Privacy Policy
Last updated: October 2026
Heidi A. Lawson PLLC respects your privacy and is committed to handling personal information responsibly and transparently.
This Privacy Policy explains how personal information may be collected, used and protected when you visit this website, contact the practice or make an enquiry about legal or non-legal services.
1. Who we are
This website is operated by Heidi A. Lawson PLLC.
Heidi A. Lawson is an attorney admitted in New York and Massachusetts and a Solicitor of England & Wales.
For questions about this Privacy Policy or the way your personal information is handled, please contact:
Heidi A. Lawson PLLC
Email: info@heidialawson.com
2. Information we collect
We may collect personal information that you provide directly when you contact the practice, submit an enquiry or otherwise communicate with us.
This may include:
your name;
organisation or company;
email address and other contact details;
the nature of your enquiry;
information you choose to provide about a legal, business, consulting, teaching, advisory or board matter; and
correspondence and communications with the practice.
The website may also collect limited technical information automatically, such as browser type, device information, IP address and information about how visitors use the website.
Please do not submit confidential, privileged or highly sensitive information through the website contact form unless specifically requested.
3. How we use your information
Personal information may be used to:
review and respond to enquiries;
determine whether the practice may be able to assist you;
communicate with prospective and existing clients;
provide legal or non-legal services where an engagement has been agreed;
manage professional and business relationships;
administer and improve the website;
maintain the security and functionality of the website;
comply with professional, regulatory and legal obligations; and
establish, exercise or defend legal rights where necessary.
Submitting an enquiry through this website does not, by itself, create an attorney-client or solicitor-client relationship.
4. Legal bases for processing
Where UK data protection law applies, personal information may be processed on one or more of the following bases:
Legitimate interests
Where processing is reasonably necessary to operate the practice, respond to enquiries, manage professional relationships, maintain the website or protect the practice's legitimate business interests.
Contract
Where processing is necessary to take steps at your request before entering into an engagement or to perform services under an agreed engagement.
Legal obligation
Where information must be processed to comply with applicable legal, professional or regulatory requirements.
Consent
Where consent is required for a particular type of processing. Where processing relies on consent, you may withdraw that consent at any time.
5. Sharing your information
Personal information is not sold.
Information may be shared where reasonably necessary with trusted third parties who support the operation of the practice or website, including technology, hosting, website, communications and professional service providers.
Where a matter requires additional professional resources, information may also be shared, where appropriate and subject to applicable professional obligations, with lawyers, barristers, accountants, brokers or other professional advisers.
Information may also be disclosed where required by law, regulation, court order or professional obligation, or where necessary to establish, exercise or defend legal rights.
6. Website and cookies
This website is hosted and operated using Squarespace. Squarespace and related service providers may process certain technical information required to provide, secure and operate the website.
The website may use cookies and similar technologies for essential functionality, security and to understand how the website is used.
Where required by applicable law, non-essential cookies will only be used with your consent. You can manage your cookie preferences through the cookie settings available on the website.
7. International transfers
Because Heidi A. Lawson PLLC operates across the United States and United Kingdom and may use service providers operating internationally, personal information may be processed or transferred outside the country in which it was originally collected.
Where UK data protection law applies, appropriate safeguards will be used where required for transfers of personal information outside the United Kingdom.
8. How long we keep information
Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, including responding to enquiries, providing services, maintaining appropriate professional and business records, and satisfying legal, regulatory, accounting or professional obligations.
Different retention periods may apply depending on the nature of the information and the relationship with the individual concerned.
9. Your rights
Depending on where you are located and the laws that apply, you may have rights in relation to your personal information.
Under UK data protection law, these may include the right to:
request access to your personal information;
request correction of inaccurate or incomplete information;
request deletion of your information in certain circumstances;
request restriction of processing;
object to certain processing;
request transfer of your information where applicable; and
withdraw consent where processing is based on consent.
These rights are not absolute and may be subject to legal and professional obligations.
To exercise a privacy right, please contact info@heidialawson.com.
10. Security
Reasonable technical and organisational measures are used to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of electronic transmission or storage can be guaranteed to be completely secure.
11. Third-party websites
This website may contain links to third-party websites, including LinkedIn.
Heidi A. Lawson PLLC is not responsible for the privacy practices or content of third-party websites. You should review the privacy information provided by those organisations before submitting personal information to them.
12. Complaints
If you have a concern about how your personal information has been handled, please contact info@heidialawson.com in the first instance.
If UK data protection law applies, you may also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Information Commissioner's Office
13. Changes to this Privacy Policy
This Privacy Policy may be updated periodically to reflect changes to the website, the practice, applicable law or the way personal information is processed.
The most recent version will be published on this page with the date of the latest update.