Privacy Policy

Who We Are

Pinnacle Property Lawyers Ltd (“we”, “us”, “our”) is a residential conveyancing firm regulated by the Council for Licensed Conveyancers (CLC), licence number 14497. Our registered address is 1 King William Street, London, EC4N 7BJ.

We are the data controller for the personal data we collect about you. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Personal Data We Collect

Depending on the nature of your matter, we may collect and process the following categories of personal data:

• Full name and contact details (postal address, email address, telephone number)
• Property information (address, title number, tenure, and transaction details)
• Financial information (purchase price, mortgage details, and bank account information for completion funds)
• Identity documents (passport, driving licence, utility bills) for anti-money laundering (AML) verification
• Source of funds and source of wealth information for AML and Know Your Customer (KYC) compliance
• Information about third parties where relevant to your transaction (for example, a joint buyer, a seller, or your mortgage lender)

Why We Collect Your Personal Data

We collect and process your personal data to:

• Carry out residential conveyancing services on your behalf under our contract for legal services
• Comply with our legal and regulatory obligations, including anti-money laundering (AML) and Know Your Customer (KYC) requirements under the Money Laundering Regulations
• Communicate with you regarding your matter, including providing progress updates and requesting information we require to proceed
• Submit applications and registrations to HM Land Registry and HMRC on your behalf
• Comply with professional obligations imposed on us by the Council for Licensed Conveyancers

Legal Basis for Processing

We rely on the following lawful bases under UK GDPR for processing your personal data:

• Contract performance, processing is necessary to perform the conveyancing services contract we have entered into with you (Article 6(1)(b))
• Legal obligation, processing is necessary to comply with our legal and regulatory requirements, including anti-money laundering legislation (Article 6(1)(c))
• Legitimate interests, where we have a legitimate interest in processing your data that is not overridden by your rights, such as maintaining client records following completion for regulatory and professional liability purposes (Article 6(1)(f))

How Long We Retain Your Data

We retain personal data for a minimum of 7 years following the completion of your matter, in line with CLC requirements and the applicable limitation periods for professional liability claims.

Data may be retained for longer where required by law or where we have a legitimate interest in doing so, for example where a dispute is ongoing or where further regulatory action may be required.

Who We Share Your Data With

We may share your personal data with the following third parties, where it is necessary to complete your transaction or to comply with our legal obligations:

• HM Land Registry (to register title to property)
• HM Revenue & Customs (to submit Stamp Duty Land Tax returns)
• Your mortgage lender (where we also act for the lender in the same transaction, which we will notify you of in our client care letter)
• Search providers (to obtain local authority, drainage, and other property searches on your behalf)
• The other party’s solicitor or licensed conveyancer
• Electronic identity verification providers (for AML and KYC verification)
• HubSpot, the customer relationship management system that receives and stores enquiries sent through the contact form on our website
• InTouch, the platform that receives quote requests and instruction forms submitted on our website

HubSpot and InTouch process this information on our behalf as data processors, under contracts that require them to keep it secure and use it only on our instructions.

We do not sell your personal data. We do not share it with third parties for marketing or advertising purposes.

Website Analytics

We use Cloudflare Web Analytics, provided by Cloudflare, Inc., to understand how our website is used. It tells us how many people visit, which pages they view, the website they arrived from (for example a search engine or an AI assistant), and the general type of device, browser and country they are using.

Cloudflare Web Analytics does not use cookies or store anything on your device, and the statistics we see are aggregated: they do not identify you, and we do not use them to build a profile of any individual. To provide the service, Cloudflare processes technical information sent by your browser when a page loads, such as your IP address and browser details, in line with its own privacy policy.

We rely on our legitimate interests (Article 6(1)(f)) in understanding and improving our website. You can object to this processing at any time by contacting us, or prevent it by using a browser setting or extension that blocks analytics scripts.

If you accept analytics cookies, we also use HubSpot analytics. HubSpot records the pages you view on our website, when you visit and how you arrived, using cookies described in our Cookie Policy. If you then send us an enquiry through our contact form, HubSpot links that enquiry to your earlier visits, so we can see which pages helped you get in touch. HubSpot processes this information on our behalf as a data processor.

We rely on your consent (Article 6(1)(a)) for HubSpot analytics. It is only switched on if you click “Accept All” on our cookie banner, and you can withdraw consent at any time using “Change cookie settings” on our Cookie Policy page.

Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access, to request a copy of the personal data we hold about you (a “subject access request”)
• Right to rectification, to request that inaccurate or incomplete data be corrected
• Right to erasure, to request that your data be deleted, subject to our legal and regulatory retention obligations
• Right to data portability, to receive your personal data in a structured, commonly used, machine-readable format
• Right to object, to object to processing based on our legitimate interests
• Right to restrict processing, to request that we limit how we use your data in certain circumstances

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month.

Contact Us

For any questions about this Privacy Policy, or to exercise your data protection rights, please contact us:

How to Complain to the ICO

If you believe we have not handled your personal data correctly, you have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection.

We would always encourage you to contact us first before raising a complaint with the ICO, so that we have the opportunity to address your concerns directly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The current version will always be available on our website. We will notify you of any material changes where we are required to do so.

Last updated: October 2026