Charles French & Co Limited trading as Charles French & Co Solicitors (“we” or “us”) is committed to protecting your personal information and privacy.
This policy sets out details of the personal information that we may collect from you and how we use it. We must collect and use your personal information in accordance with the Data Protection Act 1998 (DPA) and the General Data Protection Regulation (GDPR).
1 What personal information do we collect and use?
1.1 Personal Data
1.2 Information to include;
- Identity Data including names, address, marital status, date of birth, gender
- Contact Data including telephone numbers, email address
- Financial Data including bank account and card payment details
- IP Address and Cookies
1.3 Sensitive Data
Depending on the nature of the services we provide to you we may need to collect sensitive date to include information relating to race or ethnic origin, religious beliefs, criminal convictions and sexual orientation.
If you fail to provide personal information where it is required by law or under the terms of any engagement with us we will not be able to provide any service or give you any advice.
2 How do we collect your personal information?
We collect information from a number of different sources including;
- Our website
- Engagement of our services
- Communication including telephone calls, meetings, written correspondence and emails
- Job Applications
3 How do we use your personal information?
We will process your personal information in accordance with GDPR on the following lawful basis;
- With your consent
- To identify you when you instruct us to provide our services to you
- To provide information to you about our services where you have consented to be contacted
- To carry out our obligations to you under an engagement of our services
- To comply with a legal obligation
- To comply with public interest or official authority
- It is in our legitimate interests to use your personal information
4 Do we share your personal information with anyone else?
We will not share your personal information except where disclosure is required or permitted by law or where we use third party service providers (data processors) to supply and support our services to you. Data providers include;
- Email Provider
- Wi Fi Provider
- IT Support
- Courts and Tribunals
- Barristers, solicitors and legal advisors acting on the other side of your matter
- HM Revenue and Customs and the Land Registry
- Solicitors Regulatory Authority
- Our Professional Indemnity Insurer
- Accountants and Auditors
- Card Payment Provider
- ID Verification Provider
We do not share personal information with any third party for marketing purposes
5 Your rights
Your rights under GDPR are;
5.1 The right to be informed-you have the right to be informed of the personal information that we will collect, process and hold.
5.2 The right of access- you can find out what personal information we hold for you by making a “subject access request” under the DPA and GDPR. We will respond in writing to you within 1 month of your request. To make a request for personal information please write to us at the address given below in “How to contact us”. To process your request you will need to provide identification to verify who you are so we can access your data. If we hold personal information for you we will confirm the type of information we hold, how it is being processed, whether it has been or will be disclosed to a third party and will provide a copy of the information if requested. We do not charge for providing you with a copy of your personal information but we may make a charge if your request is unfounded repetitive or excessive.
5.3 The right to rectification- you can amend or update your personal information by making a request to us in writing. To rectify your data please write to us at address given below in “How to contact us”.
5.4 The right to erasure- you have the right in certain circumstances to have your personal data erased when it is no longer required for the purposes for which it was collected ; you withdrawal your consent or objects to the processing of your data or where the processing of your data does not otherwise comply with the GDPR. To make a request for your personal data to be erased please write to us at the address given below in “How to contact us”. Please note the right to erasure does not apply where there is a lawful reason for continued processing including the establishment.
5.5 The right to restrict processing- you have the right to restrict processing where the accuracy of the data is contested and is being verified; where processing of data is unlawful; where the data is no longer required for the purpose it was collected but is needed to be retained for the establishment, exercise or defence of a legal claim. To make a request to restrict processing please write to us at the address given below in “How to contact us”. Please note if you make a request to restrict processing any period necessary for us to establish legitimate grounds for processing will take precedence.
5.6 The right to data portability- you have the right to request that we transfer any personal information that you have provided to us to a third party of your choice. To transfer your data please write to us at the address given below in “How to contact us”. To process your request you will need to provide identification to verify who you are.
5.7 The right to object- you have the right to object to certain types of processing including direct marketing; processing for scientific, historical or statistical purposes, processing carried out in the public interest or the exercise of official authority. If you wish to object please write to us at the address given below in “How to contact us”. To process your objection you will need to provide identification to verify who you are.
5.8 The right not to be subject to automated decision making and profiling- we do not use automated decision making.
6 How long will we keep your personal information for?
We will keep your personal information for as long as is necessary to fulfil the purposes for which it was collected including legal, accounting and reporting requirements. We are also required to retain information in accordance with time period prescribed by the Solicitors Regulatory Authority.
You have the right to complain about how we process your personal information. If you have a complaint please contact us using the contact details provided in “How to contact us”. You also have the right to complain to the Information Commissions Office www.ico.org.uk
8 How to contact us
Charles French & Co Limited is the Data Controller.
You can write to – Charles French at Charles French & Co Solicitors 25 Cliff Road Newquay Cornwall TR7 2 NE
Telephone- 01637 818415
Charles French & Co
23 May 2018