Subject access requests
A subject access request has landed
We check the deadline, scope the search and prepare a response that discloses what it should and withholds what it can.
Our data protection solicitors turn UK GDPR into practical steps for your business: privacy notices, data processing agreements, subject access requests and breach response, handled by a solicitor who knows how you operate.
Book a complimentary consultation
A short call with one of our founders about your business and your legal priorities. We reply within one business day.
Most UK GDPR problems don't start with a breach. They start with a contract, a customer email or a new tool. These are the ones we see most weeks at Lawyerly.
Subject access requests
We check the deadline, scope the search and prepare a response that discloses what it should and withholds what it can.
Data processing agreements
We review or draft the Data Processing Agreement, check the transfer terms and make sure you are not taking on liability that belongs to the other side.
Data breach response
We help you contain it, decide within 72 hours whether the ICO needs to know, and handle the notification and the people affected.
data protection solutions
Data protection is not a one-off project. Every new hire, supplier, marketing campaign and software tool changes what personal data you hold and why. We build a compliance position that fits the size of your business, then keep it current as you grow.
When something does go wrong, whether that is a complaint, an access request or a breach, you already have a solicitor who knows your data and can act the same day.
Book a complimentary consultation
A short call with one of our founders about your business and your legal priorities. We reply within one business day.
We map what personal data you hold, where it flows and which lawful basis you rely on, then set out the gaps in a plain, prioritised list.
Privacy notices, cookie policies, data processing agreements, retention schedules and staff data policies, drafted for how your business actually works rather than downloaded from a template.
We handle subject access requests, erasure requests and complaints on your behalf, and manage ICO notifications and communications with affected individuals if a breach occurs.
With Lawyerly, it stops being a worry, and becomes an advantage.
We pair you with one of our qualified solicitors whose expertise and experience fits your business.
Work with your legal professional through our online Client Hub. Wherever you are, whenever you need us.
Pay a monthly subscription or a fixed fee for one-off work. The price is always agreed before we start.
Our commercial solicitors have worked at top-tier law firms and global legal departments, the kind of senior legal team most SMEs can't justify building in-house.
Legal Service Director
Read profile
Legal Service Director
SRA No. 634623
Patricia is a corporate and commercial solicitor whose practice centres on mergers and acquisitions, early-stage investment rounds, particularly angel and pre-seed, and the commercial agreements that underpin high-growth businesses. She trained at DLA Piper and has since held a series of in-house counsel roles, advising FTSE 100 companies, public bodies and private clients.
As Legal Service Director at Lawyerly, Patricia leads service delivery for a client base weighted towards technology and AI. She takes founders and investors through funding rounds, structures acquisitions, and negotiates the subscription agreements, technology licences and partnership arrangements that scale-ups depend on. Her grounding in data protection, intellectual property and regulatory work means she can run every strand of a technology transaction, keeping it moving and the valuation intact.
Qualifications
LLB (Hons); LPC MSc in Law, Business and Management
Senior Commercial Solicitor
Read profile
Senior Commercial Solicitor
SRA No. 576972
James is a commercial and corporate solicitor whose practice centres on commercial contracts, technology and intellectual property, and disputes. He practised at Pinsent Masons and EY Law and in a series of in-house roles, leading SaaS and software licensing negotiations, due diligence on acquisitions, and commercial litigation on high-value matters with international parties.
As Commercial Solicitor at Lawyerly, James brings that range to growing businesses that want advice of that standard without the apparatus of a traditional firm. He negotiates and manages contracts, advises on technology and intellectual property, and helps clients head off the disputes that derail growth. His particular strength in contract management and technology law means he can tighten a company's commercial framework and reduce its legal risk as it scales.
Qualifications
LLB (Hons); LPC (Commendation)
Senior Commercial Solicitor
Read profile
Senior Commercial Solicitor
SRA No. 642591
Isabelle is a corporate and commercial solicitor with seven years' post-qualification experience across private practice and in-house roles.
She trained and qualified at Nelsons, where she advised owner-managed businesses, management teams and investors on share and asset sales, acquisitions and reorganisations. She was named the Law Society's Junior Lawyer of the Year in 2020. She then joined Shoosmiths, working on domestic and cross-border M&A, private equity and restructuring transactions.
Isabelle later moved in-house, first with a private lender and then with a large transport group. There she advised on technology and SaaS agreements, procurement, data protection, governance and finance matters.
At Lawyerly, Isabelle advises clients across commercial and corporate matters. She is known for clear, practical advice that weighs legal risk against the commercial objective.
Qualifications
LLB (Hons); LPC
Co-Founder and Director
Read profile
Co-Founder and Director
SRA No. 7808039
Jackie has spent twenty years working on how legal services reach the people and businesses that need them. Before co-founding Lawyerly she built and led one of Africa's largest alternative legal organisations, growing it to more than 300 people serving 100,000 clients, and her work there was recognised in legal services, technology, innovation and dispute resolution. She holds a PhD, awarded with distinction, and has been named among the top five women in legal technology.
At Lawyerly she is responsible for the firm's strategic direction. Her starting point has not changed in two decades: the law should work for the people who use it, rather than the other way round. That view shapes how Lawyerly is run, from how services are priced to how matters are staffed.
Qualifications
LLB; MPhil (Cum Laude); PhD (Top Achiever Award); Key Regulatory Compliance Certifications
Co-Founder
Read profile
Co-Founder
Willem co-founded Lawyerly after twenty years of running and advising businesses, most of which were spent as a client of law firms rather than a member of one. He had seen how legal advice tends to arrive: late, priced by the hour, and detached from the commercial decision that prompted it. Lawyerly grew out of a conviction that it could be done differently.
He read law and marketing at university and later completed MIT Sloan's executive programme in artificial intelligence and business strategy. His career before Lawyerly took in two advertising agencies, which he led through the industry's move to digital, several years in digital publishing, and a period in international development, working on programmes across South East Asia and Sub-Saharan Africa.
At Lawyerly he is responsible for growth and for the client experience, ensuring our clients receive the legal support they need.
Qualifications
BA (Law); Executive education in AI and business strategy; Marketing
Commercial Lawyer
Read profile
Commercial Lawyer
SRA No. 7821597
Monique is a commercial lawyer with more than twelve years' experience, most of it at a large alternative legal services provider. Her work has spanned mediation and dispute resolution, corporate governance, contract law and technology law, with particular depth in due diligence on acquisitions, employment law and intellectual property disputes.
At Lawyerly, Monique drafts, reviews and negotiates commercial agreements for UK clients, including services agreements, technology and SaaS contracts, confidentiality agreements and partnership agreements, and advises on transactional, contractual and regulatory matters. She also supports clients on employment, intellectual property, data protection and compliance, working alongside the firm's solicitors.
Qualifications
LLB; Business Risk Management; M&A Due Diligence
Commercial Lawyer
Read profile
Commercial Lawyer
Alexa is a commercial lawyer with more than six years' experience in commercial litigation and commercial practice, at firms specialising in corporate, commercial and dispute resolution work. Her work has spanned contract drafting, litigation, mediation and arbitration, with particular depth in commercial agreements and the management of disputes.
At Lawyerly, Alexa drafts, reviews and negotiates commercial agreements, including services and supplier agreements, shareholders' agreements, franchise agreements and settlement agreements, and advises on transactional, contractual and dispute-related matters, working alongside the firm's solicitors.
Qualifications
LLB; Corporate Law; Commercial and Contract Law; Intellectual Property Law
Co-Founder
Read profile
Co-Founder
SRA No. 7820379
Jan began his career in law before broadening into corporate strategy and technology. He holds a Master's in Corporate Law and an MBA, and later completed a Master's in Applied Data Science, driven by a conviction that the legal profession could do far more with the data it generates. That combination of legal, commercial, and analytical training has shaped a career spent rethinking how legal services are designed and delivered, with a particular focus on projects that use data and digital tools to improve legal processes.
As a director of Lawyerly, Jan is responsible for data and analytics, financial management and strategy, and brings legal grounding, commercial judgement and technical fluency to how the firm is run.
Qualifications
LLB; LLM; MBA; MSc
Answers to the questions we hear most often, on how the subscription works, what it covers and how we charge.
Everything a growing business needs to comply with UK GDPR and the Data Protection Act 2018 without hiring a specialist. That covers auditing what personal data you hold, drafting privacy notices, cookie policies and data processing agreements, advising on lawful bases and international transfers, handling subject access requests and complaints, and managing your response if a breach occurs. Subscribers also get ongoing advice as new tools, suppliers and marketing campaigns come along, which is where most compliance gaps open up.
Data protection support is included in our subscription plans, or you can instruct us on a fixed fee for a one-off piece of work, such as a privacy notice, a DPA review or a full data protection audit. The fee is always agreed before we start, so there is no hourly-rate surprise from us.
Yes. UK GDPR applies to any organisation that processes personal data, whatever its size, and most businesses also have to pay the ICO's data protection fee. Some record-keeping duties are lighter for businesses with fewer than 250 staff, but the core obligations, including a lawful basis for processing, transparency, security and responding to individuals' rights, apply to everyone. For most SMEs, compliance comes down to a handful of well-drafted documents and sensible habits, not a full-time department.
Only in specific cases: public authorities, organisations whose core activities involve large-scale, regular and systematic monitoring of individuals, or large-scale processing of special category or criminal offence data. Most SMEs fall outside those categories, but every business still needs someone accountable for data protection. Many of our clients use us as that point of contact, so they have a solicitor on hand when a question or a request comes in, without paying for a full-time hire.
Within one month of receiving it, which can be extended by up to two further months where requests are complex or numerous. Under the Data (Use and Access) Act 2025 you only need to carry out reasonable and proportionate searches, and the clock pauses while you verify the requester's identity or wait for clarification. We help you scope the search, apply the exemptions properly and get the response out on time, so a routine request does not turn into a complaint to the ICO.
Contain it first, then call us. Not every breach has to be reported, but where there is a risk to individuals the ICO must be notified within 72 hours of you becoming aware, and the people affected must be told without undue delay if that risk is high. We help you assess the risk, decide whether to notify, draft the notification and manage communications with customers and staff, so a bad day does not become a regulatory problem.
A data protection question rarely arrives alone. These are the services our GDPR clients use most.
Drafting and reviewing the agreements you send and the ones you are asked to sign, so that each deal stands on terms that protect the business.
ExploreThe decisions behind hiring, managing and parting with people, advised on by employment solicitors who know how growing businesses are run.
ExploreThe sector rules and the anti-bribery, modern slavery and cyber security obligations a business has to meet, kept in order as it scales.
ExploreLearn how our services can benefit you by scheduling a call with one of our team members.
Book a complimentary consultation
A short call with one of our founders about your business and your legal priorities. We reply within one business day.
Willem van der Merwe
Co-Founder
Read profile
Co-Founder
Willem co-founded Lawyerly after twenty years of running and advising businesses, most of which were spent as a client of law firms rather than a member of one. He had seen how legal advice tends to arrive: late, priced by the hour, and detached from the commercial decision that prompted it. Lawyerly grew out of a conviction that it could be done differently.
He read law and marketing at university and later completed MIT Sloan's executive programme in artificial intelligence and business strategy. His career before Lawyerly took in two advertising agencies, which he led through the industry's move to digital, several years in digital publishing, and a period in international development, working on programmes across South East Asia and Sub-Saharan Africa.
At Lawyerly he is responsible for growth and for the client experience, ensuring our clients receive the legal support they need.
Qualifications
BA (Law); Executive education in AI and business strategy; Marketing