Privacy policy UK

Privacy Policy

Your contracts are confidential. Your data is guarded. Stratton & Scott Drafting only processes what we need to draft, review, and deliver legal documentation, and we do it under UK privacy compliance rules.

Last updated: 17 July 2026. Need the short version? We minimise data, lock it down, and keep the paperwork honest.

Data minimised Encrypted transfer UK GDPR aligned
Legal documents and a secure laptop on a crisp office desk in London, showing careful data handling
Confidential by design Sensitive briefing notes, party names, and contract terms stay restricted to essential personnel.

1. What data we collect

Why collect anything more than we need? We keep the intake lean so your enquiry stays focused, and your file doesn’t become a cluttered archive.

We use encrypted transfer, access controls, and limited retention to protect client data. How strict is strict enough? For legal work, it has to be serious.

No loose files. No broad sharing. Only what law and delivery require.

6 Years retained after engagement ends

2. How we use your data

We don’t process information for the sake of it. Every use has a purpose, and every purpose is tied to the service you’ve asked for.

What we won’t do

We don’t sell client data. We don’t share it with third parties for their own marketing. We don’t over-collect. Clean process. Plain answer.

Legal basis

Processing is limited to contract performance, legal obligation, and, where needed, your consent. That’s the framework. Nothing vague.

3. Data storage and security

Security isn’t a decorative word here. It’s the system. We keep matters contained, traceable, and protected from unnecessary access.

Storage controls

Locked in transit and at rest.

Files are stored on UK-based systems with encryption enabled, and access is restricted to essential personnel only. That means fewer touchpoints, fewer risks, and a tighter chain of custody.

Encrypted workflows

Transfer and storage are encrypted. If a file moves, it moves safely.

Essential access only

Only team members who need the file can open it. Simple rule, serious effect.

Retention period

We retain records for six years after the engagement ends, because UK legal and accounting requirements don’t leave much room for guesswork. Need to know why that matters? It keeps both sides protected.

4. Your rights and contact

You stay in control of your personal data. Access, rectification, erasure, restriction, portability, objection — the full set. Need help exercising a right? Just ask.

How to reach us

Email [email protected] with your request, and we’ll deal with it without unnecessary delay. If you’re unhappy with our response, you can also complain to the Information Commissioner’s Office.

Updates and acceptance

We may update this policy from time to time, and continued use of our services means you accept the latest version. Want the terms as well? Read the service terms or contact us directly. Straight answer, no detours.