PRIVACY POLICY

One Barrister

Last Updated: October 2025

1. INTRODUCTION

One Barrister ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (www.onebarrister.co.uk), mobile applications (iOS and Android), and related services (collectively, the "Services").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Services.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

Account Registration:

• Full name
• Email address
• Phone number
• Password and security questions
• Date of birth
• Address and postcode
• Professional qualifications (for barristers/solicitors)
• Bar Standards Board (BSB) or Solicitors Regulation Authority (SRA) reference numbers

Service Booking Information:

• Type of legal service required
• Case details and documentation
• Matter description and urgency
• Preferred dates and times
• Payment information (processed securely; we do not store full card details)

Communication:

• Messages and correspondence through the platform
• Customer support inquiries
• Feedback and reviews

Optional Information:

• Profile picture
• Professional biography
• Areas of specialisation

2.2 Information Collected Automatically

Device Information:

• Device type, operating system, and version
• Unique device identifiers
• Mobile network information

Usage Data:

• Pages or features accessed
• Time and duration of use
• Clicks, searches, and interactions
• Referral source

Location Data:

• General location (city/region level) based on IP address
• Precise location only with your explicit consent

Cookies and Tracking:

• Session cookies (temporary)
• Persistent cookies (for remembering preferences)
• Analytics cookies (via Google Analytics)
• Third-party tracking technologies

3. LEGAL BASIS FOR PROCESSING

We process your personal data on the following legal bases under UK GDPR:

4. HOW WE USE YOUR INFORMATION

We use collected information for:

• Service Delivery: Matching clients with qualified barristers/solicitors, processing bookings, and managing reservations
• Account Management: Creating and maintaining your account, password recovery, and security
• Payment Processing: Processing fees, invoices, and refunds
• Communication: Sending booking confirmations, appointment reminders, service updates, and responding to inquiries
• Legal Compliance: Complying with regulatory requirements of the BSB, SRA, and other UK legal bodies; fraud detection and prevention
• Service Improvement: Analysing usage patterns, identifying technical issues, and enhancing user experience
• Marketing: Sending newsletters, promotions, and service updates (with your consent for direct marketing)
• Customer Support: Resolving disputes and providing assistance
• Legitimate Business Interests: Protecting our rights, preventing abuse, and ensuring platform security

5. WHO WE SHARE YOUR INFORMATION WITH

5.1 Third Parties

We may share your information with:

Essential Service Providers:

• Payment processors (e.g., Stripe, PayPal) - payment details only
• Cloud hosting providers (e.g., AWS, Google Cloud)
• Email and SMS communication platforms
• Analytics providers (Google Analytics)

Legal Professionals:

• Barristers and solicitors matched to your case (limited to necessary case details)
• Bar Standards Board and Solicitors Regulation Authority (for regulatory compliance if required)

Law Enforcement & Authorities:

• Police, courts, or government agencies if legally required

Other Disclosures:

• Your consent for specific purposes
• Business restructuring/sale (with confidentiality protections)

5.2 International Transfers

We do not routinely transfer data outside the UK/EEA. If we do, we implement safeguards such as:

• Standard Contractual Clauses (SCCs)
• Adequacy Decisions
• Your explicit consent

6. DATA RETENTION

We will delete or anonymise data when no longer necessary unless retention is required by law.

7. YOUR RIGHTS

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, portable format
• Right to Object: Opt-out of marketing, profiling, or processing based on legitimate interest
• Right to Withdraw Consent: Withdraw consent for processing at any time
• Right Not to Be Subject to Automated Decision-Making: Object to decisions based solely on automated processing
• Right to Lodge a Complaint: File a complaint with the Information Commissioner's Office (ICO)

To exercise these rights, contact us at privacy@onebarrister.co.uk

8. SECURITY

8.1 Security Measures

We implement industry-standard security practices:

• SSL/TLS encryption for data in transit
• AES-256 encryption for sensitive data at rest
• Secure password storage (hashing and salting)
• Multi-factor authentication (MFA) available for accounts
• Regular security audits and vulnerability assessments
• Employee data protection training and confidentiality agreements
• Restricted access to personal data (need-to-know basis)

8.2 Data Breach Notification

In the event of a data breach affecting your personal data, we will:

• Notify you within 72 hours (or as required by law)
• Provide details of the breach, affected data, and protective measures
• Contact the ICO if the breach poses high risk to your rights and freedoms

9. COOKIES AND TRACKING

9.1 Types of Cookies We Use

9.2 Cookie Management

You can control cookies through:

• Browser settings (accept/reject)
• Our cookie consent banner (at first visit)
• Opt-out options in your account settings

Note: Disabling essential cookies may limit functionality.

10. CHILDREN'S PRIVACY

Our Services are not intended for individuals under 18 years old. We do not knowingly collect data from children. If we become aware that a child has provided personal data, we will delete it promptly. Parents/guardians concerned about data collection should contact us immediately.

11. THIRD-PARTY LINKS

Our Services may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing your information.

12. CALIFORNIA & INTERNATIONAL USERS

For users outside the UK/EEA, applicable data protection laws may differ. If you are subject to other regulations (e.g., CCPA in California), we will comply with your local rights to the extent permitted.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in our practices or applicable law. We will notify you of material changes via:

• Email notification
• Prominent notice on the website/app
• Updated "Last Updated" date

Your continued use of our Services after changes constitutes acceptance of the revised Privacy Policy.

14. CONTACT US

For privacy inquiries, requests, or complaints:

Email: privacy@onebarrister.co.uk

Mail:
One Barrister
[Your Physical Address]
[City, Postcode]
United Kingdom

Phone: [Your Phone Number]

15. GOVERNING LAW

This Privacy Policy is governed by the laws of the United Kingdom. Any disputes shall be resolved in accordance with UK law and the jurisdiction of England and Wales courts.