What types of data do we process?
We process personal data about various different categories of people including our clients, our staff and third parties who interact with us.Personal data we process may include such information as:
- Name, address, date of birth, email address and telephone number
- Financial information including bank details and other payment related information.
- Identification documents such as passports, driving licence and proof of address
- Any other information relating to you that you may provide to us
- Special category data such as race, ethnic origin, health, genetic or biometric data.
How do we collect your data?
We may collect information from you directly, from our clients, from third parties involved in matters we act on in the course of providing legal services or from publicly available information. We may also collect data from recruitment channels or from your use of our website and any associated communications sent to us.
How will we process your data?
The GDPR regulations permit us to process your personal information only if we have a lawful basis for doing so. This could be one or more of the following:
- The processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering a contract
- The processing is necessary for compliance with our legal obligations
- The processing is necessary for pursuing our legitimate interests
- In some circumstances we may process personal data on the basis that you have given your consent, for example where you have instructed us on a matter.
How will we use your data?
We process personal data for the purpose of providing legal services to our clients and also for our own general business purposes.
- To provide any information requested by you
- To carry out anti-money laundering checks and for fraud and crime prevention
- To carry out conflict checks to ensure we are able to act for you
- To ensure the safety and security of our people and premises
- To promote our services and market research purposes including sending you direct marketing communications
- To provide and improve our services to our clients and to enhance the client experience
- For the purposes of recruitment
- Administering any accounts and processing financial transactions
- To fulfil our legal and regulatory obligations including our auditors and insurers.
Who may we pass your data to
Whilst providing legal service to our clients and complying with legal and regulatory obligations we may share personal data that we have obtained about you insofar that we are permitted by law to do so with the following third parties:
- Third parties involved in any matter including experts, courts and tribunals, barristers, health care professionals and any other third party involved in a matter
- Service providers and suppliers used by us in providing us with a service such as IT providers, postal services and data management
- Financial organisations, debt collection, credit reference and tracing agencies.
- Our auditors, our own legal and other professional advisers our insurers and insurance brokers
- Government agencies, regulators and other authorities
- Our and your trade associations, professional bodies and business associates
Data Retention Policy
Data will be kept secure. Files are confidential and are stored in locked filing cabinets and only authorised staff have access to them. Files held electronically are stored confidentially by means of password protection, encryption and coding and again, only authorised employees have access to them. The Firm is entitled to keep all of your papers and documents while there is money owing for its charges and expenses.After completing the work and upon full payment of charges and expenses, the Firm will keep your file except for any papers returned to you. The Firm is under no obligation to store the file for any longer than 6 years and will destroy it no later than 7 years after the date of the last dealing on the file. In respect of Wills we will keep until such time as we are notified of the death of the client.The Firm will not destroy any documents that we have agreed to store for safekeeping. The Firm will often receive large bundles of pre-registration title deeds and documents on completion of a purchase which no longer have any relevance following the Land Registration Acts and the Firm reserves the right to dispose of those items which are no longer of any use unless you specifically tell us before completion that you want to retain those items. These documents must be collected from the Firm within 14 days of completion. After this date the documents will be destroyed.There is no charge for retrieving papers or documents from storage for continuing or new instructions concerning your affairs. However, there will be a time-based charge for:
- Producing stored papers and documents to you or another on your request; or
- Reading, correspondence or other work necessary to comply with the instructions given by you or on your behalf.
The minimum fee in any event will be £25 plus vat.
Your rights in respect of your personal data
You have the right, on request, to receive a copy of the personal information that the Firm holds about you and to demand that any inaccurate data be corrected or removed. You have the right on request: -to be told by the Firm whether and for what purpose personal data about you is being processedto, be given a description of the data and the recipients to whom it may be disclosedto have communicated in an intelligible form the personal data concerned, and any information available as to the source of the data. Upon request, the Firm will provide you with a statement regarding the personal data held about you. This will state all the types of personal data the Firm holds and processes about you and the reasons for which they are processed. If you wish to access a copy of any personal data being held about you, you must make a written request for this. The Firm will respond to this request within one month.If you wish to make a complaint that these rules are not being followed in respect of personal data the Firm holds about you, you should follow the Complaints procedure as detailed in our Terms and conditions of business available on request. If however you are dissatisfied with our complaints procedure, you have the right to lodge a complaint with the Information Commissioner in respect of our processing of your personal data. Information can be found at www.ICO.org.uk.
Your use of our website:
- your unique Internet protocol address;
- the name of your unique Internet service provider;
- the town/city, county/state and country from which you access our website;
- the kind of browser or computer you use;
- the number of links you click within the site;
- the date and time of your visit;
- the web page from which you arrived to our site;
- the pages you viewed on the site; and
- certain searches/queries that you conducted via our website(s).
Who we are
Our site www.cromptonhalliwell.co.uk is owned and operated by Crompton Halliwell Solicitors, a partnership, with its address at 4-6 St Mary’s Place, Bury, BL9 0EA.