Privacy Policy

Last updated: 11 January 2026

Who we are

This website is operated under the trading name NJB Legal, a trading name of NJB Legal Limited (“we”, “us”, “our”).

NJB Legal Limited is a consultancy and management services company and is a consultant of Nexa Law Limited (“Nexa”), a law firm authorised and regulated by the Solicitors Regulation Authority.

This Privacy Policy relates to your use of this website and associated enquiry channels. Nexa has its own privacy arrangements for client matters and, where your enquiry progresses to legal services, Nexa’s privacy documentation will apply to the handling of client-matter data. 

Controller(s):

For website enquiries and marketing administration, NJB Legal Limited is the controller.

For client matter data once you are formally instructed for legal services, Nexa will generally act as controller (and/or joint controller depending on the engagement structure) in accordance with its own terms and regulatory requirements.

Contact details (NJB Legal Limited):

Email: Nicholas.ball@njb-legal.co.uk

Registered office: 7 Charter Court, Winsford, England, CW7 2FY

Company no.: 16921195

Our website and the personal data we collect

We may collect and process the following categories of personal data:

Information you provide

• Name, email address, telephone number
• Business name, role/title
• Details of your enquiry and any documents or information you choose to send us

Information collected automatically

• IP address, device identifiers, browser type/version
• Website usage data (pages visited, time on site, referral source)
• Cookie and similar technology data 

We do not intentionally collect special category data via this website. Please avoid submitting it unless specifically requested.

How we use your personal data

We use your data to:

• Respond to enquiries and communications
• Assess whether and how your enquiry should be progressed through Nexa
• Administer our relationship with you (including scheduling calls/meetings)
• Improve the website, user experience and content
• Maintain security, prevent fraud and protect our systems
• Comply with legal and regulatory obligations

Lawful basis for processing (UK GDPR)

We rely on the following lawful bases:

• Legitimate interests: operating a professional services website, responding to enquiries, improving services, preventing misuse
• Consent: where you opt-in to marketing (e.g. newsletters) or non-essential cookies
• Legal obligation: where we must comply with law or regulatory requirements
• Contract / steps prior to contract: where processing is necessary to take steps at your request prior to formal engagement through Nexa

Sharing your personal data

We may share personal data with:

• Nexa, where necessary to consider, conflict-check, onboard and progress legal services
• IT/hosting/email providers and other service providers acting on our instructions
• Professional advisers (e.g. accountants), insurers and regulators where required
• Law enforcement or other public authorities where legally required

We require third parties to handle personal data securely and lawfully.

International transfers

Where any supplier processes data outside the UK, we will ensure appropriate safeguards are in place (such as the UK Addendum to EU SCCs, or other recognised transfer mechanisms).

How long we keep your personal data

We keep personal data only as long as necessary for the purposes set out above:

General enquiries (not progressed): typically up to 12 months

Marketing subscribers: until you unsubscribe (and then minimal suppression data to record your opt-out)

Client matter data: retained in line with Nexa’s professional, legal and regulatory retention requirements

Cookies and similar technologies

We use cookies to operate the site and (where enabled) to analyse performance and improve user experience. Non-essential cookies will be used only with your consent via the cookie banner/manager.

You can also manage cookies via your browser settings.

Marketing

Where you opt in, we may send you legal updates/marketing communications. You can unsubscribe at any time using the link in our emails or by contacting us.

We do not send unsolicited marketing where consent is required.

Your rights

You have rights under UK GDPR, including:

• Access, rectification, erasure (in certain circumstances)
• Restriction and objection to processing
• Data portability (in certain circumstances)
• Withdraw consent (where processing is based on consent)

To exercise rights, contact us using the details above.

Security

We use appropriate technical and organisational measures to protect personal data. No website is 100% secure. Please do not send highly sensitive information unless we confirm a secure method.

Complaints

If you have a complaint, contact us first and we will try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO).

Changes to this Privacy Policy

We may update this policy from time to time. The latest version will be published on this page.