Privacy Policy

Legal framework for protecting your personal data

This data privacy policy explains why Bar Mutual Indemnity Fund Limited (“Bar Mutual”) collects personal data, what personal data it collects and what use the data is put to.  Bar Mutual outsources management of its operations to a subsidiary company of Thomas Miller Holdings Ltd, Bar Mutual Management Company.  This privacy policy is therefore issued on behalf of Bar Mutual, Bar Mutual Management Company and Thomas Miller Holdings Ltd (collectively referred to in this privacy policy as “We” or “Our”), who act as joint data controllers.  Additionally, Bar Mutual Management Company and Thomas Miller Holdings Ltd are both also Data Processors.

A data protection officer (“DPO”) has been appointed and, accordingly, if you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the DPO using the details provided below. 

Data Controller

Name: Bar Mutual Indemnity Fund Ltd, Bar Mutual Management Company and Thomas Miller Holdings Ltd
Phone: +44 (0)207 283 4646
Address: 90 Fenchurch Street London EC3M 4ST United Kingdom

Data Protection Officer

Name: Jim Ashton
Phone: +44 (0)207 204 2545
Address: 90 Fenchurch Street London EC3M 4ST United Kingdom

The personal data We collect about you

Personal data means any information about an individual from which that person can be identified.  It does not, however, include anonymous data.

We require your personal data in order to engage in pre-contractual communication with you, to meet Our contractual obligations to you and to engage in post contractual communication with you.  Your personal data enables us to underwrite your policy of insurance with Bar Mutual and to process claims made under the terms of the policy of insurance.  Without this data We would not be able to communicate with you or enter into a contractual agreement with you.

We may collect, use and store the following categories of personal data about you:

  • Identity Data.  This includes your name and title.
  • Contact Data.  This includes your business address, your email address and your telephone number(s).  In very limited circumstances (mostly in the case of retired barristers) we may also store your home address.
  • Financial Data.  This includes the fee income declared for the purposes of first purchasing from or renewing insurance with Bar Mutual.
  • Claims Data.  This includes the details of any Claims or Complaints notified pursuant to the provisions of the insurance contract with Bar Mutual (Claims Notifications).

Aggregated data may be derived from your personal data but it is not considered to be personal data as this data does not directly or indirectly reveal your identity.

Although We may therefore collect, use and share aggregated data - such as statistical data in relation to earnings or Claims Notifications - Bar Mutual’s Rules impose strict limits on the use of your personal data, especially your financial data. Accordingly, We only share aggregated data to the extent permissible by Bar Mutual’s Rules. 

If We combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, We treat the combined data as personal data which will be handled in accordance with this privacy notice.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic or biometric data). 

How We use your personal data  

We will only use your personal data to:

  • enter into, or perform, a contract with you;
  • deal with Claims Notifications;
  • comply with a legal, regulatory or contractual duty;
  • enable bilateral communications;

We do not generally rely on consent as a legal basis for processing your personal data.

The following table describes the ways We could use your personal data, and which of the legal bases We rely on to do so.  We have also identified what our legitimate interests are, where it is appropriate to do so.

PurposeType of dataLawful basis for processing including legitimate interest
To register you as a new member of Bar Mutual(a) identity (b) contact (c) financial Enter into a contract
To renew your membership of Bar Mutual (a) identity (b) contact (c) financial Enter into and performance of a contract
To provide run-off insurance (a) identity (b) contact (c) financialEnter into and performance of a contract
To perform the contract of insurance(a) identity (b) contact (c) personal and special category data (including that of third parties) 

Performance of a contract.

Necessary for our legitimate interest in investigating and handling Claims Notification.

Automated decision making

We do not use automated decision making.

Sharing your personal data with others

We sometimes need to share the personal information We collect and process with other organisations.  Below is a list of the parties with whom we may need to share some of your data:

  1. Insurance and reinsurance brokers;
  2. Top up brokers and underwriters;
  3. Premium Credit Limited (for optional finance arrangements. Read their privacy notice);
  4. The Bar Standards Board;
  5. The Bar Council;
  6. Courts and tribunals;
  7. Law enforcement and prosecuting authorities;
  8. Ombudsman and regulatory authorities;
  9. Professional advisers.

The countries where personal data will be stored, processed and transferred

The personal data We collect will be stored and processed in the United Kingdom.  Should We need to transfer your personal data to any other country (for example, in order to instruct professional advisers to defend a Claim Notification) We will take all reasonable measures to safeguard the transfer of your personal data in a manner that complies with the GDPR.

How long the data will be retained

Retention of specific records may be necessary for one or more of the following reasons:

  1. To fulfil statutory or other regulatory requirements;
  2. To evidence events/agreements in case of disputes;
  3. To meet our operational needs;
  4. To meet any historical purposes.

We do not have a set period for the retention of personal data.  We use data to calculate the premium Bar Mutual charges for providing insurance and in connection with handling claims.  We therefore retain the data for as long as is necessary in order to properly perform these tasks.

Personal data that is collected and subsequently never used for any business purpose will be reviewed and may be destroyed at our discretion.

Your rights

You have rights regarding the personal data we store on your behalf. These are:

  1. access to a copy of your personal data;
  2. object to processing that you object to; 
  3. stop receiving direct marketing material;
  4. object to decisions being taken by automated means;
  5. have inaccurate personal data rectified, blocked, erased or destroyed;
  6. lodge a complaint with the Information Commissioner’s Office;
  7. claim compensation for damages caused by a breach of the GDPR.

Should you ever wish to exercise any of these rights, please contact the Data Protection Officer.

Where we store your personal data

We will take all steps necessary to ensure that your personal data is treated securely and in accordance with this data privacy notice.  All information We are provided with will be stored on Our secure servers protected by data-encryption, with perimeter firewall technology and intrusion protection software. 

Changes to this statement

Our data privacy policy may be updated from time to time and the latest version will always appear on Bar Mutual’s website.

Last modified: 21/05/2018 


a. Cookies may be used by the Website to allow us to recognise you and your preferred settings e.g. to store your ID and password for future sessions. This saves you from re-entering information on return visits to the Website. You have the option not to use this feature, in which event no cookies will be retained on your computer.

b. If the site has a secure log-in for our registered users, it may use a temporary ’session cookie’ in order to perform the secure login to our website. This cookie contains no personal information, just a long random number, and is deleted from your web browser when you exit the Website.

c. Temporary cookies are used in the transactional part of the Website to authenticate you as an authorised user after you have logged in.

d. Your browser may be capable of being programmed to reject cookies, or to warn you before downloading cookies, and information regarding this may be found in your browser’s ‘help’ facility.

For an explanation of cookies see:

If you have any questions regarding cookie use, please contact us by email at

Below is a table of all cookies on this website – their name, type and purpose:

Cookie TypeCookie Name Cookie Purpose
Session & TYPO3 Content Management CookieSession & fe_typo_user & s_sq s_ccWe use session cookies to record an individual users preferences that the user has specified, so that each time the user returns their preferences remain. Commonly this would be language settings, shopping carts, anything where you have indicated a preference. Where forms are used on the site, we hold the information in a session cookie so that we can improve the user experience on the site. Should a user, for example, forget to fill in parts of a form when submitting a form, we can auto-fill the values for those fields that have been filled in, thereby reducing the amount of fields a user needs to amend. This information is stored only in your browser and is destroyed once your browser is closed.
Google Analytics__utmz __utmc __utmb __utmaThese cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site for you. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.

We use third party companies as suppliers for some of our functions. Their use of the data is controlled by our contract with them and they are only allowed to use the data strictly for the purpose we have stated e.g. the data is not used in connection with data from other companies and we are not tracking user behavior outside our own sites. 

Other Websites

This privacy policy only covers the Website. Any other websites which may be linked to by the Website may be subject to their own privacy policy, which may differ from ours and we are not responsible for the content provided on any third party websites.

You are currently offline. Some pages or content may fail to load.