Privacy Policy

We may collect and process the following categories of personal data, depending on the nature of your enquiry or the services we are instructed to provide:

Contact and identity data: name, email address, telephone number, postal address, and company name when you contact us or submit an enquiry through our website.

Case and instruction data: information provided by clients when instructing us to carry out an investigation, including details about third parties who are the subject of an investigation. This may include names, addresses, dates of birth, vehicle registration numbers, financial information, and other identifying details necessary to carry out the instruction.

Technical data: IP address, browser type and version, time zone, operating system, and other technology identifiers collected automatically when you visit our website.

Communications data: records of correspondence between you and ODM Legal Services, including emails and telephone call records where applicable.

We collect personal data through the following means:

Directly from you: when you complete our contact form, send us an email, telephone us, or otherwise communicate with us.

From clients instructing us: when a client provides us with information about a third party as part of an investigation instruction.

From publicly available sources: as part of our investigative work, we may collect information from public registers, court records, Companies House, the Land Registry, social media platforms, and other open-source databases.

Automatically via our website: through cookies and similar tracking technologies when you browse our website.

We process personal data only where we have a lawful basis to do so under the UK GDPR. The lawful bases we rely on include:

Legitimate interests: processing personal data about third parties in the course of carrying out investigation services instructed by our clients, where those interests are not overridden by the rights and freedoms of the data subject.

Contract: processing data necessary to fulfil our contractual obligations to clients who have instructed us.

Legal obligation: processing required to comply with our legal and regulatory obligations, including anti-money laundering requirements and obligations to the courts.

Consent: where you have given us specific consent to process your data, for example by subscribing to communications from us.

We use personal data for the following purposes:

To respond to enquiries and provide information about our services.

To carry out investigation services on behalf of clients, including gathering, analysing, and reporting intelligence and evidence.

To manage our client relationships and fulfil our contractual obligations.

To comply with legal and regulatory requirements, including court orders and law enforcement requests made in accordance with applicable law.

To improve our website and services through analysis of usage data.

We do not sell personal data to third parties. We may share personal data in the following circumstances:

With clients: we share investigation findings, including personal data about third parties, with the client who instructed the investigation, to the extent necessary to fulfil the instruction.

With sub-contractors and agents: we may engage specialist sub-contractors or agents to assist with specific aspects of an investigation. Any such parties are bound by confidentiality obligations and data processing agreements.

With legal and regulatory authorities: where required by law, court order, or regulatory obligation, we may disclose personal data to law enforcement agencies, courts, or regulatory bodies.

With professional advisers: including solicitors, accountants, and insurers, where necessary for the conduct of our business.

Where we conduct international investigations, personal data may be transferred to, or accessed from, countries outside the United Kingdom. We take steps to ensure that any such transfers are carried out in accordance with the UK GDPR, including by relying on adequacy decisions, standard contractual clauses, or other appropriate safeguards.

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law or professional obligations.

Investigation files and case records are typically retained for a period of six years following the conclusion of an instruction, in line with standard limitation periods for civil claims. Records may be retained for longer where required by a court order, regulatory obligation, or ongoing legal proceedings.

Website enquiry data is retained for a period of two years unless a client relationship is established, in which case the standard six-year retention period applies.

When personal data is no longer required, it is securely deleted or anonymised.

Under the UK GDPR, you have the following rights in relation to your personal data:

Right of access: you have the right to request a copy of the personal data we hold about you.

Right to rectification: you have the right to request that inaccurate or incomplete personal data is corrected.

Right to erasure: in certain circumstances, you have the right to request that we delete your personal data.

Right to restrict processing: in certain circumstances, you have the right to request that we restrict the processing of your personal data.

Right to data portability: where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

Right to object: you have the right to object to processing based on legitimate interests, including profiling.

Rights in relation to automated decision-making: you have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

Please note that some of these rights are subject to exemptions, including where processing is necessary for the prevention, detection, or investigation of crime, or for the purpose of legal proceedings. To exercise any of these rights, please contact us at info@odmlegal.co.uk.

Our website uses cookies and similar technologies to improve your browsing experience and to analyse how the site is used. Cookies are small text files placed on your device when you visit a website.

We use strictly necessary cookies to ensure the website functions correctly, and analytical cookies to understand how visitors interact with the site. We do not use advertising or tracking cookies for marketing purposes.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

We take the security of personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted communications, access controls, and secure data storage.

Where we engage third-party processors, we require them to implement equivalent security measures and to process data only on our documented instructions.

If you have a concern about how we have handled your personal data, we ask that you contact us in the first instance at info@odmlegal.co.uk so that we can attempt to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters. The ICO can be contacted at www.ico.org.uk or by telephone on 0303 123 1113.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we provide. The date at the top of this page indicates when the policy was last reviewed. We encourage you to review this policy periodically.