Privacy Notice
Independent cross-border consultancy from London, with regulated and reserved work clearly separated and handled by appropriately authorised professionals where required.
Last updated: 4 September 2026.
1. Who we are
Hamilton & Nassouri R Lawyers Ltd (company number 06341189), trading as Royal Law, is the controller of personal data processed for this public website and for Royal Law's own business administration, except where another professional or provider acts as a separate controller for their own services.
Contact: info@royallaw.uk. Registered office: Berkeley Square House Nn&Ss Limited, Berkeley Square, Mayfair, London, Westmister, England, W1J 6BD.
2. Information we may receive
We may process identification and contact information, enquiry details, correspondence, matter information, billing and transaction records relating to our own fees, compliance and risk-check information, and technical security information such as IP address, request time and browser/device information recorded in server logs.
3. How we collect information
We receive information directly from you, from people or organisations involved in a matter, from professional advisers and service providers, from lawful public sources, and from our hosting and security systems. The public website does not currently use a general web enquiry form; new enquiries are made by email, telephone or through the separate secure client portal.
4. Why we use information
We use personal data where necessary to respond to enquiries, decide whether we can accept a matter, perform or prepare to perform a contract, administer accepted work, comply with legal and regulatory obligations, establish or defend legal rights, prevent fraud and misuse, maintain information security, and operate our business.
5. Legal bases
Depending on the circumstances, processing is based on one or more of: steps taken at your request before entering into a contract; performance of a contract; compliance with legal obligations; legitimate interests in operating a lawful, secure and properly administered professional-services business; consent where specifically requested; and the additional UK GDPR conditions applicable to special-category or criminal-offence data where such data must lawfully be processed.
6. Special-category and sensitive information
Legal matters can involve sensitive information. Do not send more information than is necessary before we confirm a secure method of communication and accept the matter. Where sensitive data is required for an accepted matter, we restrict access and process it only where a lawful basis and relevant additional condition apply.
7. Who we may share information with
Where lawful and necessary, we may share information with professional advisers and authorised external counsel, experts, courts or public authorities, identity and compliance providers, insurers, accountants, banking/payment providers for our own invoices, IT/hosting/security providers and other processors supporting our business. We do not sell personal data to advertisers.
8. International transfers
Cross-border matters can require information to be sent outside the United Kingdom. Where UK data-protection law applies, we use an available lawful transfer mechanism and take appropriate safeguards into account. We will also consider professional confidentiality before disclosing matter information.
9. Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including professional, contractual, tax, accounting, compliance, limitation and dispute requirements. Retention periods vary according to the type of record and matter. Enquiries that do not become matters are not kept indefinitely.
10. Security
We use technical and organisational measures intended to protect data against unauthorised access, loss, misuse or alteration. No internet transmission is completely risk-free. Existing clients should use the secure client portal or another method specifically agreed for sensitive documents.
11. Your rights
Subject to applicable law and exemptions, you may have rights to access personal data, correct inaccurate data, request erasure or restriction, object to certain processing, request data portability, and withdraw consent where processing is based on consent. To exercise a right, email info@royallaw.uk.
12. Complaints to the ICO
If you are dissatisfied with how we use personal data, please contact us first so we can try to resolve the issue. You may also complain to the UK Information Commissioner's Office. Current contact information is available at ico.org.uk.
13. Cookies and analytics
The public Royal Law website is currently configured without general analytics or advertising trackers and does not intentionally set non-essential marketing cookies. Our hosting and security infrastructure may process essential technical information needed to deliver and protect the site. See our Cookie Notice for further information.
14. Separate services
The secure client portal and independent professionals we coordinate may have their own privacy information and may act as separate controllers for their services. Their notices apply to their processing in addition to this notice where relevant.