Last updated: 3 November 2025

​

We’re a modern legal consultancy that helps businesses stress less about commercial and contract law. We take privacy just as seriously as we take your NDAs. This policy explains what personal data we collect, how we use it, and what your rights are under the UK GDPR (that’s the UK’s version of the General Data Protection Regulation — yes, the one with all the acronyms).

​

If you have any questions, just email us at info@clausetwo.com. We promise an actual human called Gavyn will respond.

​

1. Who We Are

​​

We’re Clause Two Ltd, a UK-based legal consultancy providing unreserved legal services to businesses. We’re particularly good at drafting human documents like this one.

​

Our contact details:

​

Clause Two Ltd
167-169 Great Portland St, Fifth Floor, London W1W 5PF
Email: info@clausetwo.com

​

We’re the “data controller” which means that we decide what happens to your data and how it’s used. Don’t worry, we’ll always keep your secrets safe.

​

We're registered with the Information Commissioner's Office (ICO) under the Data Protection Act 2018 and our registration reference is ZC031483.

​

2. The Data We Collect

​

We only collect what we actually need to run our business and help yours. This includes:

​

• Contact details: your name, email, phone number, and business info.

• Correspondence: emails, messages, and notes from calls (because we can’t rely on memory alone).

• Billing info: to send invoices and keep HMRC happy.

• Website data: like IP addresses and cookies (because, apparently, the internet runs on biscuits).

 

We don’t collect sensitive stuff like health data, religion, or political opinions.

​

3. How We Use Your Data

​

We use your data to:

​

• Deliver our legal consultancy services.

• Respond to enquiries and manage client relationships.

• Send invoices, manage payments, and handle the occasional boring admin.

• Keep you in the loop about legal updates, if you’ve opted in (we won’t spam you, promise).

• Improve our website and services (mostly by learning what’s working and what’s not).

 

We process your data under one of these legal bases:

​

• Contract: when we’re delivering services you’ve asked for.

• Consent: when you’ve chosen to receive marketing emails.

• Legal obligation: when we need to comply with UK laws (hello, HMRC).

• Legitimate interests: when it helps us run our business effectively and doesn’t override your rights.

​

4. How Long We Keep Your Data

​

We keep data for as long as necessary to meet our legal and professional obligations. This usually means keeping client records for six years, unless the law or good sense says otherwise. When we no longer need your data, we delete or securely anonymise it. No digital clutter here.

​

5. Who We Share Your Data With

​

We only share data with trusted third parties who help us do what we do best, such as:

​

• Our advisors including our accountants.

• Service providers such as payment processors and cloud storage providers.

• Regulators and law enforcement bodies such as HMRC.

 

All of them are under contracts or other legal obligations that require them to handle your data responsibly.

​

We don’t transfer your data outside the UK unless adequate protections are in place (like UK-approved data transfer agreements).

 

6. Your Rights

​

You have the right to:

​

• Access the data we hold about you.

• Correct anything that’s inaccurate.

• Delete your data (sometimes called “the right to be forgotten”).

• Restrict or object to certain uses of your data.

• Move your data elsewhere (data portability).

 

To exercise any of these rights, email info@clausetwo.com. We’ll respond within a month, but usually much faster (we love a tidy inbox). If you're unhappy with the way in which we process your data, you may also complain to the ICO.

​

7. Cookies

 

Our website uses cookies and similar tech to make it work smoothly and understand how people use it. Further information can be found in our Cookie Policy. You can control cookies through your browser settings. However, fair warning, some parts of this website might sulk if you turn certain cookies off.

​

8. Data Security

​

We use industry-standard security measures to keep your data safe (including encryption, access controls, and strong passwords (no “password123” here)). While no system is 100% foolproof, we do everything reasonably possible to protect your information.

​

9. Updates to This Policy

​

We may occasionally update this policy to stay compliant and reflect changes in how we operate. If it’s a big change, we’ll let you know by email or through our website.

​​

10. Got Questions?

​

If you’ve made it this far, you deserve a cookie. For anything privacy-related, drop us a line at info@clausetwo.com. We’re friendly, responsive, and perfectly sane (even though a little obsessed with cookies).