Last updated: 9 October 2026
1. Who we are
1.1 Super Solicitor is operated by Super Sol Ltd, a company registered in England and Wales (company number 17489814, whose registered office is at 20 Highfield Terrace, Halifax, HX1 3PY). We are the controller of the personal data described in this policy.
1.2 For any privacy question or request, email [email protected].
2. Who this policy covers
2.1 This policy covers people who use supersolicitor.co.uk to look for legal help, people who use portal.supersolicitor.co.uk on behalf of a law firm, and individuals whose details appear in public regulatory data we use to build firm listings.
3. Information we collect
| Type | Examples | Where it comes from |
|---|---|---|
| Enquiry information | A description of your legal issue, the area of law, your location or postcode, funding type (such as legal aid or no win no fee), and notes you add for a solicitor | You |
| Contact details | Name, email address and phone number, where you give them | You |
| Sensitive information | Information about health, criminal allegations or convictions, family life, or other sensitive matters that you choose to include in an enquiry | You |
| Results and activity | AI analysis of your enquiry, firms matched, saved and shared result links, which firms you contact, how and when, and your answers to follow-up emails | Generated by the Service |
| Technical information | IP address (which we store only in scrambled form), approximate location, browser and device type, pages visited, referring site, and server logs | Your device |
| Firm user information | Name, role, work email and phone, SRA ID, login details, messages with us, and portal activity | You or your firm |
| Billing information | Billing contact, plan and payment history. Card details are held by our payment provider, not by us | You or your firm |
| Listing information | Firm names, addresses, SRA numbers and, where public, names of solicitors and sole practitioners | SRA and other public regulatory data |
3.2 You do not have to include sensitive information in an enquiry, and we ask you to describe your situation in general terms. Where you do include it, we use it only to help you find legal advice, as explained in section 4.
4. How we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Analysing your enquiry and showing matched firms | Performing our service to you (contract), and legitimate interests in operating the Service |
| Processing sensitive information in your enquiry | Processing necessary for obtaining legal advice and for establishing, exercising or defending legal claims (UK GDPR Article 9(2)(f)). For criminal offence information, the Data Protection Act 2018, Schedule 1, paragraph 33. Where we ask you to tick a consent box, your explicit consent (Article 9(2)(a) and Schedule 1, paragraph 29). |
| Passing your enquiry to a firm you choose to contact and, if that firm cannot help or does not reply, to another suitable firm | Your request (contract), and for any sensitive information the legal advice and legal claims basis above |
| Emailing you saved results, and asking whether a firm responded | Your request, and legitimate interests in checking the Service works |
| Recording searches, contacts and referrals, and billing firms | Legitimate interests in running and funding the Service |
| Improving our matching, AI and Service, and producing statistics | Legitimate interests, using de-identified data wherever practical |
| Running firm accounts, the portal, messaging and billing | Contract, and legal obligation for tax and accounting records |
| Publishing firm listings from public regulatory data | Legitimate interests in helping the public find regulated legal help |
| Security, preventing fraud and misuse, and enforcing our terms | Legitimate interests and legal obligation |
| Sending firms information about our services | Legitimate interests. Firm users can opt out at any time |
| Sending marketing to members of the public | Your consent only |
| Measuring how the website and portal are used with Umami, which sets no cookies. In the portal, usage is linked to the firm’s account so we can improve how firms use it | Legitimate interests |
| Measuring how the website is used with Google Analytics | Your consent, given through our cookie banner. You can withdraw it at any time using “Cookie settings” at the bottom of every page |
| Responding to legal claims, regulators and law enforcement | Legal obligation and legitimate interests |
4.2 Where we rely on legitimate interests, we have balanced them against your rights. You can ask us for details, and you can object at any time.
5. How we use artificial intelligence
5.1 We use a third-party artificial intelligence service to help analyse enquiries. It processes your enquiry on our behalf, under contract, and does not use it to train its models.
5.2 The AI helps us suggest firms. It does not make decisions that have a legal or similarly significant effect on you. You decide whether to contact any firm.
5.3 Please do not include more personal detail than you need to, particularly about other people. What you type into our search may be shown to the firms you contact, as explained in section 6.
6. Who we share it with
6.1 Firms you contact. When you choose to contact a firm, we pass it your enquiry and contact details, including what you typed into our search and our AI’s analysis of it. The firm then becomes responsible for your data as a separate controller, and its own privacy notice applies. Firms can see anonymised statistics about searches and referrals, but they only see who you are if you choose to contact them, or if we pass your enquiry to them as described below.
6.2 Firms that have not joined Super Solicitor. If the firm you choose has not joined Super Solicitor, we email it at the address it gives the Solicitors Regulation Authority, or its published address. That first email includes your first name, your town, the area of law and what you typed into our search, with any links, email addresses, phone numbers and postcodes removed. If your enquiry is in a sensitive area (for example crime, immigration or clinical negligence) or mentions health, crime, abuse or similar matters, the first email does not include your name or your words, only the type of matter and your town. The firm sees your full name, contact details and message only once it agrees to contact you.
6.3 Passing your enquiry to another firm. If a firm declines your enquiry or does not reply in time, we may pass it to another suitable firm, including one that has not joined Super Solicitor, in the same way. We will tell you when we do, and you can ask us to stop at any time.
6.4 Service providers acting on our instructions, including:
| Recipient | Purpose | Location |
|---|---|---|
| Hosting and infrastructure providers | Running the website, portal and database | United States |
| Artificial intelligence service providers | Analysing enquiries | United States |
| Email service providers | Sending emails | European Union |
| Payment providers | Taking payments from firms | UK, European Union and United States |
| Analytics providers | Website statistics: Umami, which sets no cookies and stores nothing on your device, and Google Analytics only if you accept analytics cookies | European Union and United States |
| Location lookup services | Estimating your town from your IP address, or naming the place your device shares, so we can show nearby firms | Germany and Australia |
6.5 WhatsApp and other messaging services. If you contact a firm by WhatsApp, Meta processes that message under its own terms and privacy policy.
6.6 Others. Our professional advisers; regulators, courts, the police and other authorities where the law requires or allows it; and any buyer or successor of our business, who would use your data in line with this policy.
6.7 We do not sell your personal data.
7. International transfers
7.1 Our website hosting and AI provider, and Google Analytics if you accept analytics cookies, are in the United States, so your data is transferred outside the UK. We protect it by using the UK Extension to the EU-US Data Privacy Framework where the provider is certified, and otherwise the ICO’s International Data Transfer Addendum to the EU standard contractual clauses. You can ask us for a copy of these safeguards.
8. How long we keep it
| Information | How long |
|---|---|
| Enquiries, AI results and saved result links | 12 months from your search, after which links stop working and the data is deleted or de-identified |
| Records of contacts and referrals to firms | 6 years, for billing, accounting and legal claims |
| Firm user and billing records | For the life of the account, then 6 years |
| Server and security logs | 90 days |
| Marketing preferences | Until you opt out, plus a suppression record so we do not contact you again |
| De-identified statistics | Indefinitely |
9. Security
9.1 We use encryption in transit, access controls and other measures appropriate to the risk. No system is completely secure, and anyone with a shared results link can see the results it points to.
10. Your rights
10.1 You have the right to access your personal data, to have it corrected or erased, to restrict or object to its use, to receive it in a portable format, and to withdraw consent at any time.
10.2 Withdrawing consent does not affect processing before withdrawal, and does not remove data already sent to a firm you contacted or that we passed your enquiry to. For that, contact the firm directly.
10.3 We will respond within one month. We may need to confirm your identity first.
10.4 If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
11. Under 18s
11.1 The Service is for people aged 18 and over. A parent or guardian can make an enquiry on behalf of someone younger.
12. Cookies
12.1 Our use of cookies is explained in our Cookie Notice.
13. Changes to this policy
13.1 We may update this policy at any time. The current version and its effective date will always be on this page. Where changes are significant, we will highlight them on the Service or tell you by email where appropriate.
14. Law firms we contact
14.1 This section is for people at law firms we contact about their firm’s listing on Super Solicitor. It explains what we hold, where it came from and how to stop us contacting you.
14.2 What we hold. Your firm’s name, address, SRA number, areas of law and legal form. A contact email address published on your firm’s own website, with the page we found it on and the date. If that address belongs to a named person, it includes their name. Whether your firm opened our link to claim its listing, claimed it or asked us to stop.
14.3 Where it came from. Firm details come from the Solicitors Regulation Authority’s public register. Email addresses come from your firm’s own website, read by our software. We do not use the email address your firm gives the SRA to contact you about your listing.
14.4 Why we contact you, and our legal basis. To tell your firm it is listed and invite it to check and claim its free listing, so the details clients see are right. Our legal basis is legitimate interests: ours in running an accurate directory of regulated firms, and the public’s in finding suitable legal help. We have weighed these against your interests and kept the effect on you small. We email only companies and LLPs, only at addresses the firm publishes for people to contact it, send no more than six emails over about eight weeks, and stop as soon as the firm claims its listing or asks us to stop. We do not email sole practices or ordinary partnerships about their listing; we write to them by post instead. You can ask us for a copy of our assessment.
14.5 Who sees it. Our email and hosting providers, under contract and only on our instructions. Where a provider is outside the UK, section 7 applies. We do not sell or share it.
14.6 How long we keep it. While the address is on your firm’s website. An address that is no longer on the website is deleted 12 months after we last saw it. If you ask us to stop, we keep the address on a suppression list so we never contact it again.
14.7 Stopping us. Use the unsubscribe link in any of our emails, reply to say so, or email [email protected]. We act on it within two working days. You have an absolute right to object to direct marketing. Your other rights, and how to complain to the Information Commissioner’s Office, are in section 10.