This page explains how we collect, process and look after any personal information that we collect about you.
Our status as a data controller
We are responsible for protecting personal information that we collect about you, and we act as a data controller when we use such information. Your “personal information” or “personal data” means any information about you from which you can be identified.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
The site, and our other communications with you, may contain links to other online or mobile sites. We are not responsible and accept no liability for the privacy practices or content of such sites.
Information we may collect about you
We may collect personal information about you in connection with the site in the following circumstances:
♦ When you submit information to us by filling out our contact form on the site, or by using our other contact details found on the site (including our email addresses, telephone numbers and postal address). The information we collect may include: your name, address, email address, phone number and/or other contact details; where you are sending a job or training contract application to us, any personal information contained in your CV and/or application form (and any supplementary information submitted by you, or that we acquire about you during the recruitment process, e.g. from aptitude test results or from your referees); and/or any other personal information you choose to provide to us.
♦ When you use the site generally when you browse the site, we may collect technical information such as your internet protocol (IP) address, operating system or browser software, and information about what you did during your use of the site (e.g. what pages you viewed). Please see our Cookies Policy for further details.
How and why we may use your personal information
However we use your personal data, we make sure that our use complies with lawful bases for using or otherwise processing your personal data. We may rely on one or more of those bases when we process your personal data, and we explain those below.
Information we collect about you through the site
We may use such information for the following purposes and reasons:
♦ When you enquire about our services, to contact you to discuss whether our services may be appropriate for your needs, and whether you would like to engage us to provide those services. Legal basis: consent to respond to your enquiry about our services.
♦ Where appropriate, to respond to any other requests or queries that you may ask when you get in touch with us. Legal basis: your consent to our replying to you and, more generally, because it is also in our legitimate interests that we respond to you appropriately.
♦ Where you apply for a position with us, to assess your suitability for a job position or training contract with us, and (where appropriate) to contact you in relation to those opportunities, and/or to inform any subsequent interviews, discussions or other aspect of our recruitment processes. Legal basis: we use your information in this way because it is a necessary part of our potentially entering an employment contract with you.
♦ If you consent to our doing so, so that we can contact you to let you know about our services, events or legal update newsletters (which you can opt out of at any time by contacting us). Legal basis: consent (unless withdrawn, in which case we will respect your withdrawal of consent).
♦ So that we can understand how people are using the site to help us improve the site’s accessibility and functionality. Legal basis: our legitimate interests (in making sure that our site operates effectively).
Please do not provide us with any personal information if you do not want that information to be used by us in this way.
Information from other sources
We may collect information about you through channels other than the site – for example, if you obtained our contact details from another source, if you met our staff in person, or if your details were provided to us by a third party (e.g. an employer) who gave us your information in the context of us supplying legal services. If so, we will treat your personal information in accordance with this policy.
If you become a client, then we will collect more personal information about you and/or your personnel in the course of providing our services (such as requesting ID documents that we are legally required to obtain). Any personal information collected by us during the course of our professional services is processed in accordance with our Privacy Notice to Clients, as appended to our Terms of Business.
We do not generally seek to collect any “special categories” of personal data about you: that would include details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. Nor do we seek to collect any information about criminal convictions and offences.
To the extent that you provide us with any special categories of personal data about you (or any details of criminal convictions or offences), then we process that information with your explicit consent, which you give to us by providing that information to us, for (a) the purpose for which you have voluntarily provided such information and (b) any purpose that is reasonably compatible with such purpose. You may withdraw that consent at any time by contacting us. Please note that we might have other legal grounds for processing such special data, such as if those data have been manifestly made public by you, but we will not process such data without such a lawful reason.
The site is not intended for children, and we do not knowingly collect any personal data relating to children – unless in the course of our professional advice, in which case we may make special arrangements to do so by providing a specific privacy notice and we shall, where required, seek consent for processing from the child’s parent or legal guardian.
If you fail to provide data
Where we need to collect personal data by law, or under the terms of a contract that we have with you and you fail to provide that data when requested, we may not be able to perform the contract that we have or are trying to enter into with you. If so, we shall notify you if that is the case at the time.
Change of purpose
We shall only use your personal data for the purposes for which we collected the data, unless we reasonably consider that we need to use such data for another reason and that reason is compatible with the original purpose. If you would like to get an explanation of how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we shall notify you and we will explain the legal basis on which we intend to rely.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, if and to the extent that this is required or permitted by law.
Disclosure of your information
We may disclose your personal information collected via the site to certain third parties, but only in the following limited circumstances:
♦ where we use third-party service providers that process information on our behalf to help us fulfil our contractual obligations and operate our business (such as IT and communication service providers);
♦ where that sharing is a necessary part of our legal services to our clients (any such sharing being done in accordance with our Privacy Notice to Clients, as appended to our Terms of Business);
♦ where you have contacted us in relation to a job position or training contract, in which case, as part of our recruitment process, we may contact third parties (including your referees, previous employers or educational establishments) to discuss the information that you have provided to us;
♦ where we are under a legal or regulatory obligation to disclose your personal information (e.g. to HMRC, regulators or other authorities);
♦ to our professional advisers, including bankers, accountants and insurers, who are usually based in the UK and provide their respective professional services to us;
♦ if our business or assets are in the future sold, transferred or merged to or with a third party, in which case the new owners may use your personal information in a manner compatible with that set out in this policy; and/or
♦ to other third parties, if we have obtained your consent to do so.
For our clients, any transfers of personal information outside the European Economic Area (EEA) are conducted in accordance with our Privacy Notice to Clients, as appended to our Terms of Business.
We do not otherwise typically transfer the types of personal information that we obtain via the site to locations outside the EEA. To the extent that we do so, we will strive to ensure that a similar degree of protection is afforded to such information by ensuring that at least one of the following safeguards is implemented:
♦ transferring your personal information to a country, organisation or sector that has, at the time of transfer, been deemed to provide an adequate level of protection for personal information by the European Commission;
♦ using specific forms of contract approved by the European Commission that give personal information the same protection it has within Europe; and/or
♦ transferring information to a provider based in the US if such provider is part of the Privacy Shield, which requires it to provide similar protection to personal information shared between Europe and the US.
For further details of such safeguards, please see the European Commission’s website.
Please contact us if you would like further information on any specific mechanism used by us when transferring your personal information outside the EEA.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties that have a business need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
For our clients, any personal information collected by us in the course of providing our services is retained in accordance with our Privacy Notice to Clients, as appended to our Terms of Business.
We will only otherwise retain your personal information for as long as necessary to fulfil the purposes for which we collected such information (or for any compatible purpose), including for the purposes of satisfying any legal, accounting or reporting requirements. In some circumstances you can ask us to delete your personal information: please see section 8 below.
If you have applied for a job position or a training contract with us, then we will retain your personal information for the duration of the period in which we are considering your application. If you are successful in your application, then we will continue to retain your personal information for the duration of your employment, and following the end of your employment, in accordance with our document retention policy for former employees. If your application is not successful, or we do not have a suitable position available at that time, we will retain your personal information for up to 12 months and, with your permission, for longer so that we can let you know about other appropriate opportunities that may arise in the future (but you may contact us at any time to request that we delete your application and any personal information we are holding about you).
Your legal rights
Under certain circumstances, you have the following rights under data protection laws in relation to your personal information:
♦ right of access to your personal information;
♦ right to rectification of your personal information;
♦ right to erasure of your personal information;
♦ right to restriction of processing of your personal information;
♦ right to portability of your personal information;
♦ right to object to processing of your personal information;
♦ right not to be subject to automated decision-making (including profiling); and
♦ right to withdraw consent to processing of your personal information.
To find out more about these rights, please visit the ICO’s website (www.ico.org.uk).
If you wish to exercise any of those rights, please contact us.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). We may, however, charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in those circumstances.
We may need to request specific information from you to help us confirm your identity and to ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data are not disclosed to any person that has no right to receive such data. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we shall notify you and keep you updated.