Under the GDPR you are entitled to know why and how we deal with your personal data and what to do if you have concerns.
We process your data to enable us to provide you with legal services. We do not sell your data to third parties. The type of data we process includes, but is not limited to, names, contact details (email, post, telephone), date of birth, national insurance number, financial details.
Under Article 6 of the GDPR, we are entitled to process your data to enable us to perform our contract with you, or at your request prior to entering into a contract with you; and because it is in our legitimate interests to process the data.
Under our rules of professional conduct, we are required to obtain and retain your data to enable us to represent you properly and so that the data is available should there be any query in the future about the work we have carried out for you.
We need to verify your identity to comply with anti-money laundering regulations.
We need to be able to communicate with you, and to process financial transactions.
We may be required to share your data with some third parties:- for example, if we are audited in connection with our Legal Aid contract, or by the Solicitors Regulation Authority, or by our accountants, or by our professional indemnity insurance brokers or insurers, to ensure that our work is of an appropriate standard; or if we store closed files with a third party storage company; or with our computer hardware and software providers. Such third parties also have a duty under GDPR to keep your data secure and not to use it for their own purposes.
Generally speaking, we keep paper files for at least six years after the end of a matter before they are destroyed. We often keep paper files and computer records for longer than this. If after six years you want your data to be destroyed, you can request this and we will reply to your request and will tell you if there is any reason why the data should not or cannot be destroyed.
You can ask us what personal data we hold about you; and to correct any personal data that is wrong; and you can obtain and re-use your personal data for your own purposes.
You can ask us to stop processing your data but we do not have to do so if it is in our legitimate interest to continue.
If you have concerns about the processing of your personal data, please contact the fee-earner who is dealing with your matter. If you continue to have concerns please contact either Mark Woodward, Mary Croft (the partners in the firm) or Carole Johnson (the Compliance Officer for Legal Practice).