Privacy policy

Who is responsible for your data

Castara Law is the data controller for personal information collected through this website and in the course of providing legal services. Our registered address is 24 Neptune Court, Ocean Way, Cardiff CF24 5PJ.

What information we collect

We may collect and process the following:

• Information you give us — your name, contact details, and any information you share in an enquiry form, email or telephone call.
• Matter information — personal and sometimes sensitive information provided in the course of your legal matter.
• Technical data — your IP address, browser type and pages visited, collected automatically when you use the website.

How we use your information

• To respond to enquiries and provide legal services
• To comply with our legal and regulatory obligations
• To manage and improve this website
• To send you information you have requested

Our legal basis for processing

We process your information on the basis of contract (where you have instructed us), legitimate interests (for general enquiries and website operation), legal obligation (for anti-money laundering and regulatory compliance), and consent (where you have specifically agreed).

How long we keep your information

We keep client files for a minimum of six years after a matter closes, in line with our professional obligations and limitation periods. Enquiries that do not lead to instructions are kept for twelve months.

Who we share your information with

We do not sell your personal information. We may share it with third parties where required by law, where necessary to provide the legal service, or where you have given consent. This may include courts, other parties’ solicitors, barristers, and specialist advisers.

Your rights

Under UK GDPR you have the right to access, correct, delete and restrict the processing of your personal information, and to object to processing based on legitimate interests. To exercise any of these rights, contact us at enquiries@castara.co.uk.

Cookies

We use cookies as described in our Cookie Policy.

Complaints

If you are unhappy with how we handle your personal information, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes to this policy

We review and update this policy periodically. Last reviewed: 10th September 2026.