Privacy & Transparency Notice


Updated 01 May 2018

DATA CONTROLLER

Deton Solicitors is a trading name of Deton Solicitors of 28 Portland Road, South Norwood, SE25 4PF, who is the data controller. Further contact details are available from www.detonsolicitors.com.

PURPOSES OF PROCESSING

Your data will be processed in order to:

  1. market Deton Solicitors services to you;
  2. provide services under contract to you and others;
  3. comply with regulatory and other legal obligations; and
  4. protect Deton Solicitors against potential claims.

LEGAL BASIS

Your data will be processed on the basis that Deton Solicitors has a legitimate interest in being able to achieve the aims of processing set out above. Where special category data is provided, the provider of the data warrants that they consent to Deton Solicitors processing that data or that they have obtained written consent from the data subject.

PERSONAL DATA HELD

As a minimum, Deton Solicitors is required to positively identify its clients (including directors or its equivalent in the case of corporate clients). The information we collect may include may include your name, address and contact details, including email address and telephone number. In addition, Deton Solicitors holds whatever information is provided to it by its clients and others. Deton Solicitors may process special categories of data, such as information about ethnic origin, sexual orientation or religion or belief in order to monitor diversity in recruitment.

FAILURE TO PROVIDE DATA

If you fail to provide Deton Solicitors with the data required you will not receive services or marketing.

DATA SOURCES

Deton Solicitors obtains most personal data from its clients and those who have indicated that they have an interest in Deton Solicitors services. Deton Solicitors also obtains some personal data from other correspondents. Deton Solicitors also collects some data from publicly available sources (e.g. Companies House).

RECIPIENTS

Any data provided by a client is treated as confidential to that client and will only be shared with others in so far as is necessary in order to provide the services contracted for by the client, to comply with regulatory and other legal obligations and to protect Deton Solicitors against a potential claim. In order to provide its services, Deton Solicitors relies on the services of certain data processors. These include secure cloud storage for files and emails. In each case, Deton Solicitors ensures that data is processed in compliance with this policy.

THIRD COUNTRIES AND SAFEGUARDS

Other than where required in order to provide services as required in individual client matters, data is rarely sent to third countries. Where it is, we will ensure that adequate safeguards have been put in place to protect your personal information. This means that we will:

  1. ensure that the country in which your personal information will be handled has been deemed "adequate" by the European Commission under Article 45 of the General Data Protection Regulation (GDPR);
  2. include standard data protection clauses approved by the European Commission for transferring personal information outside the EEA into our contracts with those third parties (these are the clauses approved under Article 46.2 of the GDPR); or
  3. (in the case of transfers from the EEA to the USA), ensure that the recipient of the personal information is certified with the US-EU Privacy Shield Framework, as permitted by Article 46.2 of the GPDR;
  4. devices we send to third countries are password protected and equipped with tracking and remote wipe software.

RETENTION PERIOD

Data is held for six years from the end of the relevant matter or for six years where not associated with a particular matter.

DATA SUBJECT’S RIGHTS

Where relevant, you have the right (subject to client confidentiality) to:

  1. withdraw consent to the processing of your data;
  2. complain to a supervisory authority regarding the processing of your data (https://ico.org.uk/); and
  3. obtain a copy of the data held on you and to correction of any errors in that data.

AUTOMATED DECISION MAKING

None.

YOUR RIGHTS

You have the following rights regarding your information:

Rights
What does this mean?
1. Right to be informed
You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we’re providing you with the information in this Privacy Notice.
2. Right of access
You have the right to obtain access to your personal data (if we’re processing it) and certain other information (similar to that provided in this Privacy Notice). This is so you’re aware and can check that we’re using your personal data in accordance with data protection law.
3. Right to rectification
You are entitled to have your personal data corrected if it’s inaccurate or incomplete.
4. Right to erasure
This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there’s no compelling reason for us to keep it. This is not an absolute right to erasure; there are exceptions.
5. Right to restrict processing
You have rights to ‘block’ or suppress further use of your personal data in certain circumstances. When processing is restricted, we can still store your personal data, but may not use it further. [We keep lists of people who have asked for further use of their personal data to be ‘blocked’ to make sure the restriction is respected in future.]
6. Right to data portability
You have the right to obtain and reuse your personal data in a structured, commonly used and machine readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party.
7. Right to object to processing
You have the right to object to certain types of processing, in certain circumstances. In particular, the right to object to the processing of your personal data based on our legitimate interests or on public interest
8. Right to withdraw consent
If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw.

LINKS TO THIRD PARTY WEBSITES

We take reasonable precautions wherever possible to make sure that other organisations who we deal with have good data processing and security practices, however, it must be stated that we are not responsible for the privacy practices of those organisations whose websites may be linked to our service.
 

CHANGES TO THIS POLICY

This privacy statement is effective from the 1st of May 2018. From time to  time we may make changes to this privacy statement to reflect any changes to our privacy practices (following an internal review) or in accordance with changes to legislation, best practice or website enhancements.
 

HOW TO CONTACT US

If you have any questions or concerns about our use of your personal information, please email us at: dataprotection@detonsolicitors.com.