Last updated: 24 September 2026

 

1. Who we are

This privacy notice explains how C&I Dispute Services Ltd (“C&IDS”, “we”, “us” or “our”) collects and uses personal data about you when you visit candids.legal, contact us, book a call, subscribe to In-House Brief or otherwise deal with us.

C&IDS is a company registered in England and Wales under company number 11789861, with its registered office at 10 North Foreland Road, Broadstairs, Kent, CT10 3NN, United Kingdom. C&IDS is the controller of the personal data described in this notice.

If you have any questions about this notice or how we handle your personal data, please contact us at admin@candids.legal or write to us at the address above.

 

2. What C&IDS does

C&IDS introduces experienced construction and disputes lawyers to businesses that need fractional in-house legal support. C&IDS acts as the placement company only. It does not itself provide legal services. Where a lawyer introduced by C&IDS is engaged by a client, that lawyer contracts directly with the client under their own retainer and is responsible, as a separate controller, for the personal data they process in providing legal services. Their own privacy notice will apply to that processing.

 

3. Personal data we collect

We collect the following categories of personal data:

• Enquiry and booking data: your first and last name, email address, telephone number, company name, location, type of business and the content of any message you send us through our contact or “Book a Call” forms.

• Subscription data: your email address, the date and time you subscribed, and your subscription status.

• Correspondence: the content of emails, messages and call notes when you communicate with us.

• Client and prospective client data: the names, job titles and business contact details of individuals at businesses that engage, or are considering engaging, lawyers introduced by C&IDS.

• Lawyer and candidate data: where you are a lawyer who may be introduced to clients, your name, contact details, professional qualifications, practising status, experience, availability, fee expectations and any CV or other information you choose to provide.

• Website usage data: information about how you use our website, such as the pages you visit, your approximate location, device and browser type, collected through cookies and similar technologies (see section 11).

We do not intentionally collect special category personal data (for example, information about health, religion or ethnic origin) or criminal offence data. Please do not include such information in forms or messages unless we have specifically asked for it.

 

4. How we use your personal data and our lawful bases

We use your personal data only where we have a lawful basis under the UK General Data Protection Regulation (UK GDPR). The list below sets out the purposes for which we use personal data and the lawful basis we rely on.

• Responding to enquiries and arranging calls booked through our website (enquiry and booking data; correspondence): legitimate interests (responding to people who contact us and developing our business); or taking steps at your request before entering into a contract.

• Sending you In-House Brief and notifications of new articles (subscription data): consent, which you may withdraw at any time.

• Introducing lawyers to clients and administering placements (client and prospective client data; lawyer and candidate data): performance of a contract; or legitimate interests (operating our placement business).

• Operating, securing and improving our website (website usage data): legitimate interests for strictly necessary processing; consent for non-essential cookies.

• Complying with our legal and regulatory obligations, including accounting and tax (relevant records): legal obligation.

• Establishing, exercising or defending legal claims (relevant records): legitimate interests.

Where we rely on legitimate interests, we have considered whether our interests are overridden by your rights and interests, and have concluded that they are not. You can ask us for more information about this assessment.

 

5. In-House Brief

If you subscribe to In-House Brief, we will send you emails containing links to new articles published on our website, and occasional related updates. We will not use your subscription to send you unrelated marketing.

You can unsubscribe at any time by using the unsubscribe link in any email we send, or by contacting us. Once you unsubscribe, we will keep your email address on a suppression list only so that we do not contact you again.

 

6. Who we share your personal data with

We do not sell your personal data. We share it only as follows:

• Service providers who process personal data on our behalf and under our instructions, including Wix.com Ltd (website hosting, forms, subscriber management and email distribution) and Microsoft Corporation (email and business productivity services).

• Lawyers introduced by C&IDS, where you are a client or prospective client and we are arranging an introduction, and clients, where you are a lawyer and have agreed to be introduced.

• Professional advisers, such as our accountants, insurers and legal advisers, where necessary.

• Regulators, courts, law enforcement and other authorities, where we are required or permitted by law to do so.

• A purchaser or successor, if all or part of our business is sold or reorganised, subject to appropriate confidentiality protections.

 

7. International transfers

Some of our service providers, including Wix and Microsoft, may process personal data outside the United Kingdom. Where personal data is transferred outside the United Kingdom, we ensure that it is protected by an appropriate safeguard recognised under UK data protection law, such as UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the International Data Transfer Agreement or International Data Transfer Addendum to the European Commission’s standard contractual clauses. You can contact us for further information about the safeguards we rely on.

 

8. How long we keep your personal data

We keep personal data only for as long as necessary for the purposes described in this notice:

• Enquiries and booking data that do not lead to an engagement: up to 2 years from our last contact with you.

• Subscription data: for as long as you remain subscribed; after you unsubscribe, your email address is retained on a suppression list only.

• Client, placement and lawyer records: 6 years after the end of the relevant engagement or relationship, to meet legal, accounting and limitation requirements.

• Website usage data: in accordance with the retention periods of the relevant cookies and our website provider’s settings.

 

9. How we protect your personal data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including secure hosting, access controls, encryption in transit and multi-factor authentication on our business accounts. No transmission of data over the internet is completely secure, but we take reasonable steps to protect the personal data we hold.

 

10. Your rights

Under UK data protection law, you have the following rights, subject to certain conditions and exceptions:

• the right to be informed about how we use your personal data;

• the right of access to the personal data we hold about you;

• the right to have inaccurate personal data corrected;

• the right to have your personal data erased;

• the right to restrict our use of your personal data;

• the right to object to our use of your personal data, including an absolute right to object to direct marketing;

• the right to data portability; and

• where we rely on consent, the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

To exercise any of these rights, please contact us at admin@candids.legal. We will not normally charge a fee, and we will respond within one month, which may be extended in certain circumstances. We may need to verify your identity before responding.

 

11. Cookies

Our website uses cookies and similar technologies, some of which are set by our website provider, Wix. Strictly necessary cookies are required for the website to function. We use other cookies, such as analytics cookies, only with your consent, which you can give or withdraw using the cookie banner on our website.

 

12. Links to other websites

Our website and emails may contain links to other websites. We are not responsible for the privacy practices of those websites, and we encourage you to read their privacy notices.

 

13. Children

Our website and services are intended for business users and are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

 

14. Complaints

If you have a concern about how we use your personal data, please contact us first so that we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection: ico.org.uk, telephone 0303 123 1113.

 

15. Changes to this notice

We may update this notice from time to time. The current version will always be available on our website, and the date at the top shows when it was last updated. Where changes are significant, we will take reasonable steps to let you know.