top of page


  • Mariel Irvine Solicitors (“MI”) provide legal advice and legal representation to organisations and individuals, from our office at 1 Luke Street, London EC2A 4PX.

  • This privacy notice provides information about the personal information we process as a data controller, in compliance with the UK General Data Protection Regulation (GDPR) and Data Protection Act 2018 (DPA).

  • Our ICO registration number is Z7350933.


What personal data do we process?


  • The personal data we process include

  • Names, contact details and dates of birth;

  • Identity documents;

  • Financial information;

  • Health information;

  • Qualifications and work history;

Why do Mariel Irvine process personal data and what is the legal basis for doing so?


  • We process the personal data of client individuals who instruct us to provide legal advice or represent them in connection with a legal dispute. Our contract with the individual provides the legal basis for us processing this information.

  • Client medical records are generally processed with the individual’s explicit consent. This may be withdrawn at any time by emailing Mariel Irvine at Where consent has not been given, we process this special category information because we need to do so in order to handle a legal claim.

  • The Money Laundering Regulations 2017 require us to check the identity of individuals before they instruct us. We retain copies of documents used to carry out these checks in accordance with the provisions of the Regulations.

  • We may also process the personal information of individuals who are not our clients, such as employees and contractors of client organisations, or witnesses in litigated proceedings, since it is in our legitimate interests as a firm of solicitors to do so. In other words, we need this information in order to carry out our legal work.

  • The processing of any special category personal information, such as health records, belonging to individuals who are not our clients, are processed lawfully since they fall within the legal claims exemption.

Whom do we obtain personal data from and whom do we share it with?


  • We obtain personal data directly from client individuals and client organisations,  and other persons and organisations associated with our legal cases, such as employers and health and other professionals .

  • We share personal data internally strictly on a need to know basis.

  • We do not share personal data with anyone external to the firm other than with our email host Tibus, our storage provider Box IT and our accounting software provider Insight Legal pursuant to GDPR compliant contracts. Our contractors are subject to a duty of confidentiality.

  • How long does Mariel Irvine keep personal data for?

  • We retain personal data for anything up to six years from the date when a case concluded. It varies from case to case depending on the work carried out. On the conclusion of a case clients are notified of how long files will be retained for.  If you would like to be informed of the retention period for your personal data, please contact Mariel Irvine at

Your rights


  • We are committed to protecting your rights to privacy. They include:

  • Right to be informed about what we do with your personal data;

  • Right to have a copy of all the personal information we process about you;

  • Right to rectification of any inaccurate data we process, and to add to the information we hold about you if it is incomplete;

  • Right to be forgotten and your personal data destroyed;

  • Right to restrict the processing of your personal data;

  • Right to object to the processing we carry out based on our legitimate interest;

  • Personal data that are covered by legal professional privilege, and personal data that we process so as to provide legal advice or representation may fall outside these rights. In other words, we may not be able to accede to data subject requests concerning these categories of data.

Information Commissioner’s Office


  • If you have questions, requests or concerns about the way your personal information has been processed, please contact  our date protection lead Mariel Irvine at

  • Alternatively, you may contact the Information Commissioner’s Office on 0303 123 1113.



28 February 2022

bottom of page