Your privacy & your data

About this notice

Morgans Solicitors is authorised and regulated by the Solicitors Regulation Authority (SRA No. 193372). We are the “controller” of the personal data described in this notice, which means we decide how and why it is used. We are registered with the Information Commissioner’s Office (ICO) under reference Z9083782.

This notice explains how we handle personal data about our clients, people connected to our clients’ matters, people who contact us and visitors to this website, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We have not appointed a formal Data Protection Officer; questions about this notice should be sent to the contact above.

The information we collect

Depending on the work we do for you, we may collect:

• Identity and contact details — name, title, address, email, telephone number, date of birth, and copies of identity documents.
• Financial information — bank account details, source of funds and source of wealth information, mortgage details, and information about assets and liabilities (for example in an estate or a financial settlement).
• Information about your matter — property details, family circumstances, information about the deceased in probate matters, correspondence, and any other information you give us or that we obtain while acting for you.
• Special category data — where relevant to your matter, information about health (for example for Lasting Powers of Attorney, Court of Protection or capacity matters), racial or ethnic origin, religious beliefs or sexual life (most often in family matters).
• Criminal offence data — where relevant to your matter or to our anti-money laundering checks.
• Website and communications data — the content of emails and messages you send us, and basic technical information described under “This website” below.
• CCTV images — if you visit our office, which is covered by CCTV for the security of our premises, staff and visitors (signs are displayed at the entrance).

Where we get it from

Most information comes directly from you. We may also receive it from: identity verification and anti-money laundering providers; HM Land Registry and property search providers; other parties to your matter and their solicitors; estate agents, mortgage lenders and brokers; financial institutions, the Probate Registry, HMRC and the Welsh Revenue Authority; courts; and people you authorise to deal with us on your behalf. Where you give us information about someone else (for example a family member or beneficiary), please make sure they know you are sharing it with us.

Why we use it and our lawful basis

We do not use your information for marketing and we never sell it. We do not make decisions about you using solely automated processing.

Who we share it with

We share personal data only where necessary for your matter or where the law requires it. Recipients may include:

• identity verification and anti-money laundering providers (we currently use Thirdfort);
• HM Land Registry, property search providers, the Welsh Revenue Authority and HMRC;
• the Probate Registry, the Office of the Public Guardian and the courts;
• other parties to your matter and their legal representatives, estate agents and mortgage lenders;
• barristers, experts, translators and other professionals we instruct for you;
• our bank, accountants, auditors, professional indemnity insurers and their advisers;
• our IT, email, case management, document storage and website hosting providers, who act on our instructions;
• our regulators and ombudsman (the Solicitors Regulation Authority, the Legal Ombudsman and the ICO), and law enforcement agencies where we are legally required to report.

Transfers outside the UK

We do not normally transfer personal data outside the UK. If a transfer is needed (for example because a service provider stores data abroad, or a party to your matter lives overseas), we will make sure it is protected by UK adequacy regulations or appropriate safeguards such as the ICO’s International Data Transfer Agreement.

How long we keep it

• Client files — 10 years from the date the matter is closed. This includes emails and electronic messages about the matter, which are kept for the same period as the file.
• Will files — until probate (or letters of administration) has been granted in the estate of the person who made the will, even if that is more than 10 years after the file was closed.
• Original wills, deeds and other original documents held in our safe custody — these are not destroyed with the file. We keep them until they are released on your authority (or that of your personal representatives), or their destruction is authorised.
• Identity and anti-money laundering records — at least five years after we finish acting for you, as the Money Laundering Regulations 2017 require.
• Complaint files — six years after the complaint is closed.
• Enquiries that do not lead to instructions — normally deleted once it is clear that no instruction will follow and the record is no longer needed, and in any event within 10 years.
• CCTV recordings at our office — no more than 30 days, unless needed for a security incident or a legal requirement.

We will keep a file for longer if a complaint, claim, investigation or regulatory matter is connected with it, or if there is another good reason to think it may be needed. When the retention period ends, paper records are destroyed by confidential shredding and the electronic records are deleted.

How we protect it

We use appropriate technical and organisational measures to keep personal data secure, including access controls, secure storage of paper files, and confidentiality obligations on everyone who works for us. As a firm of solicitors, we also owe you a professional duty of confidentiality.

Please be aware of email fraud. We will never change our bank details by email or text message. Before sending money to us, telephone us on 01873 859993 to confirm our details.

Your rights

You have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information, or restrict how we use it, in certain circumstances;
• object to our use of your information where we rely on legitimate interests;
• ask for information you gave us to be transferred to another organisation, in certain circumstances;
• withdraw your consent at any time, where we rely on consent.

Some rights are limited where we must keep information to meet a legal obligation, or where it is covered by legal professional privilege. To use any of these rights, contact Alison Watkins Morgan at the address above. There is normally no charge, and we will reply within one month.

This website

This website does not use cookies to track you, and we do not use analytics or advertising tools. To display the site, your browser connects to Google Fonts (for the typefaces) and to Yoshki (which provides the SRA digital badge). These services receive your device’s IP address as part of the normal operation of the internet. Please see Google’s and Yoshki’s own privacy policies for how they handle it. If you email us using an address shown on this site, we will use your message only to deal with your enquiry.

Complaints

If you are unhappy with how we have used your personal data, please tell us first so that we can try to put it right. You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint

Changes to this notice

We review this notice regularly and will publish any changes on this page.

Last updated: 28 October 2026