Privacy Notice

Rutherfords Legal LLP (“We”) are committed to protecting and respecting your privacy. When you share your information with us we want you to be confident that we look after this information securely and only use or share it in the ways set out in this Privacy Notice.

We are the data controller of the personal data which we process and therefore we are responsible for ensuring that our systems, processes, suppliers and staff comply with the General Data Protection Regulations (GDPR).

This Privacy Notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the contents of this Privacy Notice carefully to understand our views and practices regarding your personal data and how we will treat it.

We have appointed a Data Protection Officer (DPO) to oversee compliance with data protection laws and this Privacy Notice, together with providing guidance and advice to the firm as required. If you have any queries about this Privacy Notice or how we handle your personal information then please contact our DPO, Stephen Wengraf, at [email protected] or by post at Rutherfords LLP, Ventura House, Ventura Park Road, Tamworth, Staffordshire, B78 3HL.

What information do we collect and process?

• Your ‘personal data’ (such as name, address, contact information, ID (passports, driving licences, utility bills etc), bank details etc.). Personal data is information which relates to an individual and from which they can be identified either directly or indirectly through other data which the firm has or is likely to have in its possession;
• Information relating to your matter;
• A record of our contact with you (for example telephone notes, emails, CCTV etc);
• Information that you provide by filling in forms on our website www.rutherfordslegal.com;
• Similar to most websites, our website may use cookies. These are small text files which are placed on your device to allow us to see patterns in visitor behaviour and enhance your experience of our website. We may also collect information about your computer, including your IP address, operating system and browser type. Cookies do not allow us to identify you specifically and no personal data is gathered about you.
• We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
• We do not collect any special categories of personal data about you (including details about race, ethnicity/ religion, sexual orientation, political opinions etc.)

Why do we collect this information?

• To set up and manage your matter;
• To perform our obligations arising from any contracts entered into between you and us;
  • To develop and improve our services;
  • To notify you about changes to our services;
  • To make sure that we comply with the laws which govern our services;
  • To ensure that the content from our website is presented in the most effective manner for you and for your computer.
  • To provide you with information or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.

If you give us information about someone else then we expect that:

• You have their permission;
• The other person understand how we will use the information;
• The other person has no objection to us holding and using their information

How do we process your information?

The GDPR require us to explain what ‘legal bases’ justify us processing your information. These are as follows:

• Contract – to set up and manage matters and keep matters up-to-date;
• Legal/ Regulatory Obligations – to confirm your identity and meet our legal and regulatory obligations;
• Legitimate Interest – this means that the purpose is essential or relevant to our business. These activities never take priority over your interests and rights.

We do not rely upon consent as a legal basis for processing your personal information other than in relation to keeping you informed about our other services. We will ask you for your consent in this respect at the commencement of your matter. If you have provided your consent you have the right to withdraw this at any time by contacting our DPO, Stephen Wengraf, at [email protected] or by post at Rutherfords LLP, Ventura House, Ventura Park Road, Tamworth, Staffordshire, B78 3HL.

What happens if you choose not to or you are unable to provide us with your personal information?

If you fail to provide us with certain personal information when requested we may not be able to act for you or we may be prevented from complying with our legal obligations. We will ask you directly for most of this information but we may sometimes need to collect data from external sources.

Where is your information stored?

All of the information which you provide to us is stored on our secure servers. We will keep your information safe and secure and we will regularly review the rules on how long we should keep this for.

Unfortunately, the transmission of information via the internet, including emails, is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website or sent via email. Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. If you have concerns about the security of website data or emails then you may prefer to telephone or write to us.

We’ll keep your personal data if you:

• Instruct us and we have an ongoing matter for you;
• You have enquired about our services;
• You have made a complaint

How long do we keep hold of your information?

We will retain your personal data for six years in accordance with our legal and regulatory obligations. We are obliged to retain your personal data for longer periods in certain cases but we will notify you if we intend to do so.

If we are holding your information in relation to a complaint then we will destroy this once the complaint file has been closed.

When we no longer need your data we will destroy this safely and securely in accordance with our destruction procedures.

Who might we share your information with?

We will only share your information with other organisations specifically in relation to the matter in which we are instructed to act on your behalf (for example government bodies, law enforcement agencies, legal advisors etc) Information which you provide to us will be kept confidential and will not be disclosed to any other third parties without your express consent.

We sometimes change the companies we use or appoint to provide services. When we appoint a company to provide a service on our behalf we always ensure that they must meet our strict requirements.

In accordance with Money Laundering legalisation, we are obliged to confirm some of our clients’ identities. We may therefore supply your information to a third party electronic identity search provider to help us confirm your identity.

Transfers outside of the EEA

Occasionally we may need to transfer data out of the EEA to countries who may not have the same standard of data protection. We use safeguards to ensure that the data is transferred securely in line with UK data protection standards.

What are your rights?

By giving us your data you become a ‘data subject’ and therefore you have the following rights in respect of the processing of your personal data:

• To be informed how we process your data;
• To have data corrected or updated if there are inaccuracies or if it is incomplete;
• Object to us processing your personal information;
• To restrict how we process your personal information;
• To have your information erased or ‘the right to be forgotten’ in certain circumstances;
• To access your personal information and request details of how we process it;
• To move, copy or transfer your data (known as ‘data portability’)

How can I access the information which you hold about me?

As mentioned above, you have the right to access the personal information which we hold about you under the GDPR. This is called a ‘Subject Access Request’. This request is usually free of charge. For security reasons, you must give us some details before we can disclose our records. If you wish to make a Subject Access Request or make any requests under any other of your rights then please contact our DPO, Stephen Wengraf, at Rutherfords LLP, Ventura House, Ventura Park Road, Tamworth, Staffordshire, B78 3HL or email him at [email protected].

We will aim to respond to you within 30 days but if the matter is complex and we need more time then we will let you know.

You have the right to make a complaint at any time to the relevant supervising authority for data protection issues who in the UK is Information Commissioner’s Office (“ICO”). You can write to them at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF or you can visit their website at www.ICO.org.uk.

Changes to our Privacy Notice

Any changes we may make to our Privacy Notice in the future will be posted on this page and, where appropriate, you will also be notified in writing.

Feedback

Questions, comments and requests regarding this Privacy Notice are welcomed and should be addressed to our DPO, Stephen Wengraf, at Rutherfords LLP, Ventura House, Ventura Park Road, Tamworth, Staffordshire, B78 3HL or email him at [email protected].