Privacy, data protection & the GDPR

Home | About Cartmell Shepherd Solicitors | Legal | Privacy, data protection & the GDPR


From the 25 May 2018 organisations, including ours, who control and process personal data must comply with new EU legislation known as the General Data Protection Regulation or GDPR.

The rules contained within the GDPR replace those within the Data Protection Act 1998 offering enhanced rights and security to individuals and placing obligations on those who control and process that data to do so lawfully and securely.

When we use your personal data we are regulated under the GDPR which applies across the European Union (including in the United Kingdom) and we are responsible as ‘controller’ of that personal data for the purposes of the GDPR.

How and why we collect, use, store and share your personal data

Our use of your personal data is subject to your instructions, the GDPR, other relevant UK and EU legislation and our professional duty of confidentiality. We take your privacy very seriously and as such have systems and procedures in place to ensure we adhere to current legislation.

To find out more about how and why we collect, use, store and share your personal data you can access our full Privacy Policy by clicking on the link or you can request a written or e-mail copy by contacting our Data Protection point of contact using the details at the bottom of this page.

Please read this privacy policy carefully.  It also explains your rights in relation to your personal data and how to contact us or supervisory authorities in the event you have a complaint

Use of our website is governed by a separate privacy policy designed specifically for that purpose.  You can access it here at our Website Privacy Policy.

During the recruitment and selection process it is necessary for us to collect, store and sometimes share your personal information.  Our privacy notice, specifically designed for recruitment can be found at our careers page by clicking on the link below.


If you are applying for a role, or thinking about making an application you should read this notice.

Data protection point of contact details:

Scott Garson, Practice Manager, Viaduct House, CARLISLE CA3 8EZ

Phone:  01228 516666


The supervisory authority in the UK is the Information Commissioner’s Office (ICO). Find out further information on who the ICO are and what they do.

We'll call you...
This website uses cookies
This site uses cookies to enhance your browsing experience. We use necessary cookies to make sure that our website works. We’d also like to set analytics cookies that help us make improvements by measuring how you use the site. By clicking “Allow All”, you agree to the storing of cookies on your device to enhance site navigation, analyse site usage, and assist in our marketing efforts.
These cookies are required for basic functionalities such as accessing secure areas of the website, remembering previous actions and facilitating the proper display of the website. Necessary cookies are often exempt from requiring user consent as they do not collect personal data and are crucial for the website to perform its core functions.
A “preferences” cookie is used to remember user preferences and settings on a website. These cookies enhance the user experience by allowing the website to remember choices such as language preferences, font size, layout customization, and other similar settings. Preference cookies are not strictly necessary for the basic functioning of the website but contribute to a more personalised and convenient browsing experience for users.
A “statistics” cookie typically refers to cookies that are used to collect anonymous data about how visitors interact with a website. These cookies help website owners understand how users navigate their site, which pages are most frequently visited, how long users spend on each page, and similar metrics. The data collected by statistics cookies is aggregated and anonymized, meaning it does not contain personally identifiable information (PII).
Marketing cookies are used to track user behaviour across websites, allowing advertisers to deliver targeted advertisements based on the user’s interests and preferences. These cookies collect data such as browsing history and interactions with ads to create user profiles. While essential for effective online advertising, obtaining user consent is crucial to comply with privacy regulations.