Privacy notice
How we handle your information
This notice explains how personal information is handled when you use yrlegal.co.uk or contact Yelda Rashid: what is collected, why, who receives it, how long it is kept and the rights you have. It describes what this website actually does.
Who we are and who is responsible
Yelda Rashid is a solicitor of England and Wales (individual SRA number 827852) who works as a consultant solicitor of Taylor Rose Limited. This website is run by YR Legal Services Ltd, a company registered in England and Wales (company number 16885532). Neither Yelda Rashid nor YR Legal Services Ltd is a law firm, and neither is an SRA-authorised body: legal services are provided by Yelda Rashid through Taylor Rose Limited.
YR Legal Services Ltd is the controller of the personal information you send through this website before you instruct us, and is responsible for it. Once you instruct us, Taylor Rose Limited is the controller of the information used for your matter.
- Data controller for website enquiries
- YR Legal Services Ltd
- Company registration
- Registered in England and Wales, company number 16885532
- Geographic address
- 124 City Road, London, England, EC1V 2NX (registered office)
- info [at] yrlegal.co.uk
- Telephone
- 07466 996852
- Contact form
- Send us a message
- ICO registration number
- ZC201401
- Taylor Rose Limited
- Authorised and regulated by the Solicitors Regulation Authority (SRA number 623604). Registered in England and Wales, company number 09673088; registered office 69 Carter Lane, London, England, EC4V 5EQ. ICO registration number ZA144800.
- Taylor Rose’s Data Protection Officer, for instructed matters
- Simon Banfield, Data Protection Officer, Taylor Rose, Worldwide House, Thorpe Wood, Peterborough PE3 6SB
- Taylor Rose’s own notice
- Once you instruct us, Taylor Rose’s Data Privacy Notice (opens in a new tab) also applies.
What we collect
When you use the quote form or the contact form: your name, email address and telephone number, how you prefer to be contacted, how you heard about us, what your enquiry is about, and anything you write in the free-text box.
The quote form also asks about your transaction or your dispute. For a transaction, for example: the type of matter, the property’s address or postcode, the price, the tenure and how you are paying for it. For a dispute: what it is about, the property’s postcode, your role, whether court proceedings have started, whether the other side has solicitors, how urgent it is, the approximate value in dispute and a short summary.
With every form we also receive the page you sent it from and the language you were using, any campaign tags in the link that brought you to the site (such as utm_source, or the click reference an advert adds to the link, such as Google’s gclid or Meta’s fbclid) and whether any answers were filled in from that link. If you allow Marketing and came to this website from one of our Google adverts in the last 90 days, the form also carries that advert’s click reference, kept on your device since then, and the date of that visit. We also receive the results of our anti-spam checks, including how long the form was open. If you use the address search, we receive the text you type into it.
When you browse, your IP address and technical details about your browser and device reach the providers that host, deliver and protect this website. We also keep simple website statistics — which pages are viewed and how often — provided by our website security and content-delivery provider. They set no cookies, store nothing on your device and reach us only as totals, not as a record of you. We also keep our own log of every request your browser makes to this website, as web servers commonly do: the address of each page or file, including everything in the link after the “?” (such as campaign tags or an advert click reference like utm_source or gclid), the page or website that sent you there, the time, your country, approximate location (town or region) and internet provider, the technical details your browser sends with each request (such as its type, language and display settings, and the names — never the contents — of any cookies) and how our server answered. It never records what you type into a form. It keeps your IP address, to protect the website against attacks, misuse and fraudulent clicks on our adverts, and a scrambled (hashed) code made from your IP address and browser that changes every day, so that we can group the pages viewed in one visit, count visitors and see which visits from our adverts led to an enquiry. It sets no cookies, and it is deleted after 90 days. If you allow Analytics in the cookie banner, the website also adds to this log which pages you move to within the site, how long each one stays open on your screen and how far down you scroll; this stores nothing on your device. With Analytics allowed we also use Google Analytics: it records the pages you view, the website or advert that brought you here, the kind of device you use and what you click (such as our phone number, “Get a quote” or sending a form), under a random identifier rather than your name. It never receives what you type into a form. If you also allow Marketing, Google Ads can use that same Google Analytics measurement to tell us which of our Google adverts led to an enquiry, and the Meta pixel — from Meta, the company behind Facebook and Instagram — records the pages you view and when you start a quote, tap to call or message us, or send an enquiry, so that we can measure our adverts and later show them to people who have visited this website. Neither receives what you type into a form, your name or your contact details. With Marketing allowed, SaveMyBudget also checks your visit for fraudulent clicks on our Google adverts, from details of your browser and device and how the page is used — never from what you type into a form.
If you instruct us, we will also need your identity documents, evidence of where your money comes from, your date of birth, your National Insurance number for the Stamp Duty or Land Transaction Tax return, and details of your lender, mortgage and bank account.
Please do not put health information, details of criminal matters or anything else particularly sensitive in a free-text box unless it is relevant to your matter. If it is, we use it only as far as necessary to advise you or to establish, exercise or defend legal rights (UK GDPR Article 9(2)(f) and, for information about criminal offences, paragraph 33 of Schedule 1 to the Data Protection Act 2018).
Where your information comes from
Most of it comes from you. If someone else contacts us about a matter that involves you — a co-buyer, a relative, or the other side in a dispute — we hold what they tell us about you, usually your name, contact details and your part in the matter, for the purposes and on the legal bases in this notice. If we then contact you, we tell you at that point where your details came from, unless an exemption applies, such as professional confidentiality.
If you name another person in your enquiry — a co-buyer or a relative, for example — we do not contact them or tell them about it unless you ask us to.
The client reviews on this website are copied from ReviewSolicitors, an independent review website. We show each review in full, with the reviewer’s name as it appears there, and the date. If one of them is yours and you would like it taken down here, send us a message.
Why we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Reply to your enquiry and prepare the quote you asked for | Article 6(1)(b) — steps you asked us to take before entering into a contract. If you are asking on someone else’s behalf, Article 6(1)(f) — our legitimate interest in answering enquiries about our services. |
| Protect this website and our forms from spam, bots and attacks: the security check, anti-spam checks, limits on repeated attempts and security logs | Article 6(1)(f) — our legitimate interest in keeping the website and our inbox secure. The UK GDPR recognises the security of network and information systems as such an interest (Article 6(11)). |
| Keep simple website statistics — which pages are viewed and how often — without cookies | Article 6(1)(f) — our legitimate interest in knowing which pages are useful, using totals that do not identify you. |
| Keep our own log of the requests made to this website, to measure which of our adverts bring visitors and enquiries and to spot misuse | Article 6(1)(f) — our legitimate interest in knowing whether our advertising works and in keeping the website secure. The log keeps nothing you type into a form, and is deleted after 90 days. |
| Only if you allow Analytics: measure how the website is used and which of our advertising and marketing brings enquiries, with Google Analytics and our own record of the time spent on each page | Article 6(1)(a) — your consent, given in the cookie banner or Cookie settings. You can withdraw it at any time in Cookie settings, as easily as you gave it. |
| Only if you allow Marketing: measure which of our Google and Meta adverts bring enquiries, build audiences of website visitors for future Meta adverts, and find fraudulent clicks on our Google adverts so that we can claim them back, with Google Ads, the Meta pixel and SaveMyBudget | Article 6(1)(a) — your consent, given in the cookie banner or Cookie settings. You can withdraw it at any time in Cookie settings, as easily as you gave it. |
| Suggest addresses as you type in the address search | Article 6(1)(f) — our legitimate interest in recording the right property. The search is optional: you can type the address in yourself. |
| Act for you once you instruct us | Article 6(1)(b) — performance of the contract. |
| Identity, sanctions and source-of-funds checks | Article 6(1)(c) — legal obligation under the Money Laundering Regulations 2017. |
| File your Stamp Duty or Land Transaction Tax return and register your title | Article 6(1)(c) — legal obligation; Article 6(1)(b) — performance of the contract. |
| Keep records of our advice, and deal with complaints, claims, insurers and regulators | Article 6(1)(c) — legal obligation; Article 6(1)(f) — our legitimate interest in being able to answer a complaint, a claim or a regulator. |
| Deal with requests and complaints about your personal information | Article 6(1)(c) — legal obligation. |
| Send you occasional updates, if you tick the optional box | Article 6(1)(a) — your consent; and, for email, PECR regulation 22. |
| Show client reviews published on ReviewSolicitors | Article 6(1)(f) — our legitimate interest in showing genuine feedback that clients chose to publish. |
Where we rely on legitimate interests, we have weighed them against your rights and recorded that assessment. You can ask us for a summary.
Updates, and how to stop them
The updates box on our forms is optional and unticked, and leaving it empty changes nothing about your enquiry. If you tick it, we may send you occasional updates on property law and fees by email or, after checking the number against the Telephone Preference Service and the Corporate TPS, by telephone. We never sell your details or pass them to anyone else for their own marketing.
To stop them, use the unsubscribe link in any update, send us a message or call 07466 996852. It takes effect straight away and costs you nothing.
Transfers outside the UK
Some of the providers that host, deliver and protect this website, deliver our email, keep the anti-abuse records, run the address search or, if you allow Analytics or Marketing, provide Google Analytics, Google Ads, the Meta pixel or SaveMyBudget are based, or use servers, outside the UK — including in the European Economic Area and the United States. Your information may therefore be processed there.
For each such transfer we rely on one of these safeguards:
- UK regulations approving transfers to that country or organisation (known as adequacy) — for example those covering the European Economic Area, and US organisations certified to the UK Extension to the EU–US Data Privacy Framework; or
- the International Data Transfer Agreement issued by the Information Commissioner, or the UK Addendum to the EU standard contractual clauses, together with an assessment that the protection is not materially lower than in the UK.
To get a copy of the safeguard that applies, send us a message or use the other contact details in “Who we are” above. If you instruct us and your matter has an international element — for example you or another party are abroad — Taylor Rose’s Data Privacy Notice (opens in a new tab) explains the transfers that may be needed.
How long we keep it
We keep information only as long as we need it for the purpose we collected it for, including to meet legal, accounting and regulatory requirements and to deal with possible claims. Where Taylor Rose’s terms of business set a period, we give it; otherwise we give the criteria we use.
| Information | How long |
|---|---|
| An enquiry that does not become a matter | As long as we need it to reply to you and deal with any follow-up, and then deleted — unless it is needed for a question, complaint or claim about the enquiry, or the law requires us to keep it. There is no fixed period, so these are the criteria we use. |
| A client file, once the matter has ended | At least six years after the matter ends, and longer where the nature of the matter, a possible claim, a legal or regulatory requirement or unpaid fees make that necessary. |
| Identity and source-of-funds records | At least five years after our business relationship with you ends, as the Money Laundering Regulations 2017 require, and normally as long as the rest of the file. |
| Your consent to updates | As long as your consent stands. If you withdraw it we stop straight away, keeping only a note not to contact you again and a record of when you gave and withdrew consent, for as long as we may need to show we acted lawfully. |
| Anti-abuse records (hashed IP address, email address or telephone number), form-security records and cached address suggestions | Deleted automatically within 24 hours at most. |
| The details of an address picked in the address search, kept so the same address is not looked up twice. They are not linked to you. | Deleted automatically after 30 days. |
| Copies of enquiries held by our email delivery provider | Up to 30 days, for delivery and troubleshooting. |
| Address text received by our address-lookup provider | Normally no more than 24 hours. |
| Click records held by SaveMyBudget, if you allow Marketing (with your IP address and browser details) | Up to 90 days. An IP address it blocks for abuse is kept while the block lasts and for 90 days afterwards. |
| Copies of enquiries in our enquiry records | Your name, contact details and the enquiry itself are removed automatically 12 months after we last worked on it, or sooner if you ask us to erase them. If you instruct us, your file is kept as described above. |
| Our own request log (addresses requested, with campaign tags and advert click references, country and approximate location, browser details, the IP address, a hashed code that changes every day and, with Analytics allowed, the time spent on each page) | Deleted automatically after 90 days; the full technical details of each request after 30 days. |
| Request and security logs held by our hosting, content-delivery and security providers | Only as long as they need them to run and protect the service, and then deleted. |
| A review shown on this website | While it is shown here. We take it down if the reviewer asks us to, or if it is removed from ReviewSolicitors. |
Keeping it secure
This website uses encrypted (HTTPS) connections, so what you send travels to our server encrypted. Access to your information is limited to the people who need it, our providers must keep it secure, and our anti-abuse records hold only hashed identifiers. If a breach affecting your information is likely to put you at high risk, we will tell you without undue delay.
The quote calculator
When you send the quote form, it works out an indicative cost from your answers so that Yelda starts from a costed outline. The figure is not shown to you and decides nothing: Yelda reads every enquiry and decides whether, and on what terms, we can act. No figure is worked out for a dispute.
So no decision about you is based solely on automated processing, within the meaning of Article 22A of the UK GDPR, and we do not profile you.
Cookies and storage on your device
This website stores only a few small items on your device: a cookie that remembers your cookie choice, and your quote-form answers while the tab is open (never your name, contact details or address). If you allow Marketing, it also keeps the click reference of a Google advert you came from, for 90 days. The security check on our forms may keep a small technical item of its own. Google Analytics cookies are added only if you allow Analytics, and the Meta pixel’s advertising cookies only if you allow Marketing. SaveMyBudget’s click-fraud check, also only with Marketing, stores nothing on your device but reads details of your browser and device. The cookie policy lists each item and lets you change your choice.
Your rights
- Access
- A copy of the personal information we hold about you.
- Correction
- Correction of anything inaccurate, and completion of anything incomplete.
- Erasure
- Deletion, where we no longer need the information and no law requires us to keep it. A closed client file usually cannot be deleted on request.
- Restriction
- That we keep your information but stop using it while a question about its accuracy or our use of it is resolved.
- Portability
- The information you gave us, in a structured, commonly used, machine-readable format, where we use it on the basis of consent or a contract and by automated means.
- Withdrawing consent
- At any time, for anything we do on the basis of your consent. It does not affect what we did before.
- Complaining to us, or to the ICO
- See “Complaints” below.
To use any of these rights for information you sent through this website, contact YR Legal Services Ltd: send us a message, call 07466 996852, or email or write to us at the addresses in “Who we are” above. Once you have instructed us, you can also contact Taylor Rose’s Data Protection Officer. It is normally free. We may need to confirm who you are, and we will reply within one month; if a request is complex we may take up to two more months, and we will tell you why.
You do not have to give us your details, but without a name and a way to reach you we cannot reply or send a quote. Once you instruct us, identity and source-of-funds information is a legal requirement, and we cannot act without it.
Complaints
If you are unhappy with how your personal information has been handled, you have the right to complain to us. For information you sent through this website, complain to YR Legal Services Ltd: use our contact form and begin your message with “Data protection complaint”, call us, or email or write to us at the addresses in “Who we are” above. Once you have instructed us, you can also complain to Taylor Rose’s Data Protection Officer. We will acknowledge your complaint within 30 days of receiving it, look into it, keep you informed and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner's Office (ICO): ICO website (opens in a new tab), 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would welcome the chance to put things right first, but you do not have to come to us before going to the ICO.
Complaints about our legal services follow our complaints procedure.
Protect yourself from payment fraud
Changes to this notice
We review this notice regularly. If we change how we use information you have already given us, we will tell you before the change takes effect. Last updated: 21 October 2026.