Sultan Chambers is committed to protecting personal data and handling it in accordance with the UK GDPR and the Data Protection Act 2018.
Personal data collected by Sultan Chambers is limited to information that is necessary to provide legal services, respond to enquiries, consider and accept instructions, and comply with professional, regulatory, and legal obligations.
Personal data may be used where necessary for the performance of a contract, to take steps prior to entering into a contract, for compliance with legal obligations, for legitimate interests connected with the provision of legal services, and, where applicable, for the establishment, exercise, or defence of legal claims. Where consent is relied upon, clients have the right to withdraw that consent at any time, although this will not affect the lawfulness of processing carried out before consent is withdrawn.
In the course of providing legal services, Sultan Chambers may use personal data for the conduct of proceedings and related legal work involving third parties, including courts, tribunals, instructing solicitors, other barristers, experts, retained advocates, and opposing representatives, where this is necessary and proportionate.
Sultan Chambers will not sell personal data or use it for marketing without a proper lawful basis. Personal data may be disclosed to regulatory, statutory, or public authorities, including the Bar Standards Board, law enforcement agencies, the police, courts, and tribunals, where disclosure is required by law, court order, regulatory obligation, or where necessary to protect legal rights, freedoms, or the administration of justice.
Where legal work involves sensitive personal data, including family, financial, health, immigration, or criminal allegations, Sultan Chambers will process that information only where there is an appropriate lawful basis and, where required, an additional condition for processing under data protection law.
Any person whose data is processed has the right, subject to applicable legal limitations, to request access to their personal data, request correction of inaccurate data, and raise concerns about how their information is handled. Enquiries about data protection may be sent to: