Our Privacy Statement tells you what will happen to any personal data that you provide to us. The information covers clients of the firm as well as general visitors to the website.
For ease of use we have split this Privacy Statement into three sections with those being General, Website Use and Contact Details. Quickly navigate to a question by clicking on a link below, or scroll down to view the full statement.
What is the purpose of this privacy statement?
The purpose of this privacy statement is to inform individuals of how we process the personal data they provide us with and the rights of the individual, or ‘data subject’.
What legislation governs how my data is processed?
The rights of an individual are governed by the General Data Protection Regulations (GDPR) and more details about those rights can be found further in this statement. The regulatory body that oversees GDPR is the Information Commissioners Office (ICO).
What are the obligations of Devonalds Solicitors under GDPR?
GDPR states that an entity collecting your data and deciding the purpose for which it will be used is a Controller. A Controller is bound to act in accordance with GDPR and protect an individual’s data as set out in the regulations.
As a data Controller we must provide you with the purpose for processing your data, the lawful basis on which the data is held and also provide contact details for you to be able to contact us.
Why does Devonalds Solicitors need to collect my data?
The purpose of collecting your data is to satisfy your legal instruction . In becoming a client of the firm you will be entering into a legal contract with Devonalds Solicitors and this contract is the lawful basis under which we will process your data .
What data of mine will be processed?
GDPR categorises data as either Personal Data or Special Category Data.
Personal Data is classed as anything that, on its own, can be used to identify an individual directly or indirectly. This includes things like your name, address, date of birth, National Insurance Number, email address, vehicle registration as you would expect, but also goes further to include online identifiers (such as an email or IP address) and location data, if it is gathered.
WE WILL NEED TO PROCESS PERSONAL DATA TO CARRY OUT YOUR LEGAL MATTER.
Special Category Data is information GDPR defines as being more sensitive and includes data relating to an individual’s race, ethnicity, political beliefs, health, genetics and biometrics. Special Category Data can be required in certain legal matters.
WE WILL GET SPECIFIC CONSENT FROM YOU IF WE NEED TO PROCESS SPECIAL CATEGORY DATA.
Who will Devonalds Solicitors share my data with?
In order to comply with your instructions in respect of your legal matter it will usually be necessary to share your personal information with third parties, however we will not send your data overseas. Categories of third parties we may need to share your personal information with can include:
Government departments; financial institutions; referrers; insurers; other legal representatives instructed in your matter; utility companies; medical or other relevant experts; estate agents; asset holders; third parties relevant to the progression of your matter.
Who we will need to share information with will depend on the nature of your matter and the person handling your matter can clarify which of the above is likely to apply to this instruction.
What rights do I have under GDPR?
Under GDPR individuals have the following rights:
The right to be informed
The right of access
The right of rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision making and profiling
You can exercise any of these rights verbally or in writing. More information about these rights are below.
The Right to be Informed
This is your right to be told that we will collect and process your personal data, as well as being informed of all other information in this document.
The Right of Access
This is your right to request access, known as a Subject Access Request, to the personal data we hold in relation to you.
The Right of Rectification
This is your right that we rectify any data we hold about you that is inaccurate or incomplete.
The Right to Erasure
This is your right for personal data that is no longer relevant to be erased from our systems. We are legally obligated to retain certain data for specific time periods.
The Right to Restrict Processing
This is your right to stop the processing of your data. Whilst processing is stopped your data will still be stored by the firm.
The Right to Data Portability
This is your right to have the data we hold in an electronic format.
The Right to Object
This is your right to object to your data being processed. If this right is exercised your data may still be processed if there is a compelling reason for doing so.
Rights in Relation to Automated Decision Making and Profiling
We do not use automated decision making or profiling, but you are able to request human intervention if you feel an automated decision made about you is incorrect.
Am I under a contractual or statutory requirement or obligation to provide data?
By becoming a client of the firm you are entering into a contract with the firm for the provision of legal services but you do so of your own free will.
Do you use automated decision making systems or data profiling?
We do not use automated decision making systems or use data profiling. If this changes you will be informed.
How long will my data be held for?
Depending on the nature of your matter the length of time we will be required to hold information relating to it will vary.
Have you provided us with personal data for anyone other than yourself/yourselves?
If you provide us with any personal data for any person(s) other than yourself/yourselves then you must provide contact details for the relevant person(s) so we can make them aware of their privacy rights under this privacy statement.
WEBSITE USE PRIVACY STATEMENT
What will you do with personal data provided via your website?
By providing personal information such as your name and e-mail address via the forms on our website, www.devonalds.co.uk, you agree to us contacting you with regard to the information provided.
Some forms on our website also include a check box asking you for permission to add you to our mailing list. This is an opt-in mailing list and your personal information will be used solely by us (and all such emails include a link for opt-out).
How do you use personal data provided via your website?
We use the data you provide via this website to:
communicate with you , for example: we use contact details such as email address or phone number when responding to enquiries made via online forms
monitor website trends , for example: we use Google Analytics to help us aggregate traffic so we can monitor how the website is being used
operate our business more effectively , for example: we seek feedback and use this to help improve our service
On what basis, or 'lawful reason', do you process data provided via the website?
We operate on the basis of "consent" when sending newsletters (you won't get sent a newsletter unless you have explicitly opted in to receive one). We operate on the basis of "legitimate interest" when communicating with you in other ways (e.g. when responding to your enquiry).
How long do you keep personal data provided via your website?
Personal data may be stored by the website for a period of up to 90 days after which time it is removed automatically.
Do you transfer any personal data overseas?
From time to time we may pass personal data such as your name and email address to other services that we use to send out newsletters and other communications (both electronic and print). However, your personal data will remain in the EU or countries considered by the EU to have equivalent policies such as Jersey, Guernsey, Switzerland, New Zealand and Canada. Companies based in the USA that have certified with the EU-US Privacy Shield
programme are also considered to be permitted destinations by the EU (this includes popular US products like Gmail, DropBox and MailChimp).
Do you use Google Analytics?
We use Google Analytics to monitor how our website is being used so we can make improvements. Our use of Google Analytics requires us to pass to Google your IP address (but no other information) - Google uses this information to prepare site usage reports for us, but Google may also share this information with other Google services. In particular, Google may use the data collected to contextualize and personalize the ads of its own advertising network. Related information:
How can I contact Devonalds Solicitors?
Should you need to contact us in respect of this notice then please use the contact details below.
Post: Devonalds Solicitors, York House, Courthouse Street, Pontypridd, CF37 1JW
Tel: 01443 404700
Fax: 01443 404555
Who do I contact to make a complaint?
In the first instance we hope you will contact us directly with any questions or complaints (contact details are displayed prominently on this website). However, legal rights regarding privacy are the remit of the Information Commissioners Office (ICO) and you can contact them via the below.
Post: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
Fax: 01625 524 510