Privacy Statement
Last updated: 1 October 2026
This statement explains how Lalloo Solicitors handles personal information collected through Injured.ie and initial enquiries to the practice.
Who is responsible for your information?
Injured.ie is operated by Dalippe Lalloo, sole practitioner practising as Lalloo Solicitors. Dalippe Lalloo is the data controller.
For privacy enquiries or to exercise your rights, contact:
- Address: Alexandra House, 3 Ballsbridge Park, Dublin 4, D04 C7H2
- Email: info@injured.ie
- Telephone: (01) 664 1800
Information collected
When you contact us, we receive the details you provide, such as your name, telephone number, email address and an outline of your enquiry. Website enquiries are sent to our practice email address. An enquiry about an injury may include health information or details about other people.
Please give enough information for us to understand your enquiry, but avoid sending detailed medical records, identity documents or unnecessary information about other people through an initial website form. We can discuss the information needed for your matter directly.
Providing enquiry details is voluntary. Without enough information to understand your request and a way to contact you, we may be unable to respond.
The website and its service providers also receive technical information, including IP addresses, browser and device information, requested pages and security or email-delivery records. Optional analytics and advertising can collect additional information about visits and interactions when you consent.
Why we use information
- Responding to your enquiry and providing requested legal services: necessary steps at your request before entering a contract, or performing our contract with you (GDPR Article 6(1)(b)).
- Operating and protecting the website and practice: our legitimate interests in providing website functions, preventing abuse, maintaining security and handling disputes (Article 6(1)(f)), where those interests are not overridden by your rights.
- Meeting legal obligations: where processing is required by an applicable legal duty, such as relevant professional or statutory record-keeping requirements (Article 6(1)(c)).
- Optional analytics and advertising: your consent (Article 6(1)(a)). You can withdraw it through Cookie settings.
Where health information is necessary for establishing, exercising or defending a legal claim, Article 9(2)(f) provides the additional condition for processing that information, alongside the relevant Article 6 basis above.
We do not use website enquiries for newsletters or other marketing. Simply visiting this website or reading this statement does not give consent to optional tracking.
Who receives information?
Dalippe Lalloo handles enquiries to the practice. Service providers supporting website hosting, email delivery, security, maintenance and backups process information needed for those services. Hostinger supplies the website hosting and the configured outgoing email service.
The website also uses Google services and Trustindex review displays. These external features receive technical information when your browser connects to them. The translation feature and form spam protection also involve external services.
If you instruct us, handling your matter may require relevant information to be provided to recipients such as medical experts, insurers, the Injuries Resolution Board, other legal representatives or the courts. Disclosure depends on the work required for your matter and applicable legal duties.
Cookies and your choices
The “Your cookie choices” banner offers Accept all, Reject optional and Manage preferences. Optional analytics and advertising are off until accepted. You can change your choices using Cookie settings on the website. Your saved cookie choice expires after 180 days.
The optional tracking setup uses Google Analytics 4 and Google advertising tags managed through Google Tag Manager. Analytics measures website use; advertising tags support advertising measurement. Rejecting these options does not prevent you from making an enquiry.
Reject optional does not stop every connection to an external service. Embedded Google Maps, the review display and its images, translation and form-protection services are not controlled by the analytics and advertising choices. When these features load or are used, their providers can receive information such as your IP address and browser details. They may also use cookies or similar technologies under their own policies.
Further provider information is available in Google’s Privacy Policy and the Trustindex Privacy Policy.
How long information is kept
Our policy is that unsuccessful enquiries are not retained. Website email-delivery logs are automatically removed after 30 days. This cleanup does not delete copies already delivered to a mailbox or included in a backup.
Client files are retained in accordance with applicable legal obligations and Law Society guidance. The period depends on the nature of the matter, relevant limitation periods, the client’s age and any continuing proceedings, complaint or legal claim. There is not one retention period that applies to every file.
Our retention policy is to determine the retention of technical and security records by the time needed to operate and protect the website, investigate incidents or resolve a dispute. For analytics and advertising records, our retention policy uses the measurement purpose for which consent was given and the relevant service’s retention settings. Deleting a live record does not necessarily remove copies already contained in recovery backups.
You can contact us for the retention period or criteria applicable to your information.
Processing outside the European Economic Area
Some providers process information outside the European Economic Area. Google publishes its international transfer safeguards, including the EU–US Data Privacy Framework and standard contractual clauses where applicable. Hostinger describes its transfer arrangements and standard contractual clauses in its Data Processing Agreement. Contact us for further information about safeguards relevant to your data.
Your rights
Depending on the circumstances, you can request access to your information, correction, erasure or restriction, object to processing based on legitimate interests, or request data portability. These rights are subject to the conditions and exceptions in data protection law, including obligations to retain information and the need to establish, exercise or defend legal claims.
Where processing relies on consent, you can withdraw it at any time. Withdrawal does not affect processing lawfully carried out before withdrawal.
Contact info@injured.ie to make a request. We may need proportionate information to verify your identity. We normally respond within one month; where the law permits an extension, we will explain it within that first month.
You can also raise a concern with Ireland’s Data Protection Commission.