Home » Privacy policy
Penningtons Manches Cooper LLP is committed to protecting and respecting your privacy. This policy, together with our cookie policy and any other documents referred to in it), sets out the basis on which any personal information that we collect about you will be processed. Reference to Penningtons Manches Cooper LLP, or ‘we’ / ‘our’ / ‘us’, should be taken to include reference to all subsidiaries of Penningtons Manches Cooper LLP practising in the UK and overseas.
This policy applies to all personal information we collect when you interact with us including when you engage our legal or other services, when we refer work to you or you refer work to us, when you make an enquiry or request information from us or as a result of your relationship with our clients or staff. This policy also applies to information we collect through your use of this website www.penningtonslaw.com and any other online service created or hosted by us on which the privacy policy appears. If you engage us to carry out work for you, we will have client confidentiality obligations to you, as set out in our Terms of Business and our letter of engagement to you. If you apply for a job or placement with us the provisions of our privacy policy for candidates will apply and can be viewed here. If you have a working relationship with us the provisions of our fair processing notice for partners, employees, workers and contractors will apply.
Please read the following carefully to understand how we will treat your personal information.
Penningtons Manches Cooper LLP (‘we’ / ‘our’ / ‘us’) is a limited liability partnership registered in England and Wales (Registered No. OC311575) and is authorised and regulated by the Solicitors Regulation Authority. References to ‘partner’ include members and employees/consultants of equivalent standing within the LLP and its associated undertakings or businesses operating overseas. A list of the members is open to inspection at its registered office, 125 Wood Street, London, EC2V 7AW.
We own and operate the following:
This privacy notice is issued on behalf of all the entities referred to in the paragraph above. Unless we inform you otherwise the relevant entity processing your data will be Penningtons Manches Cooper LLP and Penningtons Manches Cooper LLP is the data controller in respect of your personal information.
We collect personal information so that we can operate effectively and provide you with the best possible service. The information we collect depends on how you interact with our website and how you use our services. It also depends on the choices you make, for example the website functions you use and your privacy settings. You may choose not to provide certain information but if you do, and that information is necessary to provide a particular feature, then you may not be able to use that feature. We will only use your personal information where we have a lawful basis to do so.
The tables below summarises what information we collect about you, explains how we intend to use it and what our legal basis is for using it. Click on the links below to take you to the section which is relevant to you:
In the tables, the following types of information include:
We may, in providing our services and operating our businesses, share your personal information with other Penningtons Manches Cooper entities. We may also share your personal information with third parties where:
We use third party service providers to support us in the performance of the activities set out in the table above including:
Further information on how client information may be shared and processed can be found in our Terms of Business. If you require further information regarding the identity of other third party service providers we use, please e-mail data@penningtonslaw.com or contact our Data Protection Officer at our Basingstoke office.
We may also share your personal information with other third parties, for example in the context of the possible sale or restructuring of the business. We may also need to share your personal information with a regulator or otherwise to comply with the law.
We require all our third party service providers to take appropriate and stringent security measures to protect your personal information in line with our policies. We do not allow our third party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes in accordance with our instructions.
In the course of providing our services and operating our business, it may be necessary for us to share personal information with our overseas offices, some of which are outside the UK and European Economic Area (EEA).
The level of protection in countries outside the UK and EEA may be less than that offered within the UK or EEA. To ensure that your personal information receives an adequate level of protection, we have put in place appropriate measures to ensure that your personal information is treated by those third parties in a way that is consistent with and which respects the EU and UK laws on data protection. Where our third party service providers process personal data outside the UK or EEA in the course of providing services to us, our contractual arrangements with these will include appropriate measures to meet UK or EU-approved data protection obligations, usually standard contractual clauses. If you require further information about these protective measures, please e-mail data@penningtonslaw.com or contact our Data Protection Officer at our Basingstoke office.
We will only retain your personal information for as long as is necessary to fulfil the purposes we collected it for or for as long as we have a lawful basis to retain it.
Your personal information will be retained in accordance with our data retention policy which categorises the information we hold and provides appropriate retention periods each category, based on the purpose for which the information is processed and taking into account legal and regulatory requirements, limitation periods for taking legal action, good practice and business requirements. For example, for legal reasons we may need to retain some of your personal information for 15 years (or 25 years where minors or disabilities are involved) after you engaged our services. In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. If you require further information regarding our data retention policy please e-mail data@penningtonslaw.com
Client due diligence information will be retained for five years from the conclusion of our business relationship with you, unless there is legitimate reason to retain it for a further five years.
If you become aware that your child or any child under your care has provided us with information without your consent please contact us at data@penningtonslaw.com.
All information that you provide to us is stored on secure servers. We have put in place appropriate measures to protect the security of your information.
The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of the information transmitted to our site and you acknowledge that any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access or inadvertent disclosure.
You are responsible for keeping confidential any passwords that you have to access our services (such as our extranets). Please do not share your password(s) with anyone else. If you lose control of your password you may lose control over your personal information. If your password has been compromised for any reason please let us know immediately by contacting us at: data@penningtonslaw.com.
You have the right under data protection laws to access information held about you, subject to certain conditions, and to request its rectification or deletion.
You can see, review and update your marketing preferences via our website. Alternatively, or if you would like to access, update or amend any other information which we hold about you or would like us to stop using your personal information please contact data@penningtonslaw.com.
We would like to send you information about legal updates, client seminars and similar events which may be of interest to you (including, for example promotional materials and newsletters). We will do this if we have a lawful basis for doing so in compliance with relevant privacy law (see Marketing and business development above) or if you consented to us doing so (for example, when you registered via our website or instructed us). For a link to the subscription form we use when seeking such consent click here.
You have the right at any time to stop us from contacting you for marketing purposes or giving your information to other members of our group. If you no longer wish to be contacted for marketing purposes, you can unsubscribe by using the “unsubscribe” link at the bottom of our marketing messages or by emailing data@penningtonslaw.com. You can also update your marketing preferences.
We use and provide links to websites which are controlled by third parties and these include the following:
If you use or follow a link to any of these third party websites you should be aware that these websites have their own privacy policies and we cannot accept responsibility for their use of your information.
We keep our privacy policy under regular review and will post any updates on this webpage. This privacy policy was last updated in May 2023.
To learn more about what’s new see our website or contact our Data Protection Officer at our Basingstoke office.
In May 2018 we published a new privacy statement to improve usability and increase clarity and transparency.
In August 2019 we amended this policy to take into account the acquisition of Thomas Cooper LLP and its overseas offices.
In May 2020 we amended this policy to clarify how we process Client Due Diligence Information.
In May 2023 we updated the details of our Greek Partnership and the provisions on international transfers of personal data.
Penningtons Manches Cooper LLP (registered number OC311575) is the data controller in respect of your personal information. Penningtons Manches Cooper LLP's registered office is at 125 Wood Street, London EC2V 7AW.
We have appointed a data protection officer to oversee compliance with this privacy policy. If you have any questions about this privacy policy, or how we handle your personal information, please contact our Data Protection Officer at / 01256 407100 / Matrix House, Basing View, Basingstoke, Hampshire, RG21 4DZ or by emailing data@penningtonslaw.com.
If for any reason you are not happy with the way that we have handled your personal information, please contact us at data@penningtonslaw.com or contact our Data Protection Officer at our Basingstoke office. If you are still not happy, you have the right to make a make a complaint to the Information Commissioner's Office see: https://ico.org.uk/global/contact-us/.
Why are we processing personal information about you? | What personal information will we collect about you? | How will we collect personal information? | Legal basis for processing |
---|---|---|---|
To enable us to provide legal or other services to you or your organisation |
Identity information Contact information Financial information Other personal information you provide to us concerning your business and/or personal interests We may collect additional categories of personal information (including special category personal information) if relevant to the particular type of legal services we are providing. For further information see the relevant section: |
Collected by us through our provision of legal or other services to you or the organisation you represent including:
|
Necessary for the performance of a contract with you or your organisation |
To carry out necessary identity checks before providing legal or other services (to comply with anti-money laundering legislation and to prevent fraud). |
Identity information Contact information Financial information ID documentation (including but not limited to passports, driving licences and utility bills) Signatures |
Collected by us through our provision of legal or other services to you or the organisation you represent including:
|
Necessary steps prior to entering into a contract with you Necessary to comply with our legal obligations |
To enable us to provide legal or other services to our clients |
Identity information Contact information Financial information Other personal information you provide to us concerning your business and/or personal interests |
Collected by us through our provision of legal or other services to our clients including:
|
To enable us to pursue our legitimate interest to deliver legal or other services to our clients |
(including advice relating to clinical negligence claims, Court of Protection and deputyships, family law, holiday accident claims, immigration law, personal injury claims, residential property and conveyancing, tax law and wills and probate). For employment and pension matters click here.
Why are we processing personal information about you? | What personal information will we collect about you? | How will we collect personal information? | Legal basis for processing |
---|---|---|---|
To enable us to provide legal services to individuals |
Personal information that is relevant to a matter on which we are instructed including (where relevant):
|
Collected by us through our provision of legal or other services to you including:
|
Necessary for the performance of a contract with you |
In addition, we may collect the special category information if relevant to a matter on which we are instructed including:
|
Provided by you and/or received from third parties in anticipation of, or during the course of, providing legal services (including other professionals when they refer you to us) | Necessary for the establishment, exercise or defence of legal claims | |
Collected by us in the course of providing legal services where information has already been disclosed in court or public documents by you, or at the request of or on behalf of you | Processing relates to personal data which are manifestly made public by the data subject | ||
In addition we may process personal information relating to criminal convictions where permitted by law | Provided by you and/or third parties in anticipation of, or during the course of, providing legal services (including other professionals when they refer you to us) | Necessary for the establishment, exercise or defence of legal claims |
(including advice relating to banking and finance, commercial, company secretarial, construction, corporate, corporate tax, data protection and privacy, intellectual property, IT & telecommunications, professional regulation, real estate, regulatory compliance, restructuring and insolvency, and travel. For employment and pension matters click here. For commercial dispute resolution click here).
Why are we processing personal information about you? | What personal information will we collect about you? | How will we collect personal information? | Legal basis for processing |
---|---|---|---|
To enable us to provide legal services to your business |
Personal information that is relevant to a matter on which we are instructed including:
The following information may be collected specifically for Companies House filings and incorporations:
|
Collected by us through our provision of legal or other services to you or the organisation you represent including:
|
Necessary for the performance of a contract with you or your business |
In addition, we may collect the following special categories of information if relevant to a matter on which we are instructed including:
|
Provided by you in the course of instructing us |
Your consent Necessary for the establishment, exercise or defence of legal claims |
|
Collected by us in the course of providing legal services where information has already been disclosed in court or public documents by you, or at the request of or on behalf of you | Processing relates to personal data which are manifestly made public by the data subject |
Why are we processing personal information about you? | What personal information will we collect about you? | How will we collect personal information? | Legal basis for processing |
---|---|---|---|
To enable us to provide legal services relating to commercial dispute resolution |
Personal information that is relevant to a matter on which we are instructed including:
|
Collected by us through our provision of legal or other services to you or the organisation you represent including:
|
Necessary for the performance of a contract with you or your organisation |
In addition, we may collect the following special categories of information if relevant to a litigation matter on which we are instructed including:
|
Provided by you and/or third parties in anticipation of, or during the course of, providing legal services (including other professionals when they refer you to us) | Necessary for the establishment, exercise or defence of legal claims | |
Collected by us in the course of providing legal services where information has already been disclosed in court or public documents by you, or at the request of or on behalf of you |
Processing relates to personal data which are manifestly made public by the data subject | ||
In addition we may process personal information relating to criminal convictions where permitted by law and necessary for the establishment, exercise or defence of a legal claim | Provided by you and/or third parties in circumstances where litigation is contemplated (including other professionals when they refer you to us) | Necessary for the establishment, exercise or defence of legal claims |
Why are we processing personal information about you? | What personal information will we collect about you? | How will we collect personal information? | Legal basis for processing |
---|---|---|---|
To enable us to provide legal services on charity matters |
Personal information that is relevant to a matter on which we are instructed including:
|
Collected by us through our provision of legal or other services to you or the organisation you represent including:
|
Necessary for the performance of a contract with you |
In addition, we may collect the following special categories of information if relevant to a matter on which we are instructed including:
|
Provided by you in the course of instructing us |
Your consent Necessary for the establishment, exercise or defence of legal claims |
|
Collected by us in the course of providing legal services where information has already been disclosed in court or public documents by you, or at the request of or on behalf of you | Processing relates to personal data which are manifestly made public by the data subject | ||
In addition we may process personal information relating to criminal convictions where permitted by law and necessary for the establishment, exercise or defence of a legal claim | Provided by you and/or third parties in circumstances where litigation is contemplated (including other professionals when they refer you to us) | Necessary for the establishment, exercise or defence of legal claims |
Why are we processing personal information about you? | What personal information will we collect about you? | How will we collect personal information? | Legal basis for processing |
---|---|---|---|
To enable us to provide legal services on employment or pension matters |
Personal information that is relevant to a matter on which we are instructed including:
|
Collected by us through our provision of legal or other services to you or the organisation you represent including:
|
Necessary for the performance of a contract with you or your organisation |
In addition, we may process the following special categories of information if relevant to an employment or pensions matter on which we are instructed including:
|
Provided by you and/or third parties in anticipation of, or during the course of, providing legal services (including other professionals when they refer you to us) |
Necessary for the establishment, exercise or defence of legal claims | |
Collected by us in the course of providing legal services where information has already been disclosed in court or public documents by you, or at the request of or on behalf of you | Processing relates to personal data which are manifestly made public by the data subject | ||
In addition we may process personal information relating to criminal convictions where permitted by law and necessary for the establishment, exercise or defence of a legal claim |
Provided by you and/or third parties in circumstances where litigation is contemplated (including other legal professionals when they refer you to us) |
Necessary for the establishment, exercise or defence of legal claims |
Why are we processing personal information about you? | What personal information will we collect about you? | How will we collect personal information? | Legal basis for processing |
---|---|---|---|
To deal with enquiries, correspondence or complaints |
Identity information Contact information Any other personal information you provide to us relevant to the enquiry or issue raised |
Collected by us in the course of dealing with enquiries or other requests made by you or the organisation you represent including:
|
To enable us to pursue our legitimate interests to: provide information or services requested; or to deal with complaints |
To decide if someone else can assist with your enquiry (including experts, advisers and suppliers) |
Identity information Contact information Any other personal information you provide to us relevant to the enquiry or issue raised |
Collected by us in the course of dealing with enquiries or other requests made by you or the organisation you represent including:
|
To enable us to pursue our legitimate interests to: provide information or services requested |
Why are we processing personal information about you? | What personal information will we collect about you? | How will we collect personal information? | Legal basis for processing |
---|---|---|---|
To enable us to host a meeting, seminar or other event |
Identity information Contact information |
Provided by you when you:
Received from third parties (including other professionals when they refer you to us) |
Necessary for the performance of a contract with you To enable us to pursue our legitimate interest to deliver legal or other services requested |
Where you provide it to us, information about your dietary requirements and allergies | Provided by you |
Your consent To enable us to pursue our legitimate interest to provide catering at meetings, seminars or other events |
|
Images captured by our offices’ CCTV | Images captured when you visit our offices | To enable us to pursue our legitimate interest to maintain the safety and security of our premises |
Why are we processing personal information about you? | What personal information will we collect about you? | How will we collect personal information? | Legal basis for processing |
---|---|---|---|
To manage our relationship with you or your organisation and to exercise our contractual rights and meet our contractual obligations |
Identity information Contact information Other personal information you provide to us concerning your business and personal interests Details of your attendance at meetings or other events we host |
Through our provision of legal services to you or the organisation you represent (for further information see Provision of legal and other services above) Collected by us in the course of dealing with enquiries or other requests raised by you or the organisation you represent (for further information see Response to enquiries and requests for information above) Collected by us in the course of arranging a meeting or other event (for further information see Organisation of meetings, seminars and other hosted events above) |
To enable us to pursue our legitimate interest to manage our business relationships Necessary for the performance of a contract with you |
To enable us to run our business in an efficient and proper manner including to:
|
Identity information Contact information Financial information Other personal information you provide to us concerning your business and personal interests Details of your attendance at meetings or other events we host |
Through our provision of legal services to you or the organisation you represent (for further information see Provision of legal and other services above) Collected by us in the course of dealing with enquiries or other requests raised by you or the organisation you represent (for further information see Response to enquiries and requests for information above) Collected by us in the course of arranging a meeting or other event (for further information see Organisation of meetings, seminars and other hosted events above) |
To enable us to pursue our legitimate interest to run our business in an efficient and proper manner |
To comply with our legal and regulatory obligations |
Client due diligence information Identity information Contact information Financial information Other personal information you provide to us concerning your business and personal interests |
Provided by you or on your behalf, or obtained by us from third parties and online resources, including online identity verification service providers and credit reference agencies. Through our provision of legal services to you or the organisation you represent (for further information see Provision of legal and other services above) Collected by us in the course of dealing with enquiries or other requests raised by you or the organisation you represent (for further information see Response to enquiries and requests for information above) Collected by us in the course of arranging a meeting or other event (for further information see Organisation of meetings, seminars and other hosted events above) |
To comply with our legal and regulatory obligations |
Why are we processing personal information about you? | What personal information will we collect about you? | How will we collect personal information? | Legal basis for processing |
---|---|---|---|
To maintain details of preferred partners (including experts, advisers and suppliers) |
Identity information Contact information Financial information Other relevant information including:
|
Provided by you when we instruct you to provide a service Provided by you when you introduce yourself to us for future work Provided by other professionals, agencies or other bodies when they recommend you to us Collected by us in the course of providing our services (including information collected by us from publicly available information about you or your organisation) |
Necessary for the performance of a contract with you To enable us to pursue our legitimate interest to deliver legal or other services requested |
To instruct the services of a partner (including experts, advisers and suppliers) |
Identity information Contact information Financial information Other relevant information including:
|
Provided by you when we instruct you to provide a service Provided by you when you introduce yourself to us for future work Provided by other professionals, agencies or other bodies when they recommend you to us Collected by us in the course of providing our services (including information collected by us from publicly available information about you or your organisation) |
Necessary for the performance of a contract with you To enable us to pursue our legitimate interest to deliver legal or other services requested |
Why are we processing personal information about you? | What personal information will we collect about you? | How will we collect personal information? | Legal basis for processing |
---|---|---|---|
Where you have provided consent, to send you marketing communications, newsletters, information about events and legal updates that may be of interest to you (for further information see Marketing below) |
Identity information Contact information Where provided by you, your areas of interest |
Provided by you when you complete our subscription form. |
Your consent (for further information see Marketing below) |
To send our clients, unless they have opted out, marketing communications, newsletters, information about events and legal updates. Where we are using a personal email address (or our client is a sole trader or a partner in a partnership that is not a limited company or a limited liability partnership (LLP)) we will only send information relating to similar services to those provided to such clients in the past. |
Identity information Contact information Where provided by you, your areas of interest |
Collected by us in the course of providing or negotiating the provision of services to you (for further information see Provision of legal and other services above) | To enable us to pursue our legitimate interest to maintain contact with our clients and to grow our business (for further information see Marketing below). |
To keep records and maintain contact with clients and third party contacts in order to grow our business |
Identity information Contact information Where provided by you, your areas of interest |
Provided by you when we instruct you to provide a service Provided by you when you introduce yourself to us for future work Provided by other professionals, agencies or other bodies when they recommend you to us Collected by us in the course of providing our services (including information collected by us from publicly available information about you or your organisation) |
To enable us to pursue our legitimate interest to maintain contact with our clients and third party contacts and to grow our business |
You do not need to provide us with any information in order to access most of our website. We collect information you provide to us via our website, for example when you make an online enquiry. How we use it depends on the context. Click on the following links for further information on how we process information obtained via the website in the following circumstances:
We also collect some information automatically when you use our websites. Further information is set out in the table below.
Why are we processing personal information about you? | What personal information will we collect about you? | How will we collect personal information? | Legal basis for processing |
---|---|---|---|
To ensure that the content on our website is presented in the most effective manner for you and for your device |
Device and usage data (including IP addresses and device identifiers) Device event information (including crash logs, hardware settings, browser type and browser language) Location information |
Automatically collected and stored in our server logs when you interact with our website |
To enable us to pursue our legitimate interest to present our website in the most effective way |
Cookies and similar technologies | For further information see our use of cookies | Your consent | |
For our internal operations, including analysis of the traffic to our website |
Device and usage data (including IP addresses and device identifiers) Device event information (including crash logs, hardware settings, browser type and browser language) Location information |
Automatically collected and stored in our server logs when you interact with our website | To enable us to pursue our legitimate interest to better understand visitors to our website |
Cookies and similar technologies | For further information see our use of cookies |
Your consent | |
To protect the security of our website |
Device and usage data (including IP addresses and device identifiers) Device event information (including crash logs, hardware settings, browser type and browser language) Location information |
Automatically collected and stored in our server logs when you interact with our website | To enable us to pursue our legitimate interest to maintain the security of our website |
Cookies and similar technologies | For further information see our use of cookies |
Your consent |
We have a duty to process personal data fairly, lawfully and in a manner that you would expect given the nature of our relationship with you. Where we have a legal basis to use your personal information without consent (as set out in the table above), this policy fulfils that duty by giving you appropriate notice and explanation of the way in which your personal information will be used. Where consent is required for our use of your personal information we will ask you to positively opt-in. Please note that we may process your personal information without your knowledge or consent where this is required or permitted by law.
If you have any questions or require any further information regarding our use of your personal information please contact our Data Protection Officer at data@penningtonslaw.com.
We do not collect or store credit and debit card information. We limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality. If you require further information regarding these measures please e-mail data@penningtonslaw.com.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
By law you have the right to:
You should be aware that if you ask us to stop processing your personal information in a certain way or erase your personal information, and this type of processing or data is needed to facilitate your use of the website or to provide you with legal services you may not be able to use the website as you did before or we may not be able to continue advising you. This does not include your right to object to direct marketing, which can be exercised at any time without restriction.
If you want to exercise any of the above rights please contact us at / 01256 407100 / Matrix House, Basing View, Basingstoke, Hampshire, RG21 4DZ or by emailing us at data@penningtonslaw.com.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is an appropriate security measure to ensure that personal information is not disclosed to a person who has no right to receive it.
In the limited circumstances where we are relying on your consent as the legal basis to process your personal information for a particular purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact data@penningtonslaw.com. Once we know that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
© 2025 Penningtons Manches Cooper LLP.
All rights reserved.
Website design by Frontmedia / Dynamic Pear
Penningtons Manches Cooper LLP is a limited liability partnership registered in England and Wales with registered number OC311575 and is authorised and regulated by the Solicitors Regulation Authority under number 419867.