David Hughes

Corporate & Commercial Solicitor

Privacy Policy

About this privacy policy

This privacy policy explains how I collect, use and protect personal information when you visit hughespost.co.uk or contact me in connection with my legal services.

The website is operated by David Hughes, a freelance solicitor regulated by the Solicitors Regulation Authority (SRA number 8010169).

For data protection purposes, David Hughes is the data controller.

Contact details

David Hughes
24 Lawrance Road
St Albans
AL3 6EA

Email: david@hughespost.co.uk
Telephone: 07701 027881

Information I collect

This website is primarily provided for information about me and the legal services I offer.

I do not use the website to collect personal information through online enquiry forms, account registration or mailing lists.

If you contact me directly by email or telephone, I may collect personal information that you choose to provide, such as your name, contact details and information about your enquiry or proposed legal matter.

Please bear in mind that sending information to me does not by itself create a solicitor-client relationship.

Website analytics

I use Google Analytics to help me understand how visitors use the website.

Google Analytics may collect information about use of the website, such as pages visited, approximate location, device and browser information, referral source and interactions with the website. This information helps me understand how the website is being used and improve its content and performance.

Google Analytics uses cookies and similar technologies. Further information is available in the Cookie Policy.

Where consent is required for analytics cookies, they will only be used after you have given your consent through the website’s cookie controls.

How I use personal information

Where you contact me, I may use the information you provide to:

  • respond to your enquiry;
  • consider whether I am able to act for you;
  • carry out appropriate conflict and regulatory checks;
  • provide legal services if you subsequently instruct me;
  • communicate with you about those services;
  • comply with my legal and regulatory obligations; and
  • establish, exercise or defend legal claims.

I may also use information about how visitors use the website to understand and improve the website and its content.

Lawful bases for processing

Depending on the circumstances, I process personal information where:

  • it is necessary to take steps at your request before entering into a contract or to perform a contract with you;
  • it is necessary for compliance with a legal or regulatory obligation;
  • it is necessary for my legitimate interests, provided those interests are not overridden by your rights and interests; or
  • you have given consent, including where consent is required for the use of analytics cookies.

Where special category personal data is involved, I will only process it where an additional lawful condition applies.

Sharing personal information

I do not sell your personal information.

I may share personal information where reasonably necessary with organisations or individuals who assist me in providing my services or operating the website, including IT, website hosting and professional service providers.

Information may also be disclosed where required by law, regulation, court order or my professional obligations.

Google may process information collected through Google Analytics in accordance with its own privacy arrangements.

International transfers

Some service providers, including providers of website and analytics technology, may process information outside the United Kingdom.

Where personal information is transferred outside the UK, appropriate safeguards will be used where required by data protection law.

How long information is kept

I retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable legal, regulatory, professional and insurance requirements.

Analytics information is retained in accordance with the settings applied to the relevant analytics service.

Security

I take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure or loss.

However, information transmitted over the internet cannot be guaranteed to be completely secure.

Your rights

Depending on the circumstances, UK data protection law may give you rights in relation to your personal information, including the right to:

  • request access to your personal information;
  • ask for inaccurate information to be corrected;
  • ask for information to be erased in certain circumstances;
  • restrict or object to certain processing;
  • receive certain information in a portable format; and
  • withdraw consent where processing is based on consent.

To exercise any of these rights, please contact me at david@hughespost.co.uk.

Complaints about data protection

If you have concerns about how I use your personal information, please contact me first so that I have an opportunity to address them.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection.

Further information is available at ico.org.uk.

Changes to this policy

I may update this privacy policy from time to time to reflect changes to the website, my services or applicable law.

Last updated: July 2026