Last Updated: 25th September 2026
Cymru Law respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how personal information may be collected, used, stored and shared when you visit CymruLaw.com, contact Cymru Law, make an enquiry, commission research or content-writing services, or otherwise communicate with us.
Cymru Law is operated by Renata Maziak Barnes trading as UK Website Designers.
For the purposes of applicable UK data-protection legislation, the business acts as the data controller in respect of personal information collected through this website and associated communications.
1. Information We May Collect
Depending upon how you interact with Cymru Law, we may collect information including:
- Your name.
- Email address.
- Business or organisation name.
- Job title or professional role.
- Information submitted through a contact form.
- Information contained within emails or other correspondence.
- Details relating to an enquiry.
- Information required to provide research or content-writing services.
- Billing and transaction information where services are purchased.
- Technical website information such as IP address, browser type and device information where collected by website systems.
- Cookie and analytics information where applicable.
- Records of correspondence.
- Information you voluntarily provide concerning a legal or business matter.
Please do not provide personal information about another individual unless you have an appropriate reason or authority to do so.
2. Sensitive and Special Category Information
Some enquiries may involve information concerning disability, health, race or ethnicity, religious or philosophical beliefs, political opinions, trade-union membership, sexual orientation or other information that may receive additional protection under data-protection law.
For example, someone making an enquiry concerning disability discrimination may voluntarily provide information about a medical condition.
Cymru Law does not request sensitive information unless it is relevant and appropriate to the enquiry.
Where special category personal information is processed, it will only be processed where an appropriate lawful condition applies.
This may include circumstances where the individual has provided explicit consent or where processing is necessary in connection with the establishment, exercise or defence of legal claims, where applicable.
Please provide only the information reasonably necessary for your enquiry.
3. Why We Use Personal Information
Personal information may be used to:
- Respond to enquiries.
- Communicate with clients and website visitors.
- Provide legal research and research-related services.
- Provide content-writing services.
- Prepare quotations.
- Administer commissioned work.
- Maintain appropriate business and financial records.
- Respond to complaints.
- Protect the security of the website.
- Prevent fraud or misuse.
- Meet legal or regulatory obligations.
- Maintain records relating to business transactions.
- Improve website functionality and services.
- Consider potential professional collaborations or work-experience opportunities.
- Refer an enquiry to an independent legal professional where appropriate and where the individual has agreed to the referral.
We will not use personal information for purposes that are incompatible with the reason for which it was originally collected unless there is an appropriate lawful basis for doing so.
4. Lawful Bases for Processing
Under UK data-protection law, organisations must have a lawful basis for processing personal information.
Depending upon the circumstances, Cymru Law may rely upon one or more of the following bases.
Contract
Information may be processed where this is necessary to provide a service you have requested or to take steps at your request before entering into a contract.
For example, this may apply when you request a quotation or commission research or content-writing services.
Legitimate Interests
We may process information where this is necessary for legitimate business purposes and where those interests are not overridden by your rights and freedoms.
This may include:
- Responding to genuine business enquiries.
- Maintaining business records.
- Protecting website security.
- Preventing fraud or misuse.
- Managing professional relationships.
- Establishing, exercising or defending legal rights.
Where legitimate interests are relied upon, consideration should be given to the impact upon the individual concerned.
Legal Obligation
Information may be processed where necessary to comply with a legal obligation, including appropriate accounting, taxation, regulatory or law-enforcement requirements.
Consent
Where consent is the appropriate lawful basis, you may withdraw that consent at any time.
Withdrawing consent does not affect the lawfulness of processing that took place before consent was withdrawn.
5. Legal Enquiries and Referrals
Cymru Law provides independent legal research, legal content and general legal information.
Cymru Law is not a solicitors’ practice and the founder is not currently a qualified solicitor.
Where an enquiry requires formal legal advice or representation, Cymru Law may suggest that the individual seeks assistance from an independent regulated legal professional.
Where Cymru Law has a suitable professional contact, we may offer to forward the enquiry to an independent law firm, solicitor, barrister or other appropriate professional.
Personal information will not ordinarily be forwarded to a legal professional for this purpose without the individual’s knowledge and agreement.
Before making a referral, we may ask for confirmation that you are happy for the relevant information to be shared.
Once information has been transferred to an independent law firm or professional, that organisation may become a separate data controller and will be responsible for explaining how it processes your information under its own privacy policy.
Cymru Law cannot guarantee that a professional or law firm will accept an enquiry.
6. Sharing Personal Information
We do not sell personal information.
Information may be shared where reasonably necessary with organisations such as:
- Website hosting and technical service providers.
- Email and communications providers.
- Accountants or professional advisers.
- Payment or banking providers where applicable.
- IT and security providers.
- Independent legal professionals where a referral has been agreed.
- Government departments, regulators, courts or law-enforcement authorities where legally required.
- Other service providers necessary for operating the website or delivering commissioned services.
Only information reasonably necessary for the relevant purpose should be shared.
Third-party providers may have their own privacy policies and data-protection responsibilities.
7. Confidential Enquiries
Reasonable care is taken when handling information submitted through Cymru Law.
However, website contact forms and ordinary email should not automatically be regarded as equivalent to legally privileged communication with a solicitor.
Submitting information to Cymru Law does not create a solicitor-client relationship.
Visitors should avoid sending original documents, highly sensitive personal information or information concerning urgent litigation deadlines unless this has specifically been requested.
Where immediate legal action is required, an appropriately qualified legal professional should be contacted directly.
8. Personal Information About Third Parties
If you provide information concerning another person, such as an employee, employer, colleague, customer, family member or opposing party, you should consider whether you have a lawful reason to provide that information.
Please avoid sending unnecessary personal information concerning third parties.
Where possible, information may be anonymised before being submitted for general research purposes.
9. Research and Case Studies
Information supplied privately to Cymru Law will not ordinarily be published as an identifiable case study, article or research example without appropriate permission or another lawful basis.
Where real-world examples are used for educational or editorial purposes, identifying information may be removed or anonymised where appropriate.
10. Email Communications
If you contact Cymru Law by email, your email address and the contents of your correspondence may be retained where reasonably necessary to:
- Respond to your enquiry.
- Maintain records of correspondence.
- Complete commissioned work.
- Resolve disputes or complaints.
- Establish what instructions were provided.
- Comply with legal or financial obligations.
Cymru Law does not operate an unsolicited mass-marketing email service.
11. Marketing Communications
Where marketing communications are introduced in the future, they will be sent only where there is an appropriate lawful basis.
Where consent is relied upon, individuals will be able to withdraw their consent.
You may also request that direct marketing communications stop at any time.
12. Cookies
CymruLaw.com may use cookies and similar technologies.
Cookies are small files placed on a user’s device that can help websites function correctly, remember preferences, maintain security or provide information about website usage.
Some cookies may be strictly necessary for the website to operate.
Other cookies, such as certain analytics, advertising or tracking cookies, may require user consent before they are activated.
Where required, visitors should be given an opportunity to accept or reject non-essential cookies.
Further information about cookies used by CymruLaw.com may be provided through a separate Cookie Policy or cookie-management tool.
13. Website Analytics
Cymru Law may use website analytics to understand matters such as:
- The number of website visitors.
- Which pages are visited.
- How visitors arrive at the website.
- General website performance.
- Device or browser information.
Where analytics technologies require consent, they should not be activated until the appropriate consent has been obtained.
Analytics information is used to understand and improve the website rather than to make significant automated decisions about individual visitors.
14. External Websites
CymruLaw.com may contain links to:
- Government websites.
- Courts and tribunals.
- Regulators.
- Law firms.
- Professional organisations.
- Charities.
- Research organisations.
- News organisations.
- Other third-party websites.
Cymru Law is not responsible for the privacy practices of external websites.
Visitors should review the privacy policies of third-party organisations before providing them with personal information.
15. How Long We Keep Personal Information
Personal information will not be retained for longer than reasonably necessary for the purpose for which it was collected.
Retention periods may depend upon:
- The nature of the enquiry.
- Whether services were commissioned.
- Contractual requirements.
- Accounting and taxation obligations.
- The possibility of a dispute or legal claim.
- Regulatory or legal requirements.
- Whether continued retention is reasonably necessary for business records.
Information that is no longer required should be securely deleted or anonymised where appropriate.
Financial and transaction records may need to be retained for longer periods where required by taxation or accounting law.
16. Keeping Information Secure
Reasonable technical and organisational measures are used to help protect personal information against:
- Unauthorised access.
- Loss.
- Accidental disclosure.
- Destruction.
- Misuse.
- Alteration.
However, no internet-based communication system can be guaranteed to be completely secure.
Visitors should therefore consider the sensitivity of information before sending it electronically.
17. International Data Transfers
Some website, hosting, email, analytics, cloud or technology providers may process information outside the United Kingdom.
Where personal information is transferred internationally, appropriate safeguards should be used where required under UK data-protection law.
These may include transfers to countries recognised as providing an adequate level of protection or the use of legally recognised contractual safeguards.
18. Automated Decision-Making
Cymru Law does not currently use solely automated decision-making to make decisions that produce legal or similarly significant effects upon website visitors.
Technology and artificial intelligence may be used to assist with research, organisation, administration or content development, but significant decisions concerning enquiries or professional referrals should involve human consideration.
19. Artificial Intelligence and Personal Information
Artificial intelligence tools may be used as part of research or content-development workflows.
Confidential or sensitive client information should not knowingly be submitted to third-party artificial intelligence systems unless there is an appropriate lawful basis, an appropriate reason for doing so and suitable safeguards are in place.
Where information can reasonably be anonymised before using a research technology, anonymisation should be considered.
20. Your Data Protection Rights
Depending upon the circumstances, UK data-protection law may give you rights including:
The Right to Be Informed
You have the right to receive information about how your personal data is being used.
The Right of Access
You may request access to personal information held about you.
This is commonly known as a Subject Access Request.
The Right to Rectification
You may request correction of inaccurate or incomplete personal information.
The Right to Erasure
In certain circumstances, you may request deletion of personal information.
This right is not absolute, and information may sometimes need to be retained for legal, contractual or regulatory reasons.
The Right to Restrict Processing
In certain circumstances, you may request that the use of your personal information is restricted.
The Right to Data Portability
Where applicable, you may have the right to receive certain personal information in a structured, commonly used and machine-readable format.
The Right to Object
You may have the right to object to certain processing, including processing based upon legitimate interests and processing for direct marketing.
Rights Relating to Automated Decisions
Certain rights may apply where significant decisions are made solely through automated processing.
Withdrawal of Consent
Where processing is based upon consent, you may withdraw your consent.
21. Making a Data Protection Request
If you wish to exercise a data-protection right, please contact Cymru Law using the contact details provided on this website.
To protect personal information, reasonable steps may be taken to confirm the identity of the person making the request.
Requests will be handled in accordance with applicable data-protection legislation.
22. Complaints
If you have concerns about how Cymru Law handles your personal information, please contact us in the first instance so that the matter can be reviewed.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data-protection regulator.
Information about data-protection rights and complaints is available directly from the Information Commissioner’s Office.
23. Children’s Privacy
Cymru Law is primarily intended for adults, businesses, organisations and professionals.
We do not knowingly seek to collect personal information directly from children through this website unless there is a legitimate and appropriate reason for doing so.
Where an enquiry concerns a child, particular care should be taken when sharing information.
24. Changes to This Privacy Policy
This Privacy Policy may be reviewed and updated periodically to reflect:
- Changes in data-protection law.
- Changes to Cymru Law services.
- New technology.
- Changes to website functionality.
- Updated regulatory guidance.
The latest version will be published on CymruLaw.com.
25. Contact
Questions regarding this Privacy Policy, personal information or data-protection rights can be submitted through the Cymru Law contact page.
Please clearly identify data-protection enquiries so that they can be handled appropriately.
