Castle Hill House
12, Castle Hill
Who We Are
- We are Windsor Chambers, 12, Castle Hill, Windsor, SL4 1PD.We are registered on the Information Commissioner’s Office Register of Data Controllers and act as a data controller. This means that we are responsible for deciding how we hold and use personal information about you.
Purpose of Policy
- The purpose of this policy is to explain your rights and our obligations in relation to data processing and personal information, and how we ensure your privacy is protected. It is also to comply with our legal obligations under the Data Protection Act and Regulation (EU) 2016/679, which is referred to as the General Data Protection Regulation (‘GDPR’).
Information Provided By You
- We may ask you to provide personal information when you provide us with instructions or sign up to receive any marketing communications from us, including registering for events (such as seminars run by Chambers). We will not collect personal details from you without your knowledge and consent. The information you provide to us may be used to contact you through post or email.
Information Collected By Us
- Chambers collects a variety of personal information, including:
- Personal details (such as your name, address and telephone number), social circumstances;
- Data that is referred to, under Article 9 of the GDPR, as “special category” data (in other words, data on a person’s racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health, sex life or sexual orientation);
- Official documents, as and when required, such as passports, identity cards, official decisions by government bodies relating to your case (such as, for example, home office decision letters);
- Bank details;
- Computer details, such as IP addresses;
- Criminal records, including convictions; and
- Other personal information required for our provision of legal services, including personal data that is specific to the individual case concerned.
- The same types of data may also be obtained from third parties, such as courts and tribunals, other members of Chambers, individuals involved with your case (such as your solicitor or experts), government departments and regulators.
to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
- No.8 Chambers website may occasionally link to other sites which we deem relevant to our users. We are not responsible for the accuracy or reliability of the content on third party websites, nor do we necessarily endorse the sites and their content.
How We use Your Information
- We take your privacy, and the need to protect it, very seriously. We will never, unless required to do so by law, disclose, share or sell your personal information without your explicit consent. We will process the personal information about you that we collect, store and use for the following purposes:
- to enable us to comply with our contractual, legal and regulatory obligations;
- in the case of data that is not special category data under Article 9 of the GDPR, to pursue legitimate interests of our own or those of third parties, provided that your interests and fundamental rights do not override those interests;
- to allow us to provide legal services to you;
- to carry out identity verification checks (for example, in direct access cases);
- to update and enhance our client records; and
- to send you publications, event information and marketing communications.
- We will only use your personal information for the purpose(s) for which it was originally collected, unless we reasonably consider that we need to use this data for another reason and that reason is compatible with the original purpose(s). If we need to use your personal information for a different purpose we will notify you and explain the legal basis which allows us to use the data for that alternative purpose.
Consequences of Not Providing Your Personal Information
- You are not obliged, in any way, to provide your personal information to us. However, given that this information is required for us to provide you with our services, or to fulfil our legal obligations, we will not be able to provide you with our services without this information.
- The personal information we obtain may be disclosed to our employees, members of chambers, or agents, only in so far as it is reasonable to do so and for the purposes of this policy. In addition, we may disclose your personal information:
- If we are required to do so by law;
- If such disclosure is, of course, in connection with any legal proceedings or prospective legal proceedings (for example, courts and tribunals in which your case might be heard), and such disclosure is reasonably required;
- In order to establish our legal rights, or to exercise or defend those rights.
Security of Your Personal Information
- We will take all reasonable, and proportionate, organisational and technical measures to prevent the misuse, loss or alteration of your personal information.
Retention of Data
- We will only retain your personal information for as long as is necessary, and to fulfil the purposes for which we collected it (including for the purposes of satisfying any legal or regulatory obligations to which we are subject). Various retention periods can apply for different categories of case depending upon the law and issues involved. We will retain you data taking into account:
- the nature of the data, including its sensitivity;
- any appropriate legal requirements, including regulatory obligations and limitation periods (for example, relating to professional negligence claims);
- the risk of retaining the data – including from potential unauthorised use or disclosure; and
- whether there are any other means of fulfilling our legal and regulatory obligations which do not involve unnecessary processing of your data.
- Where you have consented to us using your details for direct marketing, we will keep such data until you notify us otherwise, or you withdraw your consent.
- Chambers will not process your data outside of the EEA unless such processing is in compliance with the GDPR, for example, that there is specific consent from you, and the processing is subject to an agreement specifically approved by the EU Commission, such as the EU-US Privacy Shield.
- By law you have the following rights.
- You can be informed of:
- a) the personal information we hold about you;
b) the purposes of the processing;
c) the categories of personal information concerned;
d) the recipients to whom the personal information has, or will, be disclosed;
e) how long we intend to store your personal information for;
f) if we did not collect the information directly from you, details about the source.
- You can request access to your personal information (generally referred to as “data subject access request”). This will enable you to receive a copy of the personal information we hold about you.
- You can request correction of any of the personal data that we hold about you. This enables, for example, correction of any inaccurate or incomplete information.
- You can request erasure of your personal information. In other words, you can ask us to delete personal information (including all of your data), provided that there is no good reason for us continuing to process that data (such as a legal obligation under which we are bound).
- You can object to the processing of your personal information where we are relying on a legitimate interest, and there is something about the specific situation which makes you want to object to processing on this basis. You also have the right to object where we are processing your personal information for direct marketing purposes.
- You can request the restriction of processing of your personal information. In other words, you can ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
- You can request the transfer of your personal information to another party.
- You can complain to us, or to a supervisory authority.
- If you would like to request to access the personal information we hold about you, or to exercise any of your rights under this policy, we will not charge you a fee for so doing. However, if your request is excessive or clearly unfounded then we may charge a reasonable fee, or simply refuse to comply with that request. If we receive a request from you then we may need to require you to verify your identity before acting on the request (to ensure that your data is protected and kept secure). If you wish to exercise any of your rights as a data subject please do not hesitate to contact Chambers.
Changes to Policy
Jurisdiction and Choice of Law
- Any legal issues arising out of, or in connection with, this policy are subject to the exclusive jurisdiction of the courts of England and Wales. The applicable law is also, exclusively, that of the law of England and Wales.
- Copyright of all information published on our website, including photographs and images, belongs to Marc Beaumont