Privacy Policy.

Last updated: 29 June 2026 · Applies to visitors and prospective clients of this website

1. Who we are

This policy is issued by Muhammad Awais Bahadur, trading as Paralegal Outsourcing UK, a sole trader (“we”, “us”, “our”). We handle personal data in line with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

This policy explains how we collect and use personal data when you visit this website or enquire about our services. It does not cover personal data we process on behalf of client law firms while delivering paralegal services. That is governed by our GDPR Policy and the data processing agreement signed with each client.

2. What we collect

• Contact details you give us via our enquiry form, email or phone: name, firm name, job title, email address, phone number, and the content of your message.
• Technical and usage data collected via cookies. See our Cookies Policy for the detail.
• Information you provide if you apply to work with us, including CVs and references.

3. How we use it

• To respond to your enquiry and provide a quote or proposal.
• To deliver and administer our services once you become a client.
• To send marketing communications, where you’ve consented to receive them. You can withdraw consent at any time.
• To understand and improve how this website is used.

4. Our legal basis for processing

• Legitimate interests: responding to enquiries and maintaining our business relationship with prospective clients.
• Contract: where processing is necessary to deliver services you’ve engaged us for.
• Consent: for marketing communications and non-essential cookies.
• Legal obligation: where we’re required to keep or disclose information by law.

5. Who we share it with

We do not sell personal data. We may share it with trusted service providers who help us run our business, for example our website hosting provider, email and CRM software, and professional advisers such as our accountant or solicitor. Each is bound by appropriate confidentiality and data protection terms. Current categories of processor: our website hosting and email provider (Hostinger), and, where engaged, our accountant.

6. International transfers

We aim to process and store this data within the UK wherever possible. Where a supplier stores data outside the UK, we ensure appropriate safeguards are in place, such as the UK’s International Data Transfer Agreement or adequacy regulations. Our hosting and email provider may store data within the European Economic Area; these transfers are already covered by the UK’s adequacy regulations for the EEA, so no further safeguards are required.

7. How long we keep it

Enquiry data is kept for 12 months from your last contact with us if no engagement results. Client and engagement records are kept for 6 years in line with standard professional record-keeping practice. We delete or anonymise data once it’s no longer needed.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Ask us to delete your data, in certain circumstances.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where consent is our basis for processing.

To exercise any of these rights, contact us using the details below. You also have the right to complain to the Information Commissioner’s Office if you’re unhappy with how we’ve handled your data.

9. Children

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Significant changes will be brought to your attention where appropriate.

11. Contact us

Questions about this policy or your data: contact Admin at admin@paralegaloutsourcing.co.uk.