PERSONAL DATA INFORMATION STATEMENT
This statement is to comply with our obligation to provide required information to people about whom we hold and process data, under the General Data Protection Regulation.
The Data Controller is Employment Law Plus (UK) Ltd. Our contact details are above. We have not appointed a data protection officer. We are registered with the Information Commissioner’s Office under registration number Z2481948.
What information will you get about me if I use your contact box on your website?
Our email contact form on our website only captures an enquirer's name and email address along with IP address of the computer used to make the request. No cookies are captured. Obviously, any information which you choose to type into the contact box will be provided to us.
We have put in place appropriate security measures to prevent your personal data from being lost, used, altered, disclosed or accessed in an unauthorised way.
E-mail communications are convenient but not secure. We do not routinely encrypt email. We have the facility to set up encrypted email with you. If you wish to discuss this with us, please let us know. If you do not take up this facility, you must accept the risk that the convenience of day-to-day exchanges of email without encryption may compromise security
What categories of personal data do we process?
We process the following categories of personal data:
Why we process personal data
We process data to run a business providing legal services, authorised and regulated by the Solicitors Regulation Authority including:
Where do we get the personal data which we process?
We get personal data from the individuals concerned and also from third parties. When we get personal data from third parties, we receive it from their employers, their opponents in cases, their lawyers and accountants, courts and tribunals, their medical professionals and other relevant advisers and specialists, witnesses, our clients and those referring prospective clients to us. If the need arises, we may also get information from publicly accessible sources to find out if an individual has an outstanding judgment against them or from agencies to confirm ID or trace an individual or to access case law legal authorities. We may look up information about a business or an individual on public facing websites and social media. We check details about the directors of companies who instruct us on public facing websites.
Our clients who are themselves data controllers must only give us personal data if that personal data has been lawfully processed and there is a lawful basis to give it to us.
Who receives personal data which we process?
The following categories of people receive or may receive personal data which we process:
Do we transfer personal data abroad?
We do not transfer personal data to a third country outside the European Economic Area.
If we exceptionally intend to transfer personal data to any other country in the course of acting for a client, we will notify the client concerned.
Exceptionally, to provide a high quality of service, we may work on matters when we are outside the EEA (for example, when on business or even if we are on holiday.) We will notify the client concerned.
How long will we keep personal data?
We will keep personal data for periods based on the following criteria:
Prospective client enquiries (where the person decides not to use us):
Those to whom we may refer business and business contacts; marketing data (excluding database):
Information showing identity:
Are you obliged to provide your personal data to us, and what happens if you do not do so?
You are not obliged to provide any personal data to us. However, if you enquire about using our services, we will need to obtain certain data from you in order to decide whether or not we can assist you. If you do not provide us with minimum information, we will not be able to take you on as a client. You may also decide to give us additional information at that stage. Clients will need to give us their personal data so that we can provide our services. If they do not provide the personal data, we will not be able to provide our services. If we act for a client in litigation, a stage will be reached where the client must provide all documents relevant to their case in order to comply with an order of the court of tribunal. If they fail to do so, and we are aware of this, we will have to stop acting for the client.
Automated decision making processes
We do not use any automated decision making processes.
The legal basis for our processing of personal data
The legal bases for our processing of personal data are:
If we rely on the legitimate interest ground for data processing, our legitimate interests include the following:
Legal basis for processing sensitive personal data
Sensitive personal data relates to health, sexuality, race, political opinions, religion or philosophical beliefs, sexual life, and trade union membership, and criminal offences.
The legal bases for our processing of sensitive personal data are:
Rights of data subjects
Where our processing of data is based on the consent of the data subject, the data subject may withdraw that consent at any time. This will not affect the lawfulness of the processing of the data before the consent was withdrawn.
Please keep us informed if your personal data changes during our relationship with you. Data subjects have the right to request from us access to their personal data, and rectification or erasure of personal data and restriction of processing and to object to processing. In certain circumstances, we have the right to refuse such requests. We do not process data in a way to give data subjects the right to data portability.
If data subjects consider that our processing of their personal data is not in compliance with the Data Protection Act, please contact us in the first instance so that we have a chance to deal with your concerns. Data subjects may complain to the Office of the Information Commissioner. The contact information is: Information Commissioner's Office. Wycliffe House. Water Lane. Wilmslow. Cheshire. SK9 5AF. Tel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number.
Links on our website to third party websites
Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
If you have any questions or queries regarding this policy, please contact email@example.com. We will do our best to deal with your questions or queries as soon as possible.
We may update this Policy at any time and the up to date version will appear on our website at www.employmentlawplus.com. Updates will be marked with a new date. You can obtain historic versions from us. We may provide you from time to time with more specific processing of personal data information and this Statement is not intended to override this.
Rev 25 May 2018