• Biographical details (name, job title and other information about you or your role)

• Contact details (both private and work, where appropriate)

• Business information (which may or may not include your personal data)

• Financial details (such as personal bank account details and records of transactions with us including invoices and credit notes)

• Records of communications with us (including emails, call history and audio/video recordings, where agreed with you in advance)

• Other personal data which is provided to or obtained by us, for example, by reviewing documents or from third party information sources

• You may provide us with your personal data where we’re acting for someone else but have a need to liaise with you

• We may get your personal data from your colleagues, other professional advisers or other parties involved in a matter

• Carrying out our client’s instructions and managing client matters, for example, negotiating contracts, advising on disputes (whether or not involving a court or tribunal) or facilitating transactions

• Complying with our legal and professional obligations
‍

There are six available legal grounds for using personal data. The grounds relied upon by us for the above purposes are:

• We’ll use your personal data to provide our services to our client based on our legitimate interests in complying with our instructions (subject to our legal and professional obligations) and also the legitimate interests of our client in instructing us to advise them

• We’ll also use your personal data to comply with our legal obligations as a regulated law firm

• In any case, we’ll use your personal data for our legitimate interests in complying with our legal and professional obligations, reviewing and improving the quality of the services we provide and how we provide them, sharing know-how internally and training our team and ensuring the security and stability of our systems

‍

In addition to our staff (which may include self-employed consultants) and those providing technical services to us (such as cloud service providers that host our business systems), we may share your personal data with:


• Our client and its staff, as appropriate
• Other professional advisers involved in a matter, as necessary
• Enquiry agents, private investigators and process servers, as necessary
• Government agencies such as HMRC, courts, tribunals, and law enforcement agencies, as appropriate
• Our regulator, the Solicitors Regulation Authority
• Our outsourced regulatory compliance consultant
‍

We retain client files for 7 years from the date we close them (or 7 years from the date of initial contact if a matter is aborted). We may retain files for longer periods if requested by you or where we’ve a good reason to retain them for longer.

‍