Privacy Policy

Our Privacy Policy sets out how Privacy Partnership Law Ltd, the data controller for your personal data, uses and protects any information that you give us or that we obtain about you from other sources. 

What personal information do we collect? 

We collect your contact details, including name, email address and phone number directly from you to contact you in response to any requests you make for more information about our services or products.  If you engage our services, we may collect additional information about you dependent on the nature of the work we are supporting.  

How do we use your personal information and why? 

Your personal information will be collected by Privacy Partnership Law when you use the website or access or services.    The personal information we collect will only be used in the ways described and justified below.   We only market to you if you have asked us to. At Privacy Partnership Law we are committed to ensuring that your privacy is protected and only used in line with this Privacy Policy, which may be amended from time to time. 

Legitimate Business Uses 

The information we collect and hold on you, will be used by us and our subcontractors to fulfil our legitimate business interests which are to: 

• provide you with the services you request - we will ask you to enter into a contract with us for the services you require
• better understand your needs and improve our service to you - it is in our legitimate business interest to improve our services
• administer any service we provide to you - this forms part of our contract commitment to you
• to profile and keep statistical records about you - it is in our legitimate business interest to better understand our customers and how we can meet needs
• to conduct market research - it is in our legitimate business interest to improve our services
• Conduct identity and other checks required by law - as a law firm we are legally required to conduct identity checks and meet anti fraud and money laundering obligations
• to protect our business from loss or fraud - it is in our legitimate business interest to protect our business, employees, consultants and other clients from loss
• to meet our Regulatory and Legal requirements - we are regulated by the SRA and must meet their established regulatory obligations – some of which are supported by law.  Otherwise, it is in our legitimate interest to meet the regulatory requirements as these are an integral part of our license conditions
• to contact you about services we believe might be of interest to you - we will only contact you with information about services or products that we believe will be of interest to you 

Where you have given us your consent 

Where you consent via our cookie banner, we will also use non-essential Google analytics cookies to understand how you use our website and count the number of visitors to our site. 

Who might we share your information with? 

It may be necessary for us to share your personal information with 3rd parties for the purposes mentioned above.   These 3rd Parties include: Other companies within the “Privacy Partnership” group, Regulatory bodies, our service providers and professional advisors, financial Institutions and Credit Reference Agencies 

We may also disclose your personal information to third parties in the following circumstances: a)Where we sell any of our business and/or assets to a third party  

b)Where we are legally obliged to disclose your information. 

In exceptional circumstance Regulators and law enforcement agencies may also request your information from us and we will provide them with your information only when there is a legal basis to do so.  If we suspect someone has committed fraud, we’ll note it in our records and may share the information with others that we deem relevant – such as the Police.  

How long do we keep your information? 

We only retain your data for as long as we have a business, regulatory or legal obligation to do so.   Your contact details are held while you have asked us for information or we are providing you with services and for a period of no longer than 10 years after our last business interaction, or our last contact with you.  We need to hold your information for this long to meet regulatory, company and taxation obligations and to manage legal any claims. 

Marketing 

We may, where you have consented, periodically send promotional emails, letters or calls about new products, special offers or other information which we think you may find interesting using the contact information which you have provided. You may opt out of receiving such information at any time by contacting us at admin@privacypartnership.com 

Security & International Transfers 

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and organisational procedures to safeguard and secure the information we collect. In some cases, we may use suppliers or professional advisors who will process your personal data outside of the UK.  In these circumstances, we will always take steps to understand any potential risk to you and apply appropriate controls to protect your data.  For more information about the potential controls applied to “Restricted Transfers”, please see https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-transfers-after-uk-exit/  

Your Rights  

By law, you have a number of rights (subject to certain conditions) when it comes to your information. Further information and advice about your rights can be obtained from the data protection regulator in your country. You can exercise any of these rights by contacting us through our details below. 

• Right to object to processing • You have the right to object to certain types of processing, including processing for direct marketing (i.e. if you no longer want to be contacted with potential opportunities)
• The right to be informed    • You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this Policy. 
• The right of access • You have the right to obtain access to your information (if we’re processing it), and certain other information (similar to that provided in this Policy). This is so you’re aware and can check that we’re using your information in accordance with data protection law.
• The right to rectification • You are entitled to have your information corrected if it is inaccurate or incomplete.
• The right to erasure • This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there is no compelling reason for us to keep using it. This is not a general right to erasure, there are exceptions. 
• The right to restrict processing • You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
• The right to data portability • You have rights to obtain and reuse your information for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability. 
• The right to lodge a complaint • You have the right to lodge a complaint about the way we handle or process your information with your national data protection regulator. 
• The right to withdraw consent • If you have given your consent to anything we do with your information, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your information with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your information for marketing purposes. 

Contact us

We will normally respond within one month from when we receive your request or will let you know if we need to extend this time.  

If you have any questions, comments and requests regarding this Policy, please get in touch with us at admin@privacypartnership.com

Contact our EU representative 

​

We have appointed DataRep as our Data Protection Representative in the European Union. If you are based in the EU or EEA, and would like to make a data protection related query, please contact DataRep by:

   Sending an email to DataRep at smartprivacy@datarep.com

   Contacting DataRep through an online webform at www.datarep.com/data-requests 

   For a full list of nominated representative companies in Europe the list at the bottom of this page.

PLEASE NOTE: When mailing inquiries please ensure that you mark your letters for “DataRep” and not “Smart Privacy” or your inquiry might not reach DataRep.