Data Protection

Arrow to next section

Your legal partner in data protection for an evolving landscape

Data is at the heart of nearly all business activities. It drives decisions, empowers teams and shapes how you engage with customers. With so much riding on it, managing your data responsibly, and protecting the information you hold, is crucial for any organisation.

Our data protection solicitors in Oxfordshire help you manage personal data efficiently, stay compliant with UK GDPR and other legislation, and prepare for what’s coming next, including emerging AI regulations. Whether you are scaling fast or running an established operation, we build a resilient data protection framework that keeps you compliant today and ready for tomorrow.

And when something does go wrong, whether it’s a data breach, a Data Subject Access Request or an internal concern, we are at your side when it matters. With smart, pragmatic advice and clear strategic guidance, we help you respond quickly, protect your organisation and move forward with confidence.

Our Data Protection Services

Data Sharing Agreements & Transfers

Our team drafts and negotiates the agreements you need to handle data lawfully and confidently, from data processing agreements and data sharing agreements to transfers arising in mergers, acquisitions and joint ventures. We also advise on international data transfers to ensure your cross‑border activity remains compliant.

Governance & Risk Management

We help you understand how data moves through your organisation and where risks may arise, using tools such as data mapping and Data Protection Impact Assessments. Our team also advises on governance structures and emerging regulatory proposals, including those relating to AI and automated technologies.

Data Policies, Notices & Compliance

We prepare and update all the required policy documents that support compliance, including privacy notices, records of processing activities, and retention schedules. We also help you meet legal requirements around direct marketing, cookies and employee data, ensuring your organisation stays aligned with the UK GDPR and related legislation.

Data Incidents, Requests & Rights Management

When issues arise, we support you with data breach response, regulator engagement and the handling of Data Subject Access Requests and other individual rights requests. Our focus is on helping you respond quickly, minimise risk and protect your organisation.

Why Choose SE-Solicitors

Understanding

With our belief that relationships really do matter, we’re focused on understanding you and your world more deeply.

Expertise

By harnessing our collective skills, knowledge, and depth of expertise, we support you to manage the unique complexity of your personal and commercial interests in a smarter way.

Insight

Naturally strategic, we’re able to see the bigger picture, solve problems and realise opportunities more effectively.

Agility

Always responsive, with a solutions orientated mindset, we get to the heart of the matter fast, enabling you to reach positive outcomes more quickly.

Meet the team

Read profile

Jonathan Heskia

Director
01865 501018
Carol Shaw, Employment, SE-Solicitors
Read profile

Carol Shaw

Director
01865 561021

Get expert data protection advice today

Whether you need support with compliance, governance or responding to an incident, our data protection team is here to help. Contact us to speak with a specialist and get practical, tailored advice that helps you cut through the complexity and move forward with confidence.

Our client testimonials

“The attention to detail and services provided are exceptional. The practice is modern in its billing, has exceptional communications with its clients and demonstrates continuously a major understanding of legal requirements specific to each client.”
Client, The Legal 500 Review 2023
“Personal service and attention to detail. John Spratt stands out as a truly attentive and knowledgeable partner as well as owner.”
Client, The Legal 500 Review 2023
“Overall SE-Solicitors offers top London firm advice and assistance at county cost. They have the ability in-house to cover most situations and do so with transparency and tenacity.”
Client, The Legal 500 Review 2023
“My most recent experience is with John Spratt, very approachable and knowledgeable, always able to identify the support he may need on an issue from his team and brings them to the table if required.”
Client, The Legal 500 Review 2023
“The team adopts a balanced and proportionate approach to their work. John Spratt, Catherine O’Riordan and Hitendra Patel in particular stand out from their competitors. They always respond in a timely manner and provide exceptional legal advice viewed through a commercially pragmatic lens.”
Client, The Legal 500 Review 2023
“John Spratt – commercially savvy legal advice. Wealth of experience. Desire to continuing to perform at a high level for his clients. Hitendra Patel – calm, considered and composed.”
Client, The Legal 500 Review 2023
“Superb service from this company, really felt in safe hands from day one. Real attention to detail and from dedicated people. Highly recommend.”
Client, The Legal 500 Review 2023
“Having dealt with SE-Solicitors for many years they know and understand our business and that is a key benefit for us as when we need legal advice and guidance they can provide it in context for our business – it is like having an in-house legal team.”
Client, The Legal 500 Review 2023
“SE professionals experts in there field from the first contact . Big thanks to Hitendra and Chelsea and all the team for there dedication and support to close our merger deal right up to the dead line . A very stressful process Hitendra smoothly guided us through the stages to completion Would recommend the team of experts at SE to get your deals completed on budget and on Time .”
Robert Miller – Client 2023
“SE-Solicitors are our go-to firm and trusted partners over many years. We very much value direct access to senior lawyers that are more than willing to provide frank and invaluable advice that helps us get things done. Efficient and extremely knowledgeable, they provide advice on potential pitfalls and solutions to mitigate them.”
Client, The Legal 500 2024
“We have worked very closely with Andrew Woods and Andrew Querelle on complex matters for several years. Both are highly efficient and knowledgeable – they get things done. With SE-Solicitors we don’t have to hold on the telephone, in a queue to be put through to the wrong person – we call through and they answer. The firm delivers!”
The Legal 500, 2024
“Hitendra Patel was the partner in charge. I have dealt with numerous corporate partners in large London firms over the years and no one comes close to his ability, intellect, commercial acumen and work ethic. He is a very humble, calm, soft spoken but determined individual who will fight your corner with rational and commercial arguments with great success.”
Client, The Legal 500 2024
“Many times in the last 3 months you have been the reason I have carried on with this messy and many times petty agreement. You have always been quick and to the point and so much better than the buyer’s solicitor. I’m sure I will been SE again but definitely not for one of these! “
Client 2023
“After 30 years of running my own company I was approached by a larger group that wanted to buy me out. The whole process of selling your life’s work is in itself hard work. I certainly couldn’t have achieved the results I did without the knowledge, experience, care and support that SE Solicitors provided me. The actual Share Purchase Agreement was a 90 page document and I’m very pleased I had such a great team checking through it. Hitendra kept me very much in the loop with what was happening and was always available to go through any concerns. The sale went through and I’m extremely grateful to Hitendra and his team for the high quality advice, support and service they provided to me. “
Client 2024 – Business Sale

Recent Data Protection Posts

ICO Consultation on Data Protection Complaint Handling

ICO Consultation on Data Protection Complaint Handling

26 Sep 2025

The Information Commissioner’s Office (ICO) is currently consulting on proposed changes to its framework for handling data protection…

Read More
Should you be using Artificial Intelligence (AI) in the workplace?

Should you be using Artificial Intelligence (AI) in the workplace?

11 Jun 2025

According to a recent survey which was commissioned by ACAS, more than a third of employers think that AI will increase productivity.  In…

Read More
Direct marketing: help is at hand!

Direct marketing: help is at hand!

26 Mar 2025

Direct marketing in the UK is regulated by the UK GDPR and the Privacy and Electronic Communication Regulations (PECR). The consequences…

Read More
Don’t forget about data protection!

Don’t forget about data protection!

16 Jan 2025

The Information Commissioner’s Office (ICO) is encouraging those launching new business ventures in 2025 to think about data protection…

Read More
We’re watching you!

We’re watching you!

8 Nov 2021

There are a number of reasons why a business may decide to use CCTV, including the security of its premises and the safety of employees…

Read More
A path of destruction

A path of destruction

27 Oct 2021

The Information Commissioner’s Office has published some useful guidance on the destruction of personal data. It is a key requirement of…

Read More
selling a business

Data Protection Update

26 Nov 2019

Accountability Toolkit The General Data Protection Regulation [GDPR] introduced an accountability principle so data controllers are required to handle personal data appropriately and effectively and are able to show this through their practices and procedures. The Information Commissioner’s Office (ICO) has announced that it intends to launch an accountability toolkit in 2020 to help organisations […]

Read More

FAQs

Your questions answered. Take a look at some our frequently asked questions for more Information.

What is data protection?
Data protection is the legal framework that governs how organisations collect, use and store personal information. It ensures people’s data is handled lawfully, fairly and securely.
What is GDPR?
The General Data Protection Regulation (now UK GDPR) is the core legal framework that governs how organisations handle personal data. Together with the Data Protection Act 2018 and subsequent related statutes such as the Data (Use and Access) Act 2025, it sets out the rules for collecting, using, storing and sharing information, and requires organisations to be transparent, secure and accountable in the way they process data.
What issues could I face under privacy law?
Organisations can run into problems if they fail to respond properly to rights requests, don’t report data breaches on time, rely on the wrong lawful basis or move data outside the UK without the right safeguards. These mistakes can lead to regulatory scrutiny, financial penalties, compensation claims and damage to trust.
How does data protection apply to employee information?
Employers must handle staff data lawfully and transparently, provide clear privacy notices, limit access to sensitive information, manage retention periods and ensure any monitoring is proportionate. Employees also have rights to access, correct or object to the use of their data.
How can SE-Solicitors help protect our business data?
SE‑Solicitors protects your business data by strengthening your compliance, tightening your processes and guiding you through risks with tailored advice and personal support. Our data protection solicitors help you build a resilient data protection framework and stay ahead of developments like AI regulation. And if an issue arises, from a breach to a data subject access request, you get fast, strategic support to safeguard your organisation.