and protecting a legal practice and managing conflicts, or consent where the law requires it.
6. Sensitive and Confidential Information
Conflict checks should contain only the minimum information requested. Please do not send privileged material, health information, financial data, identity documents, or other highly sensitive information before we confirm a secure method and appropriate basis for receiving it. Where special-category or criminal-offence data is necessary for legal services, we process it only where an applicable legal condition and professional safeguard permits.
7. Sharing Personal Data
We do not sell personal data. We may disclose it where necessary to professional advisers, insurers, auditors, courts, regulators, law-enforcement bodies, counterparties, instructed experts, and vetted suppliers that provide hosting, communications, security, document, or practice-management services. Recipients receive only the information necessary for their role and are subject to legal, contractual, or professional duties.
8. International Transfers
Some service providers or matter participants may process data outside the United Kingdom. Where data protection law requires safeguards, we use an applicable adequacy regulation, approved contractual safeguards, or another lawful transfer mechanism and apply supplementary protections where appropriate.
9. Retention
We keep personal data only for as long as reasonably necessary for the purpose collected, including conflict management, professional obligations, legal claims, and statutory recordkeeping. Retention varies by record type and matter. Client-file periods are addressed in engagement documentation or internal retention schedules; conflict-check records may be retained where necessary to identify and manage future conflicts.
10. Security
We use proportionate technical and organisational measures designed to protect personal data against unauthorised access, alteration, loss, or disclosure. No email or internet transmission is completely secure, so sensitive material should be sent only through a method we have approved.
11. Your Rights
Subject to legal conditions and exemptions, you may request access, rectification, erasure, restriction, portability, or information about your personal data. You may object to processing based on legitimate interests and have an absolute right to object to direct marketing. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.
12. Automated Decisions
We do not use website data to make solely automated decisions that produce legal or similarly significant effects.
13. Complaints
Please contact contact@medipharmacolaw.com first so that we can address your concern. You also have the right to complain to the UK Information Commissioner’s Office. Information is available at https://ico.org.uk/make-a-complaint/.
14. Cookies and Device Storage
Our use of cookies and browser storage, including the storage used to remember privacy choices, is explained in the Cookies Policy. You can reopen the privacy centre through the Cookie preferences control in the website footer.
15. Changes and Contact
We may update this notice when our services, suppliers, or legal obligations change. Material changes will be identified by the updated date shown on this page. Questions and rights requests may be sent to MediPharmaco Law Limited at contact@medipharmacolaw.com.