Privacy Notice

About this notice Legalstone respects your privacy and is committed to protecting personal information. This Privacy Notice explains how Legalstone collects, uses, stores and shares personal information when you visit our website, contact us, use our services, work with us or otherwise interact with Legalstone. It also explains the rights you may have in relation to your personal information. Who we are Legalstone is the trading name of Legalstone Limited, a company incorporated and registered in England and Wales. Company number: 17420855Registered office: 4 Old Park Lane, Mayfair, London, W1K 1QWICO registration reference: ZC235822Email: enquiries@legalstone.co.ukTelephone: 020 7348 4848 For the purposes of applicable data protection law, Legalstone Limited will generally be the controller of personal information processed in connection with our business and services. In some circumstances, another organisation may act as a separate controller or Legalstone may process information on behalf of another organisation. Where relevant, the respective roles will depend on the particular circumstances. Information we may collect The personal information we collect will depend on your relationship with Legalstone and the nature of the services or interaction involved. This may include: 

• identity information, including your name, title, date of birth and, where necessary, identification documents;
• contact information, including postal address, email address and telephone number;
• professional and business information, including your role, organisation, employment or business interests;
• information relating to a legal, commercial, corporate, transactional or other matter in which you are involved;
• correspondence, documents and other information you provide to us;
• information concerning other individuals where relevant to a matter;
• financial, billing and transaction information;
• company, directorship, shareholding and beneficial ownership information;
• identification, verification and due diligence information;
• information obtained from public records, registers, databases and other publicly available sources;
• technical information relating to your use of our website or electronic services; and
• any other personal information reasonably necessary in connection with our relationship with you or the services we provide.

 Depending on the nature of a matter, information provided to us may include particularly sensitive information or information concerning allegations, disputes, proceedings or criminal offences. We will process such information only where there is an appropriate lawful basis and where its use is relevant and proportionate to the purpose for which it is required. How we collect information We may collect personal information: 

• directly from you;
• from another client, representative or person involved in a matter;
• from solicitors, barristers, accountants, consultants and other professional advisers;
• from companies, counterparties and other organisations;
• from Companies House, courts, public registers and other official sources;
• from publicly available websites, databases and information sources;
• from identity verification, due diligence and corporate service providers;
• through our website and communications systems; and
• from other sources where obtaining the information is lawful and relevant to our work.

 Because of the nature of our services, we may process information about individuals who are not themselves clients of Legalstone. How we use personal information We may use personal information to: 

• respond to enquiries and communicate with you;
• assess whether we are able to accept or assist with a matter;
• provide legal, commercial, strategic, corporate and related professional services;
• understand, research, organise and manage matters;
• prepare, review and manage documents and correspondence;
• support disputes, transactions, corporate matters and other engagements;
• conduct appropriate identity, verification, conflict, due diligence and risk checks;
• assist with company formations, corporate administration and related services;
• coordinate external professionals and specialist service providers;
• manage our relationship with clients, prospective clients and professional contacts;
• administer engagements, invoices and payments;
• operate, maintain and improve our business, website and services;
• maintain appropriate business and matter records;
• establish, exercise or defend legal rights;
• prevent or detect fraud, misuse or other unlawful activity;
• comply with legal, regulatory, tax, accounting and other obligations; and
• protect the legitimate interests, security and operation of Legalstone, our clients and others.

 We will not use personal information for purposes that are incompatible with the purposes for which it was collected unless permitted or required by law. Our lawful bases for processing Under UK data protection law, we must have a lawful basis for processing personal information. Depending on the circumstances, we may rely on one or more of the following: Contract: Where processing is necessary to enter into or perform a contract with you. Legitimate interests: Where processing is necessary for our legitimate business or professional interests, or those of another person, provided those interests are not overridden by your rights and interests. These interests may include providing and administering our services, managing matters, operating and protecting our business, maintaining professional relationships, establishing or defending legal rights and improving our services. Legal obligation Where processing is necessary for us to comply with a legal obligation. Consent: Where we rely on your consent for a particular activity. Where consent is the applicable basis, you may withdraw it at any time, although this will not affect processing undertaken before withdrawal. Other lawful bases may apply where permitted by data protection legislation. Special category and criminal offence information Some matters may involve information that receives additional protection under data protection law. This may include information concerning health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric information, sex life or sexual orientation. Matters may also involve personal information relating to criminal allegations, investigations, proceedings or convictions. Where we process this type of information, we will do so only where permitted by applicable law and where the processing is relevant and proportionate to the purpose for which the information is required. Company formations and identity verification Where Legalstone assists with company formations, corporate administration, Companies House matters or related services, we may need to collect and process identity, address, directorship, shareholding, beneficial ownership and other corporate information. Where appropriate, information may be provided to Companies House or to an Authorised Corporate Service Provider (ACSP), also known as a Companies House authorised agent, or another appropriate corporate or identity verification service provider. The relevant provider may process personal information in accordance with its own legal and regulatory obligations and privacy information. Further information about the way Legalstone provides corporate and company formation services is available in our Regulatory Information. Sharing information We may share personal information where reasonably necessary for the purposes described in this Privacy Notice. Depending on the circumstances, recipients may include: 

• solicitors, barristers and authorised law firms;
• accountants, experts, consultants, investigators and other professional advisers;
• corporate service providers and Authorised Corporate Service Providers;
• identity verification and due diligence providers;
• technology, hosting, communications, document management and other operational service providers;
• banks, payment providers, insurers and professional advisers;
• courts, tribunals, regulators, public authorities and law enforcement bodies;
• Companies House and other public registries;
• counterparties and their professional representatives where appropriate to a matter; and
• other persons where you have authorised us to disclose information or where disclosure is otherwise lawful.

 We seek to ensure that personal information is shared only where there is an appropriate reason for doing so and subject to appropriate protections where required. Confidentiality Personal information we receive may also be confidential. We maintain practices intended to protect confidential information and restrict access to those who require it for legitimate purposes. Our approach to confidential information is explained further in our Confidentiality information. International transfers Some of the service providers, professional advisers or other organisations we work with may process personal information outside the United Kingdom. Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable data protection law. This may include relying on adequacy regulations, approved contractual safeguards or another lawful transfer mechanism where required. Information security We take appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. The measures used will depend on the nature and sensitivity of the information and the circumstances in which it is processed. No system or method of electronic transmission or storage can be guaranteed to be completely secure. How long we keep information We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including the provision of our services and the satisfaction of legal, regulatory, accounting, tax, insurance and legitimate business requirements. The appropriate retention period will depend on factors including the nature of the information, the services provided, the circumstances of the matter and any applicable legal or professional requirements. When information is no longer required, we will take appropriate steps to delete, anonymise or securely dispose of it. Your rights Depending on the circumstances, UK data protection law may give you rights in relation to your personal information, including the right to: 

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of personal information in certain circumstances;
• request restriction of processing in certain circumstances;
• object to processing based on legitimate interests;
• request the transfer of certain information to you or another organisation;
• withdraw consent where processing is based on consent; and
• raise a complaint about the way your personal information is processed.

 These rights are subject to conditions, exemptions and limitations under applicable law and will not apply in every circumstance. We may need to verify your identity before responding to a request. Marketing communications Where permitted by law, we may use contact information to communicate with clients, prospective clients and professional contacts about Legalstone, our services or information we believe may be relevant to them. Where consent is required, we will seek it before sending marketing communications. You may ask us to stop sending marketing communications at any time by using any unsubscribe mechanism provided or by contacting us. Cookies and website information Our website may use cookies and similar technologies to operate, understand and improve the website and, where applicable, provide analytics or other functionality. Further information about the cookies we use and the choices available to you is provided in our Cookie Policy. Third-party websites Our website may contain links to websites operated by third parties. Legalstone is not responsible for the privacy practices or content of third-party websites. We recommend reviewing the privacy information provided by the relevant third party before providing personal information to them. Changes to this Privacy Notice We may update this Privacy Notice from time to time to reflect changes in our services, business practices, technology or applicable law. The current version will be published on our website. Last updated: August 2026 Contact us If you have questions about this Privacy Notice, wish to exercise a data protection right or have concerns about how we handle personal information, please contact: Legalstone LimitedEmail: privacy@legalstone.co.uk Complaints to the ICO You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator, if you have concerns about the way your personal information has been handled. We would welcome the opportunity to consider and address your concerns directly before you approach the ICO.