Privacy Policy
On Yin Li Solicitor
Last updated: May 2026
On Yin Li Solicitor is a freelance solicitor regulated by the Solicitors Regulation Authority (SRA No. 8006709). On Yin Li Solicitor is committed to protecting your privacy and handling your personal data responsibly and transparently.
This policy explains what personal data On Yin Li Solicitor collects, why it is collected, how it is used, and your rights in relation to it. It applies to personal data collected in connection with the provision of legal services and through the On Yin Li Solicitor website.
1. Who We Are
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:
On Yin Li Solicitor
SRA No. 8006709
Regulated by the Solicitors Regulation Authority
Email: Billy@OnYinLi.co.uk
Telephone: +44 (0)7434771884
Address: On Yin Li Solicitor, Regus, Sterling House, 6-10 St Georges Road, London, SW19 4DP
2. What Personal Data We Collect
In the course of providing legal services, On Yin Li Solicitor may collect and process the following categories of personal data:
• Identity information: full name, date of birth, and photographic identification (such as a passport or driving licence). Identity documents are collected as a legal requirement under anti-money laundering legislation and must be provided before On Yin Li Solicitor can accept your instructions.
• Contact information: postal address, email address, and telephone number.
• Financial information: details relevant to your estate, assets, and financial affairs, as required to prepare a will or lasting power of attorney.
• Health information: where relevant to a Health and Welfare Lasting Power of Attorney, information about your health or medical conditions.
• Family and relationship information: details of your spouse, civil partner, children, dependants, or other beneficiaries relevant to your instructions.
• Information about third parties: names and contact details of attorneys, witnesses, certificate providers, or beneficiaries as relevant to your matter.
On Yin Li Solicitor does not collect personal data through the website beyond standard analytics data described in section 7 below.
3. How We Use Your Personal Data
On Yin Li Solicitor uses your personal data for the following purposes:
• To provide legal services: to take your instructions, advise you, and prepare wills, lasting powers of attorney, and related documents.
• To verify your identity and comply with anti-money laundering obligations: On Yin Li Solicitor is required by the Proceeds of Crime Act 2002 and the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 to verify the identity of all clients before accepting instructions. Identity verification is carried out using Credas, a UK-based electronic identity verification service. You will be asked to provide photographic identification and a selfie image, which Credas processes on On Yin Li Solicitor's behalf to confirm your identity. On Yin Li Solicitor cannot accept your instructions if you do not provide the information required for identity verification.
• To communicate with you whether directly to you or through a third party: including sending you documents, requesting information, and corresponding about your matter.
• To maintain accurate client records and comply with file retention obligations.
• To send you occasional reminders or information about updating your documents, where you have not objected to being contacted for this purpose.
4. Lawful Basis for Processing
On Yin Li Solicitor processes your personal data on the following lawful bases under the UK GDPR:
• Contract (Article 6(1)(b)): processing is necessary to carry out your instructions and perform the legal services you have engaged On Yin Li Solicitor to provide.
• Legal obligation (Article 6(1)(c)): processing is required to comply with anti-money laundering legislation, including the Proceeds of Crime Act 2002 and the Money Laundering Regulations 2017, and other statutory obligations applicable to solicitors. On Yin Li Solicitor has no discretion in this regard: identity verification records must be obtained and retained regardless of your wishes.
• Legitimate interests (Article 6(1)(f)): processing is necessary for the legitimate interests of On Yin Li Solicitor in maintaining client records, managing the practice, and communicating with clients and former clients about their documents, where those interests are not overridden by your rights.
• Explicit consent (Article 9(2)(a)): where On Yin Li Solicitor processes special category data (such as health information in connection with a Health and Welfare LPA), this is done on the basis of your explicit consent, given at the time you provide the information.
5. Sharing Your Personal Data
On Yin Li Solicitor will not sell or share your personal data for marketing purposes. Your personal data may be disclosed to third parties only in the following circumstances:
• Credas (identity verification): On Yin Li Solicitor uses Credas Technologies Limited, a UK-based electronic identity verification provider, to verify the identity of all clients. When you undergo identity verification, your personal data (including your name, date of birth, photographic identification, and selfie image) will be processed by Credas on On Yin Li Solicitor's behalf. Credas acts as a data processor and is contractually required to process your data only in accordance with On Yin Li Solicitor's instructions. For further information, please refer to Credas's privacy policy at https://credas.com/privacy-notice/ .
• The Office of the Public Guardian (OPG): where an LPA is to be registered, your personal data and that of your attorneys and certificate provider will be submitted to the OPG as required by the Mental Capacity Act 2005.
• HM Revenue & Customs: where inheritance tax advice is provided in connection with your will, relevant information may be shared with HMRC as required.
• Professional advisers: where necessary to carry out your instructions, details may be shared with other professionals such as financial advisers or accountants, but only with your knowledge and where relevant to your matter.
• Legal and regulatory authorities: where On Yin Li Solicitor is required by law or regulation to disclose information, including to the Solicitors Regulation Authority or where required under the Proceeds of Crime Act 2002.
• Cloud and practice management services: On Yin Li Solicitor uses secure digital tools to store and manage client files. These services are selected for their compliance with UK data protection standards.
Any third parties to whom your data is disclosed are required to keep it secure and to use it only for the purpose for which it was shared.
6. How Long We Keep Your Data
On Yin Li Solicitor retains personal data only for as long as is necessary. The following retention periods apply:
• Client matter files (other than original wills): retained for a minimum of six years from the conclusion of the matter, in accordance with Law Society guidance and limitation period requirements.
• Anti-money laundering and identity verification records: retained for a minimum of five years from the end of the client relationship, as required by Regulation 40 of the Money Laundering Regulations 2017. These records are maintained separately from the client matter file. The mandatory retention obligation under AML legislation means that AML and identity verification records cannot be deleted on request during this period, even if you exercise your right to erasure under section 9 below.
• Marketing or follow-up communications: retained until you object or withdraw consent.
At the end of the relevant retention period, personal data will be securely destroyed.
7. Cookies and Website Data
The On Yin Li Solicitor website is hosted on Squarespace, a third-party platform operated by Squarespace, Inc. (a US company). Squarespace automatically sets certain cookies when you visit the site.
Essential cookies
Squarespace sets essential cookies required for the website to function, including for security and network management. These cookies cannot be disabled.
Analytics cookies
Squarespace Analytics is used to collect anonymous information about how visitors use this website, including which pages are visited and how visitors navigate the site. This helps On Yin Li Solicitor understand how the website is performing. Analytics cookies are only placed with your consent, which you may give or decline when you first visit the website via the cookie banner.
In addition to analytics cookies, Squarespace collects certain information about all visitors to On Yin Li Solicitor’s website as part of its hosting service. This may include your IP address, browser type and version, device information, and the web pages you visited before arriving at this website. This information is collected by Squarespace to operate and improve its platform. You can read more about how Squarespace uses visitor data in its privacy policy at squarespace.com/.
International data transfers
Because Squarespace is a US company, data collected through the website (including analytics data) may be transferred to and stored on servers in the United States. Squarespace relies on Standard Contractual Clauses approved under UK GDPR to ensure that appropriate safeguards are in place for such transfers. For further information, please refer to Squarespace's privacy policy at squarespace.com/.
8. Security
On Yin Li Solicitor takes reasonable technical and organisational measures to protect your personal data against loss, unauthorised access, alteration, or disclosure. Client files are stored securely and access is restricted to On Yin Li Solicitor. Electronic data is held on password-protected systems, and appropriate security measures are applied to electronic transmissions of personal data.
No method of transmission over the internet is completely secure. On Yin Li Solicitor cannot guarantee the absolute security of data transmitted to or from the website, but will take all reasonable steps to protect it.
9. Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
• Right of access: you may request a copy of the personal data On Yin Li Solicitor holds about you (a Data Subject Access Request or DSAR). There is no fee for making a DSAR.
• Right to rectification: you may request that inaccurate or incomplete personal data be corrected.
• Right to erasure: in certain circumstances, you may request that your personal data be deleted. This right does not apply to personal data that On Yin Li Solicitor is required to retain by law, including anti-money laundering and identity verification records which must be kept for a minimum of five years under the Money Laundering Regulations 2017.
• Right to restriction of processing: in certain circumstances, you may request that processing of your personal data be restricted.
• Right to object: you may object to processing based on legitimate interests, including for direct marketing purposes. Where you object, On Yin Li Solicitor will cease the relevant processing unless there are compelling legitimate grounds that override your interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Note that withdrawal of consent does not affect processing carried out on other lawful bases, such as legal obligation.
• Right to data portability: in certain circumstances, you may request that your data be provided to you in a structured, machine-readable format.
On Yin Li Solicitor will respond to requests within one month of receipt, or of confirming your identity where this is required. To exercise any of these rights, please contact On Yin Li Solicitor in writing by email or post using the contact details in section 1. You will be asked to provide sufficient identification before any information is released.
Acceptable forms of identification include a passport, photo driving licence, or recent utility bill (within the last three months).
10. How to Complain
If you are unhappy with how On Yin Li Solicitor has handled your personal data, please contact On Yin Li Solicitor in the first instance using the contact details in section 1.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), which is the supervisory authority for data protection in the UK:
• Website: ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
11. Links to Other Websites
The On Yin Li Solicitor website may contain links to third-party websites. On Yin Li Solicitor is not responsible for the privacy practices of those sites and this policy does not apply to them. You should review the privacy policy of any external website you visit.
12. Changes to This Policy
On Yin Li Solicitor reserves the right to update this privacy policy from time to time. Any changes will be posted on the website. The date at the top of this policy indicates when it was last revised. Where changes are material, On Yin Li Solicitor will take reasonable steps to bring them to your attention.