• Biographical details (name, job title and other information about you or your role)

• Contact details (both private and work, where appropriate)

• Financial details (such as personal bank account details and records of transactions with us including invoices and credit notes)

• Records of communications with us (including emails, call history and audio/video recordings, where agreed with you in advance)

• If you’re supplying to us personally, we’ll usually get your personal data directly from you

• If you work for a supplier, we may get your personal data from your colleagues

• Managing the supplier relationship

• Processing payments
‍

There are six available legal grounds for using personal data. The grounds relied upon by us for the above purposes are:

• If you’re supplying to us personally, we’ll use your personal data to perform our obligations and exercise our rights under our contract with you

• If you work for a supplier, we’ll use your personal data to manage our relationship with the supplier and obtain their services in line with our legitimate interests in doing so

• In any case, we’ll use your personal data for our legitimate interests in ensuring the security and stability of our systems (if you are given access to them for any reason)
‍

In addition to our staff (which may include self-employed consultants) and those providing technical services to us (such as cloud service providers that host our business systems), we may share your personal data with:

• Our regulator, the Solicitors Regulation Authority
• Our outsourced regulatory compliance consultant
‍

We retain personal data relating to our suppliers and those working for them for the duration the contract under which any goods or services are supplied and for a period of 6 years thereafter.

We retain invoices, remittance notes and supporting records for 6 years from the relevant invoice or credit note date.
‍