Privacy Policy
Sacaloffs Solicitors
Privacy Notice Contents
1
Introduction
2
Key Terms
3
Personal Data from interacting with our website
4
Clients' Personal Data
4.1
Personal Data we collect about you
4.2
How your Personal Data is collected
4.3
How and why we use your Personal Data
4.4
Marketing Communications
4.5
Who we share your Personal Data with
4.6
Where your Personal Data is held
4.7
How long your Personal Data will be kept
5
Other parties in client matters.
6
Suppliers' Personal Data
7
Transferring your Personal Data out of the EEA
8
Your rights
9
Keeping your Personal Data secure
10
Links
11
How to complain
12
Changes to this Privacy Notice
13
How to contact us.
1
Introduction
Sacaloff Solicitors take
your privacy very seriously. Please read this
Privacy Notice carefully as it contains important
information on who we are and how and why we
collect, store, use and share your Personal Data.
It also explains your
rights in relation to your Personal Data and how to
contact us or the supervisory authorities if you
have a complaint.
The Privacy Notice will
apply whether you access our website at using a
computer, mobile phone, tablet, TV, or other device.
Our use of your Personal
Data is subject to your instructions, the EU General
Data Protection Regulation (GDPR), other relevant UK
and EU legislation and our professional duty of
confidentiality.
Further details on the
GDPR can be found on the Information Commissioner's
website:
https://ico.org.uk
2
Key terms in this Privacy Notice
We, us, our,
Sacaloffs Solicitors, Sacaloffs |
Roberta Sacaloff trading as "Sacaloffs Solicitors" |
Personal Data |
Any information
relating to an identified or identifiable
individual |
Special Category
Personal Data |
Personal Data
relating to racial or ethnic origin,
political opinions, religious beliefs,
philosophical beliefs, trade union
membership, health, sexual life, sexual
orientation and criminal convictions and
offences |
3. Personal Data from
interacting with our website
We collect Personal Data
from visitors to this website:
1.
through the use of online
form, hyperlinks and the contact us page
2.
when you email us with an
enquiry
The Personal Data we
collect are name, address, email, telephone number,
associated company (if relevant) and any other
Personal Data you include.
4
Clients' Personal Data
4.1
Personal Data we collect about you
The Personal Data we
collect or may collect in the course of advising or
acting for you is below:
Personal Data
we collect |
Personal Data
we may collect depending on why you have
instructed us |
Your name,
address and telephone number Information to
enable us to check and verify your identity,
e.g. your date of birth or passport details Electronic
contact details, e.g. your email address and
mobile phone number Information
relating to the matter in which you are
seeking our advice or representation Your financial
details so far as relevant to your
instructions |
If you are a
business: Information
provided by you about your business and
other individuals (which could include some
or all of the individual data below) in
connection with any advice we provide to
your business. If you are an
individual: Your employment
status and details including salary and
benefits etc Your tax and
national insurance and details Your bank and or
or building society details Details of your
pension arrangements Your employment
records including, where relevant, records
relating to sickness and attendance,
performance, disciplinary, conduct and
grievances (including relevant special
category Personal Data), e.g. if you
instruct us on matter related to your
employment or in which your employment
records are relevant Your nationality
and immigration status and information from
related documents, such as your passport or
other identification, and immigration
information, Details of your
professional online presence, e.g. LinkedIn
profile Your racial or
ethnic origin, gender and sexual
orientation, religious or similar beliefs,
e.g. if you instruct us on discrimination
claim Medical records
e.g. if you have instructed us on a
disability discrimination your trade union
membership |
We need you to provide
this Personal Data to enable us to provide our
service to you. If you do not provide the
Personal Data we ask for, it may delay or prevent us
from providing services to you.
4.2 How your Personal
Data is collected
We collect most of this
information from you. However, we may also
collect information:
-
from publicly accessible sources, e.g. Companies House;
-
directly from a third party
-
from a third party with your consent, e.g.: consultants and other professionals we may engage in relation to your matter or your employer and or or trade union, professional body or pension administrators
-
via our information technology systems, e.g. our case management, document management and time recording systems
4.3 How and why we use
your Personal Data
We can only use your
Personal Data if we have a proper reason for doing
so:
-
for the performance of our contract with you or to take steps at your request before entering into a contract
-
to comply with our legal and regulatory obligations
-
for our legitimate interests or those of a third party or
-
you have given consent.
A legitimate interest is
when we have a business or commercial reason to use
your information, so long as this is not overridden
by your own rights and interests.
The table below explains
what we use (process) your Personal Data for and our
reasons for doing so:
What we use
your Personal Data for |
Our reasons |
|
|
Providing you
with legal advice and services |
For the
performance of our contract with you or to
take steps at your request before entering
into a contract |
Conducting checks
to identify our clients and verify their
identity Other processing
necessary to comply with our professional,
legal and regulatory obligations e.g. rules
issued by our professional regulator |
To comply with
our legal and regulatory obligations |
Gathering and
providing information required by or
relating to audits, enquiries or
investigations by regulatory bodies In some
circumstances we are under a legal duty to
disclose information to the National Crime
Agency (NCA) or other enforcement agencies.
If we make a disclosure we will usually not
be able to tell you about it or the reasons
for the disclosure. |
To comply with
our legal and regulatory obligations |
Operational
reasons, such as improving our efficiency,
training and quality control |
For our
legitimate interests or those of a third
party |
Ensuring the
confidentiality of commercially sensitive
information |
For our
legitimate interests or those of a third
party To comply with
our legal and regulatory obligations |
Statistical
analysis to help us manage our practice,
e.g. financial performance, client base,
work type or other efficiency measures |
For our
legitimate interests or those of a third
party |
Keeping our
central records up to date including
updating and enhancing client records and
managing our business |
For the
performance of our contract with you or to
take steps at your request before entering
into a contract To comply with
our legal and regulatory obligations For our
legitimate interests or those of a third
party |
Dealing with
regulatory obligations |
To comply with
our legal and regulatory obligations |
External audits
and quality checks, e.g. SRA and the audit
of our accounts |
For our
legitimate interests or a those of a third
party To comply with
our legal and regulatory obligations |
Marketing
|
For our
legitimate interests - see
below |
Please note that the
table above does not apply to Special Category
Personal Data, which we will only process with your
explicit consent.
4.4 Marketing
communications
We may on occasion use
your Personal Data to send you updates (by email,
text message, telephone or post) about legal
developments that might be of interest to you and or
or information about our services.
We have a legitimate
interest in processing your Personal Data for
marketing purposes (see above). This means we
do not usually need your consent to send you
marketing communications. However, where
consent is needed, we will ask for this consent
separately and clearly.
We do not sell or share
your Personal Data with other organisations for
marketing purposes.
You have the right to opt
out of receiving marketing materials at any time by
contacting us by telephone or email to unsubscribe
or update your marketing preferences to
info@sacaloffs.co.uk
We may ask you to confirm
or update your marketing preferences if you instruct
us to provide further services in the future, or if
there are changes in the law, regulation, or the
structure of our business.
4.5 Who we share your
Personal Data with
We share Personal Data
with:
-
professional advisers who we instruct on your behalf or refer you to e.g. barristers, accountants, tax advisers, expert witnesses or other experts
-
other third parties where necessary to carry out your instructions, e.g. Companies House
-
the courts and tribunals
-
our insurers and or or brokers
-
external auditors, e.g. SRA and the audit of our accounts
-
our bank
-
external service suppliers, representatives and agents that we use to make our practice more efficient, e.g. typing or copying services or document collation or analysis
We may disclose and
exchange information with law enforcement agencies
and regulatory bodies to comply with our legal and
regulatory obligations.
4.6 Where your Personal Data is held o:p>
We will store your
Personal Data on our Case Management System although
Personal Data may also be stored in Outlook and on
paper files.
Information may be held
at our office and those of our third-party agencies,
service providers, representatives and agents as
mentioned at 4.5 above.
4.7 How long your
Personal Data will be kept
WWe will keep your
Personal Data after we have finished advising or
acting for you for one of these reasons:
-
to respond to any questions, complaints or claims made by you or on your behalf
-
to show that we treated you fairly
-
to keep records required by law
We will not retain your
data for longer than necessary for the purposes set
out in this Notice. Different retention periods
apply for different types of data and we will retain
data for our legitimate interests or those of a
third party or to comply with our legal and
regulatory obligations (generally 7 years).
When it is no longer necessary to retain your
Personal Data, we will delete, destroy or anonymise
it.
5
Other parties' Personal Data in client matters.
We will collect the following Personal Data in relation to the other side in Client matters:
-
Name, address and contact details
-
Other Personal Data to allow us to progress our Client's matter.
We will store this
Personal Data primarily on our Case Management
System although Personal Data may also be stored in
our email system, Outlook and on paper files.
We have a legitimate interest in processing this Personal Data as it is required for us to properly perform our contract with our Client. o:p>
In addition, on a
particular matter, we may process Personal Data in
relation to other third parties involved e.g.
lawyers, experts etc. This is again necessary for
us to be able to advise our Clients and be able to
properly perform our contract with them.
We will not retain your
data for longer than necessary for the purposes set
out in this Notice.
Different retention
periods apply for different types of data and when
it is no longer necessary to keep your Personal
Data, we will delete or anonymise it.
66
Suppliers' Personal Data
We will collect: o:p>
1. Name, business name
and address and other business information
2. Financial details
Such Personal Data is
necessary for the purposes of fulfilling our
contract with you.
We will not retain your
data for longer than necessary for the purposes set
out in this Notice.
Different retention
periods apply for different types of data and when
it is no longer necessary to keep your Personal
Data, we will delete or anonymise it.
7
Transferring your Personal Data out of the EEA
We do not transfer
Personal Data outside the EEA.
8
Your rights
You have the following
rights which you can exercise free of charge:
Access |
to be provided
with a copy of your Personal Data |
Rectification |
to require us to
correct any mistakes in your Personal Data |
To be
forgotten |
to require us to
delete your Personal Data but only in
certain situations |
Restriction of
processing |
to require us to
restrict processing of your Personal Data
but only in certain circumstances, e.g. if
you contest the accuracy of the data |
Data
portability |
to receive the
Personal Data you provided to us, in a
structured, commonly used and
machine-readable format and or or to
transmit that data to a third party again,
but only in certain situations |
To object |
tto object:
|
Not to be subject to automated individual decision-makingo:p> |
not to be subject
to a decision based solely on automated
processing (including profiling) that
produces legal effects concerning you or
similarly significantly affects you |
FFor further information
on each of those rights, including the circumstances
in which they apply, please contact us or see the
Guidance from the Information Commissioner's (ICO)'s
office on individuals' rights under the General Data
Protection Regulation.
If you would like to
exercise any of those rights, please:
-
email, call or write to us - (see below); and
-
let us have enough information to identify you (e.g. your full name, address and client or matter reference number, if you are a client);
-
let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill); and
-
let us know what right you want to exercise and the information to which your request relates.
If you wish to enforce any of your rights, please see paragraph 14. We will respond to your request without any undue delay and by no later than one month from receipt of any such request unless a longer period is legally permitted and only if legally permitted in limited circumstances, we may charge a reasonable fee for dealing with your request and in this case, we will notify you. o:p>
9
Keeping your Personal Data secure
We have appropriate
security measures to prevent Personal Data from
being accidentally lost or used or accessed
unlawfully.
We limit access to your
Personal Data to those who have a genuine business
need to access it. They will do so only in an
authorised manner and are subject to a duty of
confidentiality. However, please note that although
we take appropriate steps to protect your personal
data, no website, product, device, online
application or transmission of data, computer system
or wireless connection is completely secure, and we
cannot therefore guarantee the security of your
personal data.
We also have procedures
in place to deal with any suspected data security
breach. We will notify you and any applicable
regulator of a suspected data security breach where
we are legally required to do so.
10 Links
This website contains
links to other websites that are not operated by us
or under our control and we cannot be responsible
for their privacy practices or their content.
If you use a third-party website then any Personal
Data collected by it will be subject to their
privacy policy which you should check before
providing any personal data.
11 How to
complain
We hope that we can
resolve any query or concern you may raise about our
use of your information.
The General Data
Protection Regulation also gives you right to
complain to a supervisory authority and in the UK,
this is the Information Commissioner who may be
contacted at:
https://ico.org.uk/make-a-complaint/
tel: 0303 123 1113.
12 Changes to
this Privacy Notice
We reserve the right to
make any changes to this Notice from time to time
without notifying you.
13 How to
contact us
If you have any questions
about the collection, processing or use of your
personal data or if you wish to enforce your rights,
please contact us by post, email or telephone.
Our contact details are:
RoRoberta Sacaloff,
tel 020 3457 0932