Privacy Policy
Sandsford Law Ltd
Effective Date: 01/09/24
We, at Sandsford Law Ltd (“we,” “our,” or “us”), are committed to protecting your privacy and handling your personal data responsibly and in compliance with the applicable laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how we collect, use, store, and share your personal information when you interact with us, including through our website, during consultations, and as part of our legal services.
1. Who We Are
Sandsford Law Ltd is a law firm based in the UK,
We are registered with the Information Commissioner’s Office (ICO) under the Data Protection Act 2018.
2. The Personal Data We Collect
We may collect and process the following types of personal data:
- Identity Data: Full name, date of birth, gender, and other identifiers.
- Contact Data: Address, email address, phone number.
- Financial Data: Bank account details, payment information.
- Case-Specific Data: Information related to legal services, including case details, witness statements, court documents, and communications.
- Immigration Data: Information relating to immigration status, visa applications, nationality, and residency details.
- Wills & Probate Data: Information about your estate, assets, executors, beneficiaries, and any other relevant information to process your will or probate.
- Debt Collection Data: Information regarding outstanding debts, debtor information, and financial standing.
3. How We Collect Your Personal Data
We collect personal data in several ways, including:
- Direct interactions: You may provide personal information by filling out forms, engaging with us via email or phone, or in person during consultations.
- Third parties: We may receive information from other professionals (such as accountants, banks, or other solicitors), public authorities, and institutions relevant to your case.
- Automated technologies: When you use our website, we may collect technical data such as your IP address, browser type, and usage data through cookies.
4. How We Use Your Personal Data
We will use your personal data for the following purposes:
- To provide legal advice and services in the areas of Wills & Probate, Debt Collection, Housing Disrepair, Litigation, and Immigration.
- To communicate with you regarding your case, respond to inquiries, and arrange meetings.
- To process payments and manage fees.
- To comply with legal and regulatory obligations.
- To manage risks and ensure legal compliance (e.g., money laundering checks).
5. Lawful Basis for Processing
We process your personal data based on the following lawful grounds under the UK GDPR:
- Contractual necessity: To perform our contract with you or to take steps at your request prior to entering into a contract.
- Legal obligation: To comply with legal and regulatory requirements.
- Legitimate interests: To provide and improve our services, prevent fraud, and ensure the security of our services and data.
6. How We Share Your Data
We may share your personal data with third parties under the following circumstances:
- Service providers: We may share data with third-party service providers, including IT services, accountants, barristers, and other legal professionals.
- Regulatory authorities: We may be required to share data with the Solicitors Regulation Authority (SRA), HM Courts & Tribunals Service, and other government bodies or law enforcement agencies.
- Others involved in your case: Including opposing solicitors, witnesses, or experts relevant to the legal matter.
We will ensure that any third party with whom we share your data also complies with data protection laws.
7. Data Security
We take appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, or disclosure. These measures include encryption, firewalls, access controls, and regular data security audits.
8. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Typically, we retain client data for 6 years after the conclusion of the matter or case unless a longer retention period is required by law.
9. Your Data Protection Rights
Under data protection law, you have rights including:
- Right to access: You can request a copy of your personal data held by us.
- Right to rectification: You can request correction of any inaccurate or incomplete data.
- Right to erasure: In certain circumstances, you can request the deletion of your data.
- Right to restrict processing: You can ask us to stop or restrict the processing of your data.
- Right to data portability: You can request that we transfer your data to another service provider.
- Right to object: You can object to the processing of your data where we are relying on legitimate interests.
If you wish to exercise any of your rights, please contact us at dpo@sandsfordlaw.co.uk.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on our website and where appropriate, notified to you by email or other means.
11. Contact Information
If you have any questions about this Privacy Policy or our data handling practices, please contact us at:
Sandsford Law Ltd
24 Greek St
Stockport
SK3 8AB
dpo@sandsfordlaw.co.uk
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe that we have not complied with data protection laws in handling your personal data.
Â