Privacy Policy

How we collect, use and protect your personal information.

Privacy Policy

Last updated: 14 May 2026

1. Who We Are

CTM Tax Litigation Limited ("CTM", "we", "us", "our") is a specialist tax disputes practice registered in England and Wales. We provide legal and advisory services in connection with HMRC investigations, VAT disputes, tax tribunal appeals and related matters.

CTM Tax Litigation Limited is the data controller for personal information collected through this website. This means we are responsible for deciding how and why your personal data is processed.

2. Scope of This Policy

This privacy policy applies to all personal data collected through:

  • our website at www.ctmlaw.co.uk
  • our contact form and email enquiries
  • telephone consultations initiated through the website

This policy does not cover personal data processed in connection with the provision of our professional services to clients. That processing is governed by our client engagement terms and applicable professional obligations.

3. What Personal Data We Collect

3.1 Information You Provide Directly

When you contact us through our website or by email, we may collect:

  • your full name
  • email address
  • telephone number
  • your preferred CTM branch location
  • the content of your message or enquiry
  • any other information you choose to provide

3.2 Information Collected Automatically

When you visit our website, certain technical information is collected automatically:

  • Device and browser information: browser type and version, operating system, screen resolution, device type (desktop, tablet, mobile)
  • Usage data: pages visited, time spent on pages, navigation path through the site, referring website or search terms
  • Network information: IP address (anonymised where possible), approximate geographic location derived from IP address
  • Cookies and similar technologies: small text files stored on your device. See our Cookie Policy for full details

3.3 Information from Third-Party Services

  • Google Analytics: collects anonymised usage data to help us understand how visitors interact with our site. Google Analytics uses cookies to distinguish unique users and throttle request rates. Data is processed by Google in accordance with their Privacy Policy.
  • Google Ads: conversion tracking data may be collected when you interact with our site after clicking an advertisement. This helps us measure the effectiveness of advertising but does not identify you personally.
  • Cloudflare Turnstile: collects technical data (browser characteristics, interaction patterns) to verify that form submissions are made by humans rather than automated bots. See Cloudflare's Privacy Policy.
  • OpenStreetMap: map tiles displayed on our contact page are loaded from OpenStreetMap servers, which may log your IP address. See OpenStreetMap's Privacy Policy.

4. Why We Collect Your Data and Our Legal Basis

Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis for processing your personal data. The table below sets out the purposes for which we process personal data and the corresponding legal basis:

Purpose Data Used Legal Basis
Responding to your enquiry Name, email, phone, message, branch Legitimate interest (responding to a request you have initiated)
Providing an initial consultation Name, contact details, details of your matter Legitimate interest; pre-contractual steps taken at your request
Website analytics and improvement Anonymised usage data, device info Consent (via cookie banner) for analytics cookies; legitimate interest for aggregated, non-identifying analysis
Advertising measurement Conversion tracking data Consent (via cookie banner)
Security and spam prevention Technical browser data (Cloudflare Turnstile) Legitimate interest (protecting website and users from abuse)
Displaying maps IP address (by OpenStreetMap tile servers) Legitimate interest (providing a functional contact page)
Legal and regulatory compliance As required Legal obligation

5. How We Use Your Data

We use personal information to respond to enquiries, assess potential instructions, communicate regarding services, improve website functionality, maintain security and comply with legal or regulatory obligations.

6. Retention Periods

Website enquiries are generally retained for up to two years unless the individual becomes a client. Client records are retained in accordance with professional obligations and engagement terms, typically for at least six years following completion of the matter.

7. Data Sharing

We do not sell or trade personal data. Information may be shared with hosting providers, analytics providers, professional advisers, counsel, forensic specialists or legal authorities where necessary and appropriate.

8. International Transfers

Certain service providers may process data outside the United Kingdom. Where applicable, appropriate safeguards are implemented including adequacy decisions and Standard Contractual Clauses.

9. Security

We use encrypted connections, secure hosting infrastructure, access controls and organisational safeguards to protect personal data against unauthorised access, disclosure or misuse.

10. Data Protection Rights

Individuals may have rights under UK GDPR including rights of access, rectification, erasure, restriction, objection and data portability. Requests may be directed to enquiry@ctmlaw.co.uk.

11. Complaints

Complaints may be raised directly with CTM or with the Information Commissioner's Office (ICO).

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

12. Contact

© 2026 CTM Tax Litigation Limited. All rights reserved.

Back to top