Supreme Legal & Business Limited
Privacy Notice
(Updated in Oct 2026)
Your Data
You have provided your details to Supreme Legal & Business Ltd in connection with your legal or commercial matter. We will process your personal data fairly and lawfully under the principles of the General Data Protection Regulation (“GDPR”) solely in connection with your case and the provision of services by us.
This notice is designed to outline what personal data we collect about you and what we do with that data.
Data Sharing
We will use your personal data to provide our agreed consultancy and administrative services. Where your matter requires reserved legal activities, we may share your data, with your explicit instruction, with our partnered regulated solicitors or direct access barristers to ensure your case is dealt with comprehensively.
Section 1 - Who We Are:
In this Privacy Notice, ‘we’, ‘us’ and ‘our’ refer to Supreme Legal & Business Ltd. You can ask for further information about our use of your personal information, by contacting our Data Protection Officer either by email at info@slb-legal.co.uk or by post at Supreme Legal & Business Ltd, Plot 7, No.13 Lilly Wood Lane, Thatcham, Hampshire, RG19 8FY.
Supreme Legal & Business Limited is a data controller registered with the Information Commissioners Office under registration number ZB251757.
Section 2 – What Information We Process:
We process your information to administer your case and support the regulated professionals handling your matter.
We may receive personal information about you from any of the following sources:
You, your agents, your authorised representatives, or professionals instructing us on your behalf,
Third parties involved or representing a claimant/defendant to a claim,
Publicly accessible registers and databases, such as Companies House or HM Land Registry.
The information we receive may consist of the following personal data:
General information about you, such as your name, address, contact details and date of birth,
Information relevant to your case, contracts, or business information,
Sensitive personal information, such as any medical conditions and criminal convictions,
Your case history and relevant commercial or financial records provided by you,
Details of any complaint should there be a need to make one.
Where we process special category data (such as medical or criminal records), we do so on the basis that it is necessary for the establishment, exercise, or defense of legal claims, or with your explicit consent.
Section 3 – How We Will Use Your Information:
To evaluate the commercial or financial aspects of your matter,
To verify the information provided,
To confirm your identity,
To prevent, detect and investigate crime, including fraud and money laundering,
To administer and handle your case,
To assist with case enquiries,
To facilitate our quality and compliance monitoring,
To resolve complaints and process requests for data access or correction.
Section 4 – Our Lawful Basis and Data Security:
Under the UK GDPR, we must have a lawful basis to process your data. We rely on the following bases:
Contractual Necessity: To provide the legal and business consultancy services you have engaged us for.
Legal Obligation: To comply with statutory requirements, including anti-money laundering regulations.
Legitimate Interests: To manage our business operations, maintain our advanced case management CRM, and improve our services, provided your fundamental rights do not override these interests.
Consent: Where you have explicitly permitted us to share your file with partnered regulated professionals or ancillary experts.
Data Security and Storage: We are committed to ensuring your information is secure. We utilize secure cloud software, encrypted digital communication tools, and advanced case management systems to prevent unauthorized access, loss, or disclosure. If our service providers host data outside the UK or European Economic Area (EEA), we ensure appropriate safeguarding measures, such as Standard Contractual Clauses or the UK International Data Transfer Agreement, are in place to protect your privacy.
Section 5 – Who We Might Share Your Information With:
Your information may be disclosed to regulatory bodies for the purpose of monitoring and or enforcing our compliance with any regulatory rules/codes. Your information may also be used for research, statistical purposes, and crime prevention.
Where appropriate and with your permission, we will provide information to ancillary service providers such as expert witnesses, medical professionals, or commercial consultants required for your case.
We may also share your personal information with:
Other organisations where we have a duty to or are permitted to disclose your personal information by law (e.g. if we received a valid request from the police or other third party organisation in the interest of preventing and detecting crime),
Fraud prevention agencies and operators of registers are available to the industry to check information and prevent fraud,
With relevant secure industry portals, regulatory bodies, or industry registers where required to administer your case,
Another company, if our business or part of it is bought or taken over by that company, to ensure your case can continue to be serviced or as part of preliminary discussions with that company about a possible sale or takeover. You will be notified of this prior to any change or transfer.
Section 6 – How Long Do We Keep Your Data:
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. Typically, we hold client files for 6 years following the conclusion of your matter, in line with standard commercial limitation periods. After this, your data will be securely deleted, unless we are legally required or instructed by partnering regulated professionals to retain it longer.
Section 7 – Your Rights and Access to your Information:
You have several rights concerning the personal information we use, and these include the right to:
Ask for access to and a copy of your personal information,
Ask us to correct or delete the personal information,
Ask us to restrict or object to the use of your personal information,
Where you have previously given us your permission to use your personal information for marketing purposes, withdraw that permission. Where your permission is withdrawn, your previous consent will remain valid in respect of our use of your information prior to the date you withdrew it or if any marketing material has been sent prior to you advising that you do not wish us to contact you again,
Complain to the Information Commissioner’s Office at any time if you object to the way we use your personal information. You can contact them at www.ico.org.uk or by calling their helpline on 0303 123 1113.
Request information for transfer to another company, also known as data portability.
To request a copy of your data and make a formal ‘subject access request’ , please write to us at Data Protection Officer, Supreme Legal & Business, Plot 7, No.13 Lilly Wood Lane, Thatcham, Hampshire, RG19 8FY or request this by email at info@slb-legal.co.uk. For security reasons, please ensure that you include your full name, date of birth, address and postcode. We may request further information to validate your identity before the request is processed.
The information requested will be sent within 1 month unless the requests are complex or numerous, in which case we may extend this time by 2 months.
There will be no charge for a request for data; however, if it can be demonstrated that the requests are excessive, repetitive or frivolous, we may charge a reasonable fee or choose to refuse your request.
We do not use automated decision-making or profiling in the provision of our consultancy services.
Right to have your personal data deleted from our systems
You can request that we delete your personal data from our systems if you believe that:
We no longer need to process your personal data to provide you with services or,
We no longer need your personal data to provide our agreed consultancy services,
We have processed your personal data in a manner which you believe is unlawful or,
We have to delete your personal data to comply with another piece of legislation.
We may choose to refuse your request if we believe that:
We have a legal obligation to keep your data or,
It is required for establishing or defending a legal case.
Right to restrict the processing of your personal data
You can request that we temporarily stop the processing of your personal data if you believe that:
We should not process your data whilst we are in discussions with you regarding a disagreement over the accuracy of your personal data or,
We have processed your personal data in a manner which you believe is unlawful, but rather than wanting us to delete your data, you would prefer us to take another course of action to rectify your issue or,
We no longer require the data but you do not wish us to remove it from our systems as you require it for establishing or defending a legal case.
If such a restriction is put in place, then we will not process your data without informing you first that the reason for the restriction has been lifted.
Exceptions to this are that we can continue to process your data as follows:
Storing your data; or,
Using it for processing any application you have made; or,
Using it to establish, exercise, or defend a legal claims; or,
Using it for the protection of the rights of another person.
Section 8 – Important Information:
Please note that if you give us false or inaccurate information, it may affect our ability to properly administer your case or provide accurate support to the solicitors representing you.
If any information we hold is inaccurate, please contact us so we can update your data.
Section 9 – Information Collected via Our Website & Cookies: When you visit the Supreme Legal & Business Ltd website, we may collect certain information automatically or when you voluntarily provide it to us.
Information you provide: If you use our 'Contact Us' forms, appointment booking system, or email links, we will collect your name, contact details, and the contents of your inquiry to respond to your request.
Technical Data: We automatically collect standard internet log information and details of visitor behavior patterns. This includes your IP address, browser type and version, time zone setting, and operating system. We do this to ensure our website functions securely and effectively.
Cookies: Our website uses cookies (small text files placed on your device) to distinguish you from other users, improve your browsing experience, and analyze site traffic. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies.
Third-Party Links: Our website may include links to third-party websites, plug-ins, and applications (such as our Trustpilot reviews or business LinkedIn page). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
SUPREME LEGAL & BUSINESS LIMITED
5 Oct 2026