We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities in the event you have a complaint.
When we use your personal data we are regulated under the UK GDPR and the Data Protection Act 2018 and we are responsible as ‘controller’ of that personal data. Our use of your personal data is subject to your instructions, data protection law, other relevant UK legislation and our professional duty of confidentiality.
Key terms
“We, us, our” means AMZ Law, a trading name of AMZ LEGAL Limited. Our Data Protection Officer is Ashwaq Mizher.
“Personal data” means any information relating to an identified or identifiable individual. “Special category personal data” includes personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership; genetic and biometric data; and data concerning health, sex life or sexual orientation.
Personal data we collect about you
We will or may collect the following personal data in the course of advising and/or acting for you. This personal data is required to enable us to provide our service to you. If you do not provide personal data we ask for, it may delay or prevent us from providing services to you.
Personal data we will collect includes:
- your name, address and telephone number;
- information to enable us to check and verify your identity, for example your date of birth or passport details;
- electronic contact details, for example your email address and mobile phone number;
- information relating to the matter in which you are seeking our advice or representation;
- information to enable us to undertake a credit or other financial checks on you; and
- your financial details so far as relevant to your instructions, for example the source of your funds if you are instructing us on a purchase transaction.
Depending on why you have instructed us, we may also collect National Insurance and tax details, bank details, professional online presence, details of spouse, partner, dependants or other family members, employment status and records, nationality and immigration status, pension arrangements, special category data where relevant to your matter, and medical records.
How your personal data is collected
We collect most of this information from you directly. We may also collect information from publicly accessible sources such as Companies House or HM Land Registry; from third parties such as sanctions screening providers, credit reference agencies and client due diligence providers; from a third party with your consent (for example your bank, employer, professional advisers or medical professionals); via our website, including cookies; and via our IT systems, including case management, reception logs, CCTV and communications systems.
How and why we use your personal data
Under data protection law, we can only use your personal data if we have a proper reason for doing so: to comply with our legal and regulatory obligations; for the performance of our contract with you or to take steps at your request before entering into a contract; for our legitimate interests or those of a third party; or where you have given consent.
- to provide legal services to you;
- conducting checks to identify our clients and verify their identity, and screening for financial and other sanctions or embargoes;
- other processing necessary to comply with professional, legal and regulatory obligations that apply to our business;
- gathering and providing information required by or relating to audits, enquiries or investigations by regulatory bodies;
- ensuring business policies are adhered to, operational reasons such as improving efficiency, training and quality control, and statistical analysis to help us manage our practice;
- updating client records, statutory returns, ensuring safe working practices and staff administration;
- marketing our services to existing and former clients and other third parties, where permitted; and
- credit reference checks and external audits, including the audit of our accounts.
The above does not apply to special category personal data, which we will only process with your explicit consent unless another lawful basis applies.
Promotional communications
We may use your personal data to send you updates by email or post about legal developments that might be of interest to you and/or information about our services, including any new services that we may be offering. We have a legitimate interest in processing your personal data for promotional purposes. This means we do not usually need your consent to send you promotional communications. However, where consent is needed, we will ask for this consent separately and clearly.
We will always treat your personal data with the utmost respect and never share it with other organisations for marketing purposes. You have the right to opt out of receiving promotional communications at any time.
To opt out, please contact our Data Protection Officer, Ashwaq Mizher, at dpo@amzlaw.co.uk. Please advise us if you would prefer not to receive any future e-communications from us.
Who we share your personal data with
We routinely share personal data with professional advisers instructed on your behalf; other third parties where necessary to carry out your instructions; credit reference agencies; our insurers and brokers; external auditors; our bank; and external service suppliers that we use to make our business more efficient.
We only allow our service providers to handle your personal data if we are satisfied they take appropriate measures to protect it. We may also disclose information to law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations. We will not share your personal data with any other third party for their own marketing.
How long your personal data will be kept
We will keep your personal data after we have finished advising or acting for you, including to respond to questions, complaints or claims, to show that we treated you fairly, and to keep records required by law. We will not retain your data for longer than necessary. When it is no longer necessary to retain your personal data, we will delete or anonymise it.
Transferring your personal data out of the UK
To deliver services to you, it is sometimes necessary for us to share your personal data outside the UK, for example with service providers located abroad, if you are based outside the UK, or where there is an international dimension to the matter in which we are advising you. These transfers are subject to special rules under UK data protection law.
Your rights
You have the following rights, which you can exercise free of charge: access; rectification; erasure (to be forgotten) in certain situations; restriction of processing; data portability; to object to processing, including for direct marketing; and not to be subject to automated individual decision-making.
If you would like to exercise any of those rights, please email, call or write to our Data Protection Officer at dpo@amzlaw.co.uk. Please provide enough information to identify you, proof of your identity and address, and details of the right you want to exercise and the information to which your request relates.
Keeping your personal data secure
We have appropriate security measures to prevent personal data from being accidentally lost, or used or accessed unlawfully. We limit access to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality. We also have procedures in place to deal with any suspected data security breach.
How to complain
We hope that we can resolve any query or concern you may raise about our use of your information. You also have the right to lodge a complaint with the UK Information Commissioner’s Office at https://ico.org.uk/concerns or by telephone on 0303 123 1113.
Changes to this privacy policy
This privacy policy was published in August 2021. We may change this privacy policy from time to time. When we do, we will inform you via email and by notice on our website.
How to contact us
Please contact us by post, email or telephone if you have any questions about this privacy policy or the information we hold about you. AMZ Law, 449 Edgware Road, Marble Arch, London W2 1TH. Telephone: 020 7724 7888. Email: info@amzlaw.co.uk.
Our Data Protection Officer is Ashwaq Mizher. Email: dpo@amzlaw.co.uk. Telephone: 020 7724 7888.
If you would like this policy in another format (for example audio, large print or braille) please contact us using the details above.

