Legal
Privacy Policy
Last updated: July 2026
1. Introduction
Masl Legal (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
The data controller responsible for your personal data is Masl Legal — [full registered entity name], [company number], registered office [address]. We are registered with the Information Commissioner’s Office under registration number [ICO number]. Contact: privacy@masllegal.com.
3. What Data We Collect
We may collect the following categories of personal data: your name, email address, telephone number, and postal address; information about your business or organisation; details of your legal enquiry or matter; information you provide through our contact form or email correspondence; technical data such as IP address, browser type, and pages visited when using our website.
4. How We Collect Your Data
We collect personal data directly from you when you contact us by telephone, email, or through our website contact form; when you instruct us to act on your behalf; when you subscribe to our newsletter or publications; and through your use of our website via cookies and similar technologies.
5. Legal Basis for Processing
We process your personal data on the following legal bases: where it is necessary for the performance of a contract with you; where it is necessary for our legitimate interests, including providing legal services and marketing; where you have given your consent to the processing; and where it is necessary for compliance with a legal obligation.
6. How We Use Your Data
We use your personal data to provide legal services and advice; to respond to your enquiries and communicate with you; to send you legal updates and marketing communications (where you have consented); to comply with our legal and regulatory obligations; and to improve our website and services.
7. Data Sharing
We do not sell your personal data. We may share your data with third parties where necessary for the provision of legal services, including barristers, expert witnesses, and other professional advisers; where required by law, regulation, or court order; and with our IT service providers and hosting services, who process data on our behalf under appropriate data processing agreements.
8. International Transfers
Work on client matters may be performed by our Lahore, Pakistan office. Where personal data is transferred to Pakistan, the transfer takes place under the ICO’s International Data Transfer Agreement, supported by a transfer risk assessment. A copy of the relevant safeguard is available on request from privacy@masllegal.com.
9. Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements. Specific retention periods depend on the nature of the data and the purpose of processing.
10. Your Rights
Under UK GDPR, you have the right to access your personal data; to request rectification of inaccurate data; to request erasure of your data in certain circumstances; to restrict processing of your data; to data portability; to object to processing based on legitimate interests; and to withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk. We would, however, welcome the opportunity to address your concerns directly before you approach the ICO; please contact us at privacy@masllegal.com in the first instance.
11. Cookies
Our website uses strictly necessary cookies that are required for the site to function. We do not set analytics or marketing cookies without your consent. When you first visit our website, a consent banner allows you to accept or reject non-essential cookies, and you may change your preferences at any time using the same banner. Full details are set out in our Cookie Policy.
12. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.