palmers solicitors in Bedfordshire Menu solicitors in Bedford

Privacy Notice

General Data Protection Regulation (“GDPR”)

INTRODUCTION

This policy sets out the obligations of our firm in relation to clients whose personal data we use, including our obligations in respect of the way in which we process, store and protect client data, pursuant to the contract for services which you entered into with us/intend to enter into with us.

We actively ensure that the necessary steps are taken to protect the privacy of our clients in all their dealings with us. We believe that our approach complies with the UK national laws and requirements for user privacy. The Data Controller is Yagnesh Shah.

WHAT PERSONAL DATA DO WE HOLD?

We hold only such personal data (name, address, telephone numbers, email, bank and credit card account numbers, pension details, property details, accountants’ details, independent financial advisors, mortgage advisors and contact details of any family members) as provided to us by clients where required for the efficient management of their case. We also hold accounts and billing information in connection with payment of our fees.

We will or may use this information to manage and progress clients’ matters in accordance with our retainer. We do not issue marketing material and do not engage in marketing activities. We will ensure that all personal information supplied is held securely.

Where you have provided telephone, fax or email details to us, we will assume that you consent to us using those methods when we need to contact you.

We do not ‘buy’ information about our clients or potential clients. Nor do we use social media to gather data, nor use your location data if you access our website from your smartphone.

HOW DO WE OBTAIN PERSONAL DATA?

We obtain personal data about our clients in a number of ways, but initially from clients themselves. We may, with clients’ consent, also obtain data from a client’s family or persons instructed by them such as their accountant or mortgage advisor/independent financial advisor or doctor, but we also obtain information from opponents or their solicitors. We may also obtain information for the purposes of our retainer from information in the public domain such as Companies House, local authority planning departments, the Land Registry and information otherwise freely available on the internet.

We do not use tracking cookies on our website.

HOW DO WE LOOK AFTER YOUR PERSONAL DATA?

We have appropriate security measures to prevent personal data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

HOW LONG YOUR PERSONAL DATA WILL BE KEPT

We will keep your personal data after we have finished advising or acting for you. We will do so for one of these reasons:

We will not retain your data for longer than necessary for the purposes set out in this policy.

HOW DO WE USE PERSONAL DATA?

We will use, or may use, your personal data to issue on your behalf any court proceedings you make and any other instructions you give through us; to maintain an up to date record of your cases with us; to ensure that our client records of you and your assets are accurate and up to date. Our permitted range of uses is recorded on, and available for inspection at the Information Commissioner’s Office register.

We will ensure that all personal information supplied is held securely, and in accordance with the GDPR.

Data will be disclosed in accordance with your instructions and our retainer, to third parties, such as but not limited to, opponent solicitors, mediators, your barrister, a jointly instructed expert (jointly with the opponent), the Court and our accountant (where an audit is required). Other possible disclosure may be required to the Law Society, the Solicitors Regulation Authority and HMRC, our professional indemnity advisors or as otherwise required by law. We do not send marketing emails.

WHAT ARE YOUR RIGHTS?

You have the following rights, which you can exercise free of charge:


Access

The right to be provided with a copy of your personal data

Rectification

The right to require us to correct any mistakes in your personal data

To be forgotten

The right to require us to delete your personal data—in certain situations

Restriction of processing

The right to require us to restrict processing of your personal data—in certain circumstances, eg if you contest the accuracy of the data

Data portability

The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations

To object

The right to object:
—at any time to your personal data being processed for direct marketing (including profiling);
—in certain other situations to our continued processing of your personal data, eg processing carried out for the purpose of our legitimate interests.

Not to be subject to automated individual decision-making

The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you

Please contact our Data Protection Officer who is Yagnesh Shah at Palmers Solicitors LLP, PO Box 455, Hassett House, Hassett Street, Bedford, MK40 1WG or telephone 01234 211161, if you have any questions about this privacy policy or the information we hold about you. Our security procedures mean that we may request proof of identity before we reveal that information to you.

We may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

You are free to close your relationship with us at any time. However, we may retain archived copies of your information as required by law or for legitimate business purposes.

Version: February 2019