EMW Law LLP (“we”, “us” or “our”) respects your privacy and we are committed to protecting your personal data. This privacy notice will inform you about how we look after your personal data and tell you about your privacy rights and how the law protects you. This privacy notice is provided in a layered format so you can click through to the specific areas set out below.
1. IMPORTANT INFORMATION AND WHO WE ARE
2. DOES THIS PRIVACY NOTICE APPLY TO YOU?
3. THE DATA WE COLLECT ABOUT YOU
4. HOW IS YOUR PERSONAL DATA COLLECTED
5. HOW WE USE YOUR PERSONAL DATA
6. DISCLOSURES OF YOUR PERSONAL DATA
7. INTERNATIONAL TRANSFERS
8. DATA SECURITY
9. DATA RETENTION
10. YOUR LEGAL RIGHTS
1. Important information and who we are Purpose of this privacy notice
This privacy notice aims to give you information on how we collect and process your personal data, including data we obtain when we interact with you as well as data obtained when we deal with third parties (See Indirect interactions).
Controller – who we are
The data controller under this privacy notice is EMW Law LLP of Seebeck House 1 Seebeck Place, Knowlhill, Milton Keynes, Buckinghamshire, MK5 8FR. We have appointed a data protection officer (“DPO”), Matthew Holman, Principal, who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the DPO at firstname.lastname@example.org or please write to The Data Protection Officer, EMW Law LLP of Seebeck House 1 Seebeck Place, Knowlhill, Milton Keynes, Buckinghamshire, MK5 8FR. You always have the right to make a complaint at any time about how we process your personal data to the Information Commissioner’s Office (“ICO”), the UK supervisory authority for data protection issues (www.ico.org. uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
This website (www.emwllp.com) may include links to third-party websites, plugins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these thirdparty websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
2. Does this privacy notice apply to you?
If you fall within one of the categories below and we process your personal data, then this privacy notice will apply to you.
Who “you” are
As a supplier of legal services, we deal with many different parties in the course of providing our services. We have grouped together the people we deal with and whose personal data we may process, as follows:
- Clients includes those who have engaged our services.
- Suppliers includes all those that supply us with goods and/or services, as well as those with whom we have made enquiries about their goods and/or services.
- Potential clients & referrals includes those who have enquired about our services by any means (telephone, website enquiry, word of mouth and other means), as well as referrals.
- Related parties include all those who may be involved with or are in some way connected to our supply of legal services. By way of example this might include the staff, customers and contacts at regulatory authorities with whom we have dealings or other professional advisers.
- Users includes users of this website and those who subscribe to receive news and marketing communications from us.
3. The data we collect about you
Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data includes first name, last name and any middle names.
- Contact Data includes email address, telephone numbers and postal address.
- Professional Data includes any information about you that we may collect in the course of providing our services to Clients.
- Marketing and Communications Data includes your preferences in receiving marketing from us and where relevant, our third parties and your communication preferences.
- Special Categories of Personal Data includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.
- Technical Data includes internet protocol (IP) address browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
- Criminal Data includes details about your criminal convictions and offences We also collect and use Aggregated Data such as statistical or demographic data for internal purposes. If you fail to provide personal data Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to act, or continue to act on your behalf.
4. How is your personal data collected?
We use different methods to collect data from and about you, including through:
- Direct interactions. You may give us your Identity Data, Contact Data, Professional Data, Marketing and Communications Data, Special Categories of Personal Data and Criminal Data by providing it to our staff in meetings, filling in forms or by corresponding with us by phone, email, post, fax or SMS.
This includes personal data you provide when you:
- volunteer it to us in the course of using our services;
- submit an enquiry; or
- subscribe to receive news from us via our website.
- Indirect interactions.
We may obtain your Identity Data, Contact Data, Professional Data, Special Categories of Personal Data and Criminal Data where these are provided to or obtained by us in the course of us supplying our services or administering our business. This data typically originates from a combination of our Clients and publicly accessible sources. It may also be provided to us by the individual or entity introducing us to each other, for example, where a professional third party introduces us.
- Automated technologies or interactions.
5. How we use your personal data We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances: • to make contact with you for the first time (for example, where you have made an enquiry to our offices);
- where we need to perform the contract we are about to enter into or have entered into with you;
- where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; or
- where we need to comply with a legal or regulatory obligation.
Generally, we do not rely on consent as a legal basis for processing your personal data. You have the right to withdraw consent to marketing at any time by contacting us. Purposes for which we will use your personal data In the table we have set out a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful reason depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal reason we are relying on to process your personal data where more than one reason has been set out in the table below.
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
We may use your Identity, Contact, Technical and Marketing of Communications Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which services and offers may be relevant for you (we call this marketing).
You may receive marketing communications from us if you have requested information from us or if you have purchased or have entered into negotiations with us to purchase our services, in which case we may contact you based on our legitimate interest. You will always be given the opportunity to opt out of our marketing when we make contact.
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
6. Disclosures of your personal data
We may have to share your personal data with the parties set out below for the purposes set out in the table in paragraph 5 above:
- External third parties for the purpose of conducting conflict checks, credit checks and work referrals.
- Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.
- Enforcement agencies for the purpose of complying with our legal requirements under anti money laundering or terrorist financing activities. In this instance, we may not be able to tell you that we have shared your personal data.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
7. International transfers
EMW does not routinely transfer personal data outside of the European Economic Area (“EEA”). The most common scenario for this is where you have asked us to do so in the course of us providing services to you or where we have engaged a third party data processor.
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
(a) we will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries;
(b) where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe. For further details, see European Commission: Model contracts for the transfer of personal data to third countries; and/or
(c) where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US. For further details, see European Commission: EU-US Privacy Shield. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
8. Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
9. Data retention – How long will you use my personal data for?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Details of retention periods for different aspects of your personal data are available in our retention policy which you can request from us by contacting us.
10. Your legal rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data. Please click on the links below to find out more about these rights:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data.
- Object to processing of your personal data.
- Request restriction of processing your personal data.
- Request transfer of your personal data.
- Right to withdraw consent.
If you wish to exercise any of the rights set out above, please contact us.