The UK’s General Data Protection Regulations (UK GDPR) and the UK Data Protection Act 2018 both apply from 25th May 2018.
We are sending you this privacy notice to ensure transparency regarding our client data in terms of what information is held, how it is stored, why we hold it, and what we do with it. This notice tells you what we do with your personal information when you make contact with us or use one of our services
In providing you with legal advice, we will process and store your personal information, which may include special category data such as health details. We have legal and professional obligations to keep your personal information and special category data confidential. We comply with UK and EU data protection laws and with the Solicitors Regulation Authority rules on client and data confidentiality.
We are committed to keeping your personal information secure. We have put in place physical, electronic and operational policies and procedures designed to safeguard and to secure the information we collect and hold.
The information we hold about you may include personal information and special category data. It will typically include:
We do not provide services directly to children or proactively collect their personal information. However, we are sometimes given information about children while handling a matter. The information in the relevant parts of this notice applies to children as well as adults.
The data we hold will have come from:
It is very important to ensure that we hold up to date information, so please remember to tell us about any of the following as soon as possible:
We may share information about you:
This may involve them handling your personal information. The firm requires all third parties to sign a confidentiality and compliance document to confirm that your data is protected.
Please note that we will never sell your data to anyone.
The legal bases we rely on to process your personal data are as follows:
If the information you provide us contains special category data, such as health, religious or ethnic information the legal basis in GDPR we rely on to process it is:
Under data protection law, we need to tell you about your rights. Those available to you depend on our reason for processing your information.
We will keep your information for only as long as necessary and in accordance with UK and EU law. The Money Laundering Regulations 2017 require us to keep evidence of your identity, with supporting documentation, for 5 years after we complete our work for you.
We work to high standards when it comes to processing your personal information. If you have queries or concerns, please contact Gilva Tisshaw (who is responsible for Data Protection at our firm) at gilva.tisshaw@tisshawssolicitors.co.uk and we’ll investigate and respond in accordance with our complaints procedure.
If you remain dissatisfied, you can complain about the way we process your personal information to the Information Commissioner. You should do this within three months of our response.
You can contact the Information Commissioner’s Office at:
By phone: 0303 123 1113 or 01625 545745
By email or live chat on the ICO website:
https://ico.org.uk/make-a-complaint/your-personal-information-concerns/
By post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
You should also write to Gilva Tisshaw at gilva.tisshaw@tisshawssolicitors.co.uk if you would like a copy of the personal information we hold about you, or to ask us to correct any inaccurate information, or to remove (where justified) your personal information from our records.