Who We Are
Our office and contact details are at the end of this notice. When we use your personal data we are regulated under the Data Protection Act 2018, and effective 25th May 2018 by the General Data Protection Regulation (“GDPR”) which applies across the European Union (including in the United Kingdom) and we are responsible as ‘controller’ of that personal data for the purposes of the GDPR. We are registered with the Information Commissioners Office (ICO) under registration number ZA244353 Our use of your personal data is subject to your instructions, the Data Protection Act and GDPR, other relevant UK and EU legislation and our professional duty of confidentiality.
Personal data we always collect about you.
Personal data we may collect depending on why you have instructed us
This personal data is required to enable us to provide our service to you. If you do not provide personal data we ask for, it may delay or prevent us from providing services to you.
Special category personal data is defined by GDPR as information relating to race, ethnic origin, politics, religion, trade union membership, criminal convictions, genetics, biometrics (where used for ID purposes), health, sex life or sexual orientation.
Who we share your personal data with
We routinely share personal data with:
We only allow our service providers to handle your personal data if we are satisfied, they take appropriate measures to protect your personal data.
We may also
Where your personal data is held
Information will be held at our offices (see below). Data is also held by our IT provider at premises within the United Kingdom. We do not intend that any of your personal information held by us will be either held or transferred outside of the EU.
How long your personal data will be kept
We will keep your personal data after we have finished acting for you. We will do so for one of these reasons:
We will retain records for
We will not retain your data for longer than necessary for the purposes set out in this policy. Thereafter information in both paper and electronic form will be deleted or destroyed save that we may retain for a longer period basic information (name, address and matter) which is necessary for identifying potential conflicts.
You have the following rights, which you can exercise free of charge:
Access to your personal information and to certain other supplementary information that this Privacy Notice is designed to address;
For further information on each of those rights, including the circumstances in which they apply we would refer you to the Guidance from the UK Information Commissioners Office (ICO) on individuals’ rights under the General Data Protection Regulation.
If you would like to exercise any of those rights, please:
Email, call or write to our Practice Manager — see below: ‘How to contact us’;
How to complain
If you are unhappy about the data we hold, how we use it or about this policy then please contact us with your concerns. We hope that we can resolve any concerns you raise.
The GDPR also gives you right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at