Privacy Policy

Highfin Limited handles information received through this website to respond to legal enquiries. Our data protection contact is Colin Faragher. For privacy questions, requests or complaints, email info@highfin.uk, marked Data protection for Colin Faragher, or write to Colin Faragher, Highfin Limited, 25 North Row, London, W1K 6DJ. Our SRA number is 647385.

This notice covers website enquiries and information used when considering or carrying out legal instructions. Please contact Colin Faragher about processing relevant to your matter, and avoid sending unnecessary sensitive material.

• Email a privacy enquiry

The enquiry form collects your full name, email address, optional telephone number, selected legal service, message and privacy acknowledgement. Security checks also process connection, device and verification information to help distinguish genuine visitors from automated abuse.

A legal matter may involve identity documents, financial information, correspondence and evidence about you and other people. Information may come from you, a representative or, depending on the work, other parties, advisers, courts or public records. The information needed depends on the service and stage of the matter.

Please limit an initial enquiry to what is needed to explain the issue. Do not submit highly sensitive documents through the form. We may need further information before deciding whether we can act; an enquiry does not establish that instructions have been accepted.

Website enquiries are used to respond to prospective clients and consider possible instructions. Data protection law requires an appropriate lawful basis for each purpose, rather than treating a privacy acknowledgement as consent to every use.

Processing necessary to take steps at your request before entering a contract, or to perform a contract with you, may fall under the contractual basis. That basis does not automatically cover information about other people. A specific legal obligation must support processing based on legal obligation.

Security, practice administration and dealing with legal claims can engage legitimate interests, subject to necessity and a balancing assessment. Consent, where used, must be freely given and capable of withdrawal. The actual basis for each of these uses, including administrative copies, is not specified here; contact Colin Faragher for the basis applicable to your information.

• ICO guidance on lawful bases

Health, ethnicity, religious beliefs and other special-category information require an additional condition under Article 9 of the UK GDPR. Criminal allegations and convictions require the authority and safeguards required by Article 10 and relevant UK law. A general lawful basis alone is insufficient.

Legal claims can be relevant to the conditions for some sensitive information, but this is not a blanket permission to collect it. The conditions and handling arrangements applicable to Highfin's particular services have not been fully specified. Please contact the firm before sending this information.

The active form uses automated-abuse checks before delivering your enquiry by email to Highfin. An administrative copy is also sent to a designated support recipient. Your email address is supplied for replies; the form does not send an automatic acknowledgement email.

Hosting, security-verification and email-delivery providers process information needed to receive, check and deliver the enquiry. The form does not store a separate message database or record message bodies in its logs. Mailboxes and service providers may retain their own records.

This website does not use first-party analytics or marketing tags. The regulatory badge loads external content and shares connection information with its provider. Security and other external services may use cookies, storage or logs; this notice does not promise a cookie-free website.

• ICO guidance on cookies and similar technologies

Highfin-authorised business access to enquiries is directors only. Hosting, security and email suppliers process information to operate the service, and a designated administrative-support recipient receives an administrative copy. Directors-only business access does not mean directors-only technical access. The readers of that copy and technical administrator access still require reconciliation with this instruction; no wider access restriction is represented as verified.

Legal work can require disclosure to other advisers, experts, counterparties, courts, public authorities or regulators. Any disclosure must be appropriate to the matter and respect confidentiality, privilege and data protection requirements.

Information is not guaranteed to remain in the UK. Where a restricted international transfer takes place, applicable law requires a permitted transfer route and, where necessary, safeguards. The actual processing locations and transfer arrangements for Highfin's provider and administrative-support chain have not been confirmed. No adequacy decision, contractual safeguard or processing agreement is represented here as verified for that chain.

Information must not be retained longer than necessary for its lawful purposes. Relevant considerations include responding to the enquiry, carrying out an instruction, legal and regulatory record-keeping duties and establishing or defending claims.

The retention policy is a six-month retention period for website enquiries and relevant enquiry emails. This is not a guarantee of automatic deletion from all mailboxes or supplier backups: the retention starting point and deletion arrangements across those systems still need confirmation. Records forming part of an instructed matter may require different retention for legal obligations or claims; separate client-file periods are not specified here. Contact Colin Faragher at info@highfin.uk about your information or to request erasure.

The form has input validation, security checks and abuse controls. These measures do not establish the firm's wider access, disposal or supplier arrangements and cannot guarantee absolute security.

Depending on the circumstances and applicable legal basis, you may request access, rectification, erasure, restriction or portability, or object to processing. If processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Contact info@highfin.uk with your request and a safe way to reach you. Identity or authority may need to be checked. Responses to rights requests are normally due within one calendar month, subject to the applicable verification, clarification and extension rules. Privilege, legal obligations and other people's rights can limit disclosure or deletion.

The website implementation does not make automated decisions about whether Highfin will accept a legal instruction. Security checks can reject a form submission; direct contact remains available. Firm-wide profiling or significant automated decision-making arrangements have not been established.

• ICO guidance on information rights

Send a data protection complaint to info@highfin.uk, or the postal address above, explaining the concern and the outcome you seek. Current law requires acknowledgement within 30 days, appropriate investigation and communication of the outcome without undue delay. This is separate from the response period for an information-rights request.

You can complain to the Information Commissioner's Office if you are concerned about how your information is handled. Its guidance explains raising the issue with the organisation and contacting the regulator. Legal-service and charges complaints follow our separate Complaints Procedure.

• ICO: make a complaint
• Complaints Procedure

Last updated 13 October 2026. This notice may change to reflect changes in services, processing or legal requirements. Contact Colin Faragher for information about your particular enquiry or matter.