Privacy Policy
Privacy Notice
This privacy notice sets out the standards that you can expect from A & A Law when we request or hold personal information (‘personal data’) about you; how you can get access to a copy of your personal data; and what you can do if you think the standards are not being met.
Who are we?
We are A & A Law Solicitors
32 St Olav’s Court, City Business Centre
Lower Road, London
SE16 2XB
Tel – 02072311405
The firm’s data protection officer is Miss Tara Olowu
Data we collect:
We may hold data about the following people: –
- Staff:
- Clients;
- Suppliers or service providers;
- Advisers, consultants, and other professional experts;
- Job applicants and work placements;
- Users of our website and social media and
- enquirers.
Types of personal data we process:
We only process personal data that is relevant for the services we are providing to you.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
Special Categories of personal data includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.
We may collect information about your criminal convictions and offences. This happens where we are required to do so for legal or regulatory purposes (for example, where required to comply with anti-money laundering laws), or where we need this information so that we can provide legal advice to you.
We may collect, use, store and transfer different kinds of personal data about you for example: –
Identity Data, Contact Data includes billing address, delivery address, email address and telephone/ mobile numbers.
Financial Data includes bank account and payment card details.
Transaction Data includes details about payments, invoices, and bills to and from you and other details of matters you have engaged us to deal with or goods or services we have purchased from you.
Marketing and Communications Data includes your preferences in receiving marketing communications and information from us and our third parties and your communication preferences. We also record when you receive and read marketing communications from us and we use this information to improve the quality of our marketing services and provide you with information that is more relevant to you.
Purpose of processing and the lawful basis for the process:
The purpose of A & A Law Solicitors & Advocates collecting and processing the personal data which you have provided is for the purposes of providing legal services that you have instructed us on. We also collect information about staff for the purposes of supporting and managing them.
In the event that we were unable to collect personal information, we would not be able to represent you or in the case of staff, manage or support you.
Lawful basis for processing:
The basis on which we process your personal data is one or more of the following: –
- It is necessary for the performance of our contract with you.
- It is necessary for us to comply with a legal obligation.
- It is in our legitimate interests to do so; and
- You have given us your consent. Where we process your information on the basis of consent, you may withdraw the consent at any time.
Where we have obtained consent and we have informed you in other communication that we process your information because we have a legitimate interest, the basis to be accepted upon which we process your data will be on the basis of consent. In which case you may withdraw the consent at any time.
We ensure we consider and balance any potential impact on you and your rights before we process your personal data for our legitimate interests.
How we use your personal data:
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
Where we need to perform the contract, we are about to enter into or have entered into with you.
Where it is necessary for our legitimate interests (or those of a third party)
Where we need to comply with a legal or regulatory obligation.
Where we need to process personal data where it is necessary to protect vital interests of yourself or another individual; or
Where you have given us your consent or explicit consent to process your data. Where we rely on your consent as the legal basis for processing your personal data you have the right to withdraw your consent at any time.
Sometimes A & A Law uses contact information to ask clients if they would like to complete a customer service survey to measure customer satisfaction and to inform areas for improvement.
Disclosures of your personal data:
We may have to share your personal data with the parties set out below
External Third Parties.
Service providers acting as processors based in the UK who provide IT and system administration services to us.
Professional advisers including accountants, bankers, auditors, and insurers based in the UK who provide consultancy, banking, legal, insurance, auditors, and accounting services.
Third parties providing services for the performance of our contract with you including, medical experts, professional advisers such as those listed immediately above, agents, barristers, surveyors, interpreters, and official agencies such as the Courts.
Various third parties
HM Revenue & Customs, the Solicitors Regulation Authority, regulators, and other authorities acting as processors or joint controllers based in the UK who require reporting of processing activities in certain circumstances.
Fraud, anti-money laundering and law enforcement agencies acting as processors or joint controllers based in the UK, or abroad, as required by law.
Information service providers based in the UK who provide identity verification services for anti-money laundering purposes.
The Legal Aid Agency acting as processors or joint controllers based in the UK for the purposes of public funding.
Other third-party sub-contractors, not referred to under External Third Parties, who provide services for us and/or help to provide services to you. In the event that we use sub-contractors who have access to your personal data, we ensure that there are contractual terms in place to ensure that they only process personal data to the extent that we instruct them to do so in writing and there are suitably worded confidentiality and data protection clauses in all such contracts.
Data Retention:
We will process your data for the duration of the matter and thereafter will retain the data relating to the specific matter, including the personal data within it, for six years. There are some cases whereby law we may have to keep your data for longer. We will retain your personal data after you cease to be a client of the firm based on our legal and regulatory requirements.
Your legal rights:
Under certain circumstances, you have rights under data protection laws in relation to your personal data.
You have the right to:
Request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected. We may need to verify the accuracy of the new data you provide to us.
Request deletion of your personal data.
We reserve the right to refuse to erase information that we are required to retain by law or regulation, or that is required to exercise or defend legal claims.
Request restriction of processing of your personal data.
Request the transfer of your personal data
Withdraw consent at any time. This is particularly important where we are relying on consent to process your personal data. If you withdraw your consent, we may not be able to provide certain services to you.
If you wish to exercise any of the rights set out above or require further explanation, please send your enquiry to info@aandalaw.co.uk
No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unreasonable, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
Time limit to respond:
We try to respond to all legitimate data access requests within one month. If your request is particularly complex or you have made a number of requests, it could take longer. In this case, we will notify you and keep you updated.
Delivery of data request:
All requests will be dealt with electronically unless in exceptional cases.
Security of data:
While we retain your personal data, we will ensure that it is kept securely and protected from loss, misuse or unauthorised access and disclosure. Once the retention period has been reached, your personal data will be permanently and securely deleted and destroyed.
Access to personal information:
You can find out if we hold any personal data about you by making a ‘subject access request’. If you wish to make a subject access request, please contact: – info@aandalaw.co.uk
Who can you complain to?
If you are unhappy about how we are using your information or how we have responded to your request, then initially you should contact the data protection officer via info@aandalaw.co.uk. If you remain unhappy with our response then you can contact the Information Commissioner’s Office, details available at www.ico.org.uk.