Working draft · Last updated 4 September 2026
1. Controller and contact
186 LONDON LIMITED, company number 12403708, operates this website under the 186 Private name and is the stated controller for personal data collected through the public website and initial enquiry form. Its registered office is 39–40 St James’s Place, St James’s, London, England, SW1A 1NY. A matter-specific privacy notice may identify a different or additional controller if the firm accepts instructions.
Privacy enquiries and rights requests may be sent to ariou@186.legal or to the registered office. Please mark written correspondence for the attention of the privacy contact.
2. Data collected
The consultation form collects your name, work email, optional telephone number, optional organisation, matter category, relevant countries, any deadline and the summary you provide. It also records the source page, form timing, browser information and a one-way hash derived from the network address for security and rate limiting.
Please do not submit original documents, passwords, banking details, privileged material belonging to another party or highly sensitive evidence through the public form.
3. Purposes and lawful bases
Information is used to assess and respond to your enquiry, identify the appropriate team, undertake preliminary conflict and suitability checks, secure the form, prevent abuse and maintain an auditable record. Depending on context, processing may be necessary to take steps at your request before a possible engagement, to pursue legitimate interests in operating a secure professional website and responding to business enquiries, or to meet legal and professional obligations.
4. Recipients and processors
Access is limited to authorised firm personnel and service providers needed to host, secure, store and transmit the enquiry. The current workflow stores accepted enquiries in the site database and sends a secure owner notification. Personal data is not sold. The final launch review must identify the production host, database, notification, analytics and other processors and confirm their contractual and security terms.
5. International transfers
Cross-border hosting or support may involve access from outside the United Kingdom or European Economic Area. Before launch, the firm must verify where each production provider processes data and document any adequacy regulation, standard contractual clauses, UK addendum or other appropriate safeguard relied upon.
6. Retention
Website enquiries that do not become matters should be retained only for the period needed to respond, manage follow-up, record conflict outcomes, meet professional obligations and protect legal rights. The firm must approve and document a specific operational retention schedule before publication. If a client matter is opened, the applicable client-file and professional retention arrangements apply instead.
7. Security
Measures include encrypted transport, server-side validation, anti-automation controls, rate limiting, privacy-preserving network hashing, restricted database access and secure owner notification. No internet transmission can be guaranteed completely secure, so the public form is intentionally limited to initial enquiries.
8. Your rights
Subject to applicable law and professional obligations, you may request access, correction, deletion, restriction or portability, object to certain processing, or withdraw consent where consent is the lawful basis. You may also ask for information about safeguards for international transfers.
You may complain to the UK Information Commissioner’s Office and, where French or EU data-protection law applies, to the competent supervisory authority such as the CNIL. We encourage you to contact the firm first so the concern can be reviewed.
9. Cookies, analytics and AI
Optional analytics are disabled until you choose them. The cookie notice explains how to manage preferences. Where approved AI tools are used, personal and confidential information must be minimised and protected as described in the AI-use policy.
10. Updates
This notice should be reviewed whenever the enquiry workflow, processors, analytics, service territories or professional obligations change. Material changes will be reflected in the date and, where appropriate, in a renewed consent choice.
Contact and related notices
Privacy enquiries and rights requests may be sent to ariou@186.legal.
See the cookie notice to manage analytics preferences and the AI-use policy for the safeguards applicable to approved AI-assisted work.