Kang & Co Solicitors Privacy Policy

What This Privacy Policy Covers

Kang & Co Solicitors Limited (“we”, “us”, “Kang & Co”) is committed to protecting your personal information. This privacy policy explains how we look after your personal data when you visit our website, contact us, or engage with our marketing. It is written for the benefit of general visitors to our website. If you are a client of ours, or become one, we process a wider range of personal data and deal with a broader range of privacy related matters. Clients are given detailed information about this separately during the engagement process, alongside our Terms of Business.

Who We Are

Kang & Co Solicitors Limited is a company registered in England and Wales with company number 10350638. Our registered office is Cornwall Buildings, 45 Newhall Street, Birmingham, B3 3QR. We are the data controller in respect of the personal data described in this policy.

We are registered with the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection, under registration number ZA267477.

Kang & Co Solicitors Limited is authorised and regulated by the Solicitors Regulation Authority (SRA) under SRA number 638269. A copy of the SRA Code of Conduct can be found at www.sra.org.uk. A list of our directors is available for inspection at our registered office.

If you have any questions about this privacy policy, or about how we handle your personal data, please contact us:

Email: info@kangandco.co.uk
Telephone: 0345 222 9955
Post: Kang & Co Solicitors Limited, Cornwall Buildings, 45 Newhall Street, Birmingham, B3 3QR

It is important that the personal data we hold about you is accurate and up to date. Please let us know if your details change.

Information You Provide to Us

When you contact us through our website, by telephone, by email, or in person, you may provide us with personal information such as your name, contact details, and details of your enquiry. By providing this information, you agree to us using it to respond to you. Where a form on our website includes an option to join our mailing list, this is an opt in list, and your information will be used by us alone for that purpose. We will not sell your personal information, or pass it to any other organisation for that organisation’s own marketing.

Information We Collect About You

The information we may collect includes your name, contact details, IP address, and details of any live chat messages, telephone conversations, or enquiries you make. We collect this information when you provide it to us directly, for example by telephone, email, web form, or letter, and through automated means, such as cookies and similar technologies, when you visit our website.

Cookies and Similar Technologies

Our website uses cookies and similar technologies. A cookie is a small file that is downloaded to your device when you visit a website. Cookies are widely used to make websites work, to make them work more efficiently, and to provide information to the people who run a website.

We use the following categories of cookies and similar technologies on our website:

• Strictly necessary cookies, which are essential to allow you to move around the website and use its features.
• Statistical or analytics cookies, which help us understand how visitors use our website so that we can improve it. We currently use Google Analytics and Clicky for this purpose.
• Social media and advertising cookies, including the Meta (Facebook) Pixel and the LinkedIn Insight Tag, which help us understand how visitors arrive at our website from social media and measure the effectiveness of our advertising. These are set by third parties, and we do not control how they operate. Please refer to the relevant third party’s own privacy policy for further information.

Since 5 February 2026, the law on cookies (the Privacy and Electronic Communications Regulations 2003, as amended) no longer requires us to obtain your consent for cookies used solely for certain limited purposes, such as basic website statistics used to help us improve our site. Even where consent is not legally required, we will tell you about these cookies and give you a simple, free way to opt out if you prefer.

For all other non essential cookies, including our social media and advertising cookies, we will ask for your consent before they are set, and you can withdraw that consent at any time. You can also control or delete cookies through your browser settings; please refer to your browser’s help pages for instructions.

How We Use Your Personal Data

We use the personal data you provide to us via our website to:

• communicate with you, for example by using your contact details to respond to an enquiry made through an online form;
• monitor and improve our website, for example by using analytics to understand how the website is used; and
• operate our business effectively, for example by seeking and acting on feedback to improve our service.

Our Lawful Basis for Processing Your Personal Data

The UK General Data Protection Regulation (UK GDPR), together with the Data Protection Act 2018, sets out your rights over how we process your personal data, and requires us to identify a lawful basis for that processing. Depending on the circumstances, we rely on:

• consent, for example when you opt in to receive marketing communications from us. You may withdraw this consent at any time;
• legitimate interests, for example when responding to a general enquiry made through our website, having considered that this does not unfairly affect your rights; and
• contract, where you have engaged us to act for you and we process your data in order to provide our services.

Where the personal data we process relates to an allegation, charge, or conviction in respect of a criminal offence (criminal offence data), this is subject to additional protection under Article 10 of the UK GDPR. Given the nature of our practice, the personal data of many of the people who contact us or instruct us inevitably includes criminal offence data. We only process this data where we have both a lawful basis under Article 6 of the UK GDPR, as described above, and a specific condition permitted under Schedule 1 to the Data Protection Act 2018, most commonly because the processing is necessary for the purpose of providing legal advice or because it relates to the establishment, exercise, or defence of legal claims.

Sharing Your Personal Data

Under the SRA Code of Conduct, there are strict rules about who we can share your information with. This is normally limited to other people who assist us with the matters and issues we are dealing with, which may include barristers, medical experts, mediators, process servers, courts, HM Revenue and Customs, credit reference agencies, fraud prevention agencies, the Crown Prosecution Service, and the Solicitors Regulation Authority. This list is not exhaustive.

Where you authorise us to do so, we may also disclose your information to your family, associates, or representatives, or to other companies or businesses you ask us to share your data with.

International Transfers of Your Personal Data

From time to time, we may pass personal data, such as your name and email address, to service providers that we use to send newsletters and other communications, some of which may be based outside the United Kingdom. Where we transfer your personal data outside the United Kingdom, we ensure that an appropriate safeguard is in place. This may include sending data to a country that the UK government has formally recognised as offering an adequate level of data protection under UK adequacy regulations, such as countries within the European Economic Area, Jersey, Guernsey, Switzerland, New Zealand, and Canada, in respect of commercial organisations.

Where we transfer data to a business based in the United States, we check that the recipient is an active participant in the UK Extension to the EU-US Data Privacy Framework, also known as the UK-US data bridge, or we put in place another appropriate safeguard recognised under the UK GDPR, such as the UK International Data Transfer Agreement.

How Long We Keep Your Information

We will only keep your personal data for as long as is necessary for the purposes for which it was collected. Where you have asked to be added to our mailing list, we will keep your details for marketing purposes until you withdraw your consent, or until we carry out a data cleansing exercise. Where you have instructed us as a client, the retention period that applies to your file is set out in our Terms of Business.

Your Rights

Under the UK GDPR, you have a number of rights in relation to the personal data we hold about you. These include the right to:

• be informed about how we use your personal data;
• request access to the personal data we hold about you;
• request that we correct any inaccurate or incomplete personal data;
• request that we erase your personal data, in certain circumstances;
• request that we restrict the processing of your personal data, in certain circumstances;
• request that we provide your personal data to you, or to another organisation, in a portable format, where we are processing it on the basis of consent or contract;
• object to our processing of your personal data, including for direct marketing purposes; and
• withdraw your consent at any time, where we are relying on consent as our lawful basis for processing.

If you wish to exercise any of these rights, please contact us using the details set out above. We do not normally charge a fee for this, unless your request is clearly unfounded, repetitive, or excessive. We will respond to your request within one month, or will tell you if we need a further two months because your request is complex.

How to Complain

We hope that you will never have cause to be unhappy with how we handle your personal data, but if you are, we want to know.

You have the right to complain directly to us about how we have processed your personal data. You can do this by contacting us using the details set out above, by any reasonable means, including by telephone, email, letter, or via our social media channels. We will acknowledge your complaint within 30 days of receiving it, investigate it without undue delay, and write to you to explain the outcome.

You also have the right to complain at any time to the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

We would, however, appreciate the opportunity to address your concerns before you contact the ICO, so please contact us in the first instance if you are able to do so.

This is separate from our complaints policy concerning the legal services we provide, which is available on our website, and which explains your right to refer a service related complaint to the Legal Ombudsman.

Keeping Your Information Secure

We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. Access to personal data is restricted to those of our staff who have a business need to know it, and they are subject to a duty of confidentiality. We have procedures in place to deal with any suspected personal data breach, and we will notify you and any applicable regulator of a breach where we are legally required to do so.

Professional Indemnity Insurance

In accordance with our disclosure requirements, our compulsory professional indemnity insurer is Pen Underwriting, of 67 Lombard Street, London, EC3V 9LJ.

Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page, together with the date it was last updated.