Our Privacy Notice

---

1. Who We Are

Han Kun (London) is a trading name of Han Kun LLP ("we", "us", "the Firm"), a law firm authorised and regulated by the Solicitors Regulation Authority (SRA number: 8009409), and a limited liability partnership registered in England and Wales (OC453316).

We provide legal services in relation to the law of England and Wales to international individual and corporate clients. 

Han Kun LLP is the data controller in respect of the personal data described in this Privacy Notice. We may update this Privacy Notice from time to time. The latest version will always be available on our website.

2. Who This Notice Applies To

This Notice applies to our current, former and prospective clients and, where relevant, to individuals connected with our clients, counterparties, suppliers, job applicants, website users, employees, and other individuals whose personal data we process.

3. The Personal Data We Collect

Depending on our engagement with you, we may collect: your name and contact details; date of birth; information required for identity verification and client due diligence (such as passport, driving licence or other identity documentation, nationality and other information required to comply with our legal and regulatory obligations); and other information relevant to the matter on which we are instructed.

4. How We Collect Your Personal Data

We collect personal data directly from you, and in some cases from other sources, including: business clients (in relation to their staff or related parties); referrers, credit reference agencies and electronic identity verification providers, for anti-money laundering due diligence; professional or regulatory registers, such as Companies House; other parties to a matter; and publicly available sources.

5. Special Category Data

Given the nature of our work — principally corporate, commercial and banking and finance matters, including facility agreements, loan agreements, security documents and related transactional and advisory work under English law — we do not typically expect to process special category data. Where this is exceptionally required in connection with a particular matter, we will only collect and process such data where necessary for that purpose and in accordance with applicable law.

6. Why We Use Your Information

We use personal data to: provide legal advice and carry out our instructions; administer our business, including billing; and comply with our legal and regulatory obligations, including under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017. 

Nothing in this Privacy Notice overrides our professional duty of confidentiality to our clients, which continues to apply alongside our obligations under data protection legislation. The majority of our processing is carried out on a contractual basis or to comply with a legal obligation. Where appropriate, we also rely on our legitimate interests (for example, limited business development using publicly available information) or, in the case of marketing, your consent where this is required by law.

7. Who We Share Your Information With

We do not sell, swap or rent personal data to third parties, and we do not share it for marketing purposes. We may share personal data with: the Courts and Tribunals, counsel, and other parties' legal representatives, where necessary for a matter; regulators and government agencies, such as the National Crime Agency; and trusted service providers who support our practice, including Microsoft 365, Clio (our case management system), Verify 365 (identity verification), and PureCyber (our cybersecurity partner). These organisations act either as our data processors, or as independent data controllers where appropriate, and are required to maintain appropriate technical and organisational security measures.

8. International Transfers

Our physical files are stored in the United Kingdom and our principal electronic systems are UK-based.  Where it is necessary to transfer personal data outside the United Kingdom, we ensure that an appropriate safeguard is in place beforehand, such as an adequacy decision, Standard Contractual Clauses, explicit consent, or another lawful transfer mechanism permitted under applicable UK data protection legislation.

9. Data Retention

We retain personal data only for as long as necessary, taking account of our legal, regulatory and professional obligations. If you would like more information about how long we retain a particular category of personal data, please contact us using the details in Section 12.

Different categories of personal data may be retained for different periods depending on the nature of the matter and our legal or regulatory obligations.

10. Your Rights

Subject to certain exceptions, you have the right to: be informed about how we process your 

data; request access to it; request that inaccurate data be corrected; request erasure; request that processing be restricted; receive certain personal data in a portable format; object to processing; and withdraw consent, where processing is based on consent. We will respond to requests within the timescales required by UK data protection law. 

We do not use automated decision-making or profiling. 

You may exercise your rights by contacting us using the details set out in Section 12.

11. Data Protection Complaints

If you have concerns about how we have processed your personal data, you have the right to complain to us, and we encourage you to contact us first so that we have the opportunity to investigate and address your concerns. Please see our Data Protection Complaints Procedure for details of how to raise a concern with us. If you remain dissatisfied after we have considered your concerns, you have the right to complain to the Information Commissioner's Office (ICO), the UK's independent authority for data protection. If your concern relates instead to the standard of legal service you have received, please see our separate Client Complaints Procedure.

12. Contact Us

If you have any questions about this Notice or wish to exercise any of your rights, please contact our Data Compliance Manager:

Email

datacompliance@hankunlondon.co.uk 

Telephone

+44 (0)20 8078 9782 

Post

Data Compliance Manager

Han Kun LLP

First Floor, 1–2 Royal Exchange Buildings London EC3V 3LF United Kingdom

We are registered with the Information Commissioner's Office (ICO) under registration number ZB821152.

13. Cookies

For information about how we use cookies and similar technologies on this website, please see our Cookie Policy.

14. Marketing

Where we send marketing communications, we do so only where permitted by law or with your consent, where required, and we do not send unsolicited marketing where prohibited by law. You may opt out at any time by contacting us or using the unsubscribe link in any marketing communication.

Related documents

• Cookie Policy
• Client Complaints Procedure 
• Data Protection Complaints Procedure

Last reviewed: July 2026 

Next scheduled review: July 2027

This Privacy Notice forms part of Han Kun LLP's wider data protection and information governance framework.