2019: The year in review
Managing Partner, Simon Leighton, recalls the highs…Read More › ›
We, Croftons Solicitors LLP, are the ‘controllers’ of the information that we collect about you which may include personal data. Being controllers of your personal data, we are responsible for how your data is processed. The word ‘process’ covers most things that can be done with personal data, including collecting, storing, using and destroying that data.
This statement explains why and how we process your data, and explains the rights you have around your data, including the right to access it and to object to the way it is processed.
We are a law firm and our contact details are:
Croftons Solicitors LLP
0161 214 6180
Our Data Protection Coordinator is Mike Nuttall.
‘Personal data’ is any information that relates to a living, identifiable person. This data can include your name, contact details, and other information we gather as part of our relationship with you. It can also include ‘special categories’ of data, which is information about a person’s race or ethnic origin, religious, political or other beliefs, physical or mental health, trade union membership, genetic or biometric data, sex life or sexual orientation. The collection and use of these types of data is subject to strict controls. Similarly, information about criminal convictions and offences is also limited in the way it can be processed.
We are committed to protecting your personal data, whether it is ‘special categories’ or not, and we only process data if we need to for a specific purpose, as set out below. We collect your personal data mostly through our contact with you, and the data is usually provided by you, but in some instances we may receive data about you from other people/organisations. We will explain when this might happen in this notice.
This statement contains more information about:
As an individual we will only send general invitations or updates to you if you have provided your consent for us to do so. If you represent an organisation we may write to you from time to time unless you have told us that you do not wish to receive further mailings. Our marketing and briefing emails will provide you with the option to opt out of or manage future mailings.
Where we need to collect personal data by law, or under the terms of a contract we have with you and you do not provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may stop providing that service but we will notify you if this is the case at the time.
Our clients, the courts and other legal professionals may include personal data about individuals that is relevant to a legal matter that we are working on. We are committed to protecting all personal data that we hold and will treat this data with the same care that we treat data held about our clients.
We may also process your data where the data we are processing has already been made public by you, where we are establishing/exercising/defending a legal claim, or where you have provided us with your explicit consent to process your data.
At times, we may further process data which we have already collected. We will only do this if the new purpose for processing it further is compatible with the original purpose that the data was collected for. We will tell you about any further processing before carrying it out.
For some processing purposes we share your data with third parties:
Your personal data is held in both hard copy and electronic formats.
Electronic data, including emails, are stored in servers, which are hosted in the UK by our IT providers, Converge Technology specialists. Converge manage our services in compliance with the ISO27001 2013 standard.
If we are providing legal services to you we will notify you about how long we will keep your data for in our terms of engagement or when we close your matter with us. Our document retention approach is based upon statutory requirements, limitation periods or good business practice. Once the applicable retention period expires, unless we are legally required to keep the data longer, or there are important and justifiable reasons why we should keep it, we will securely delete/destroy the data.
As a data subject, you have the following rights in relation to your personal data processed by us:
If we are relying on your consent to process your data, you may withdraw your consent at any time.
For more information on your rights, if you wish to exercise any right or for any queries you may have or if you wish to make a complaint, please contact our Data Protection Coordinator at firstname.lastname@example.org or 0161 214 6180
You have a right to complain to the Information Commissioner's Office (ICO) about the way in which we process your personal data. You can make a complaint on the ICO’s website https://ico.org.uk.
Croftons is the trading name of Croftons Solicitors LLP, a limited liability partnership registered in England and Wales with number OC343375. The term ‘partner’, if used, denotes a member of Croftons Solicitors LLP or a senior solicitor of Croftons Solicitors LLP with equivalent standing and qualifications. A full list of members is open to inspection at the office. Croftons is authorised and regulated by The Solicitors Regulation Authority (SRA) number 508041. Croftons has its principal place of business at The Lexicon, Mount Street, Manchester, M2 5FA.