DATA PRIVACY NOTICE FOR CLIENTS AND THIRD PARTIES

Effective Date: 14 April 2026

Version: 2.0

1. SUMMARY
This notice explains how Studio Associato Londra collects, uses, shares, stores, and protects your personal information when you contact us or use our services, and it sets out your rights and how to exercise them. We comply with the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and, where we process personal data of individuals in the European Economic Area, we also comply with the EU GDPR. We are committed to keeping your personal information secure and to being transparent about what we do with it.

2. WHO WE ARE AND HOW TO CONTACT US
Studio Associato Londra is the data controller responsible for your personal information. Our registered office is 3rd Floor, Portman House, 2 Portman Street, London W1H 6DU, United Kingdom. You can contact us by telephone on +44 (0)20 7952 1227 or by email at info@studioassociatolondra. Our Data Protection Officer is Francesco Meduri, who can be contacted via info@studioassociatolondra for any questions about this notice or how we handle personal information.

3. DEFINITIONS
When we say UK GDPR we mean the United Kingdom General Data Protection Regulation as it forms part of UK law, and when we say EU GDPR we mean the General Data Protection Regulation that applies in the European Economic Area. Personal Data means any information that can identify you directly or indirectly. Special Category Data means more sensitive information such as health records or information about your ethnicity or union membership; in some matters we may also process information about criminal convictions. EEA means the European Economic Area, and DPO means our Data Protection Officer.

4. WHAT PERSONAL INFORMATION WE COLLECT
The information we hold may include your name, address, telephone numbers, and email addresses, together with identifiers such as your date of birth and national or government-issued numbers like National Insurance, passport, visa, or driving licence details, as well as photographs or other digital images.

We may hold financial information such as your bank details, mortgage account information, or means questionnaire responses; information about your family and relationships; and details about property you own or occupy.

We may also hold information you make public or share with us on social media, and we may process Special Category Data and, in some cases, criminal-conviction data, including health records, trade union membership, political affiliations, sexuality, ethnic origin, and criminal records, when relevant to the matter in hand.

We do not provide services directly to children or proactively collect children’s information, but we may receive information about children where this is relevant to a matter we are handling, and in those cases this notice applies to those children as well.

5. HOW WE COLLECT YOUR INFORMATION
We collect information directly from you in person, by telephone, by email, by text message, or when you use our website, including when you make an initial enquiry, ask for a quote, give us your initial instructions, or subscribe to our e-newsletter.

We may receive your information from intermediaries, such as an estate agent or a financial adviser who refers you to us, or from another firm that transfers your file to us.

We may receive your information because a client names you as a joint party to a matter or as a co-owner of a property or business we are dealing with, or because a client names you as a buyer, seller, or a witness in their matter.

It is important that we hold accurate, current information, so please tell us promptly about changes to your personal circumstances, name, address, contact details, or bank details if relevant to our engagement.

6. WHY WE USE YOUR INFORMATION
We use your information to provide you with the services described in our client-care letter and to manage your matter; if the scope of our services changes, we will let you know.

With your consent, we may also send you information about our products and services that we think may be of interest to you; you can withdraw your consent at any time.

We will never sell your personal data to anyone.

7. OUR LAWFUL BASES FOR USING YOUR INFORMATION
We rely on different legal bases depending on what we are doing with your information, including where we need to perform our contract with you, where we need to comply with a legal obligation, and where you have given us your consent for a specific purpose set out in our consent form.

Where we process Special Category Data, we rely on your explicit consent or on the need to establish, exercise, or defend legal claims. Where we process information about criminal convictions, we rely on the relevant provisions of the Data Protection Act 2018, including the consent condition.

We process Special Category Data and criminal-conviction data in accordance with our appropriate policy document, as required by the Data Protection Act 2018.

8. WHO WE SHARE YOUR INFORMATION WITH AND WHY
We may share information with other firms acting for other parties in the same matter or with experts where their input is needed.

We use carefully selected outsourced providers to help us run our business, such as our accounts function, IT consultants, and risk and compliance consultants, and we ensure appropriate written terms are in place with them to protect your information.

Where certain types of insurance are required as part of your matter, we may share information with an external insurer, and where an intermediary has introduced you to us, such as a financial adviser, estate agent, immigration consultancy, or counsellor, we may share information with them where appropriate.

We may also share information with law-enforcement agencies if we are required to do so, for example under a court order.

9. INTERNATIONAL TRANSFERS
We store personal data in the UK and, where necessary, in the European Economic Area, and the UK has adequacy regulations in place for the EEA and certain other jurisdictions, allowing personal data to flow there freely.

For transfers to countries that are not covered by a UK adequacy decision, we use appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, unless a specific derogation under Article 49 of the UK GDPR applies. You can ask us for details of the safeguards that apply to your information.

10. YOUR RIGHTS
You have a number of rights over your personal information, subject to certain exemptions, including the right to receive copies of your information, the right to have inaccurate or incomplete information corrected, and the right to ask us to delete your information in certain circumstances.

You can ask us to restrict how we use your information, and you can object to us using your information, for example for direct marketing, and we will respect your objection unless we have compelling legitimate grounds to continue.

If you provided information to us directly, you can ask us to transfer that information to another organisation or to you, where this is technically feasible.

Where we rely on your consent to use your information, you can withdraw your consent at any time, although this will not affect the lawfulness of any processing we carried out before you withdrew it.

11. HOW LONG WE KEEP YOUR INFORMATION
We keep your information only for as long as necessary and in accordance with UK law, and we retain client files for at least seven years.

Even where a matter does not complete, we are required by the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (as amended) to keep evidence of your identity, with supporting documentation, for five years after we complete our work for you.