1. Privacy Statement
This Statement of Privacy applies to the Commercial Legal Centre website, Commercial Legal Centre’s Terms of Business and any agreement entered into with Commercial Legal Centre and governs data collection and usage. By using Commercial Legal Centre’s website, you consent to the data practices described in this statement.
2. Our Privacy Promise
3. Data Protection Laws Are Changing
This notice sets out some of your rights under the new laws which came into effect on 25th May 2018. We will continue to review and update it as and when changes come in to effect.
4. Collection of your Personal Information
If you choose to instruct Commercial Legal Centre to carry out legal services on your behalf we will ask you to provide information about you for security, identification and verification purposes. This is personally identifiable information, such as your e-mail address, name, home or work address or telephone number. How the information will be used is set out on our Terms of Business. When providing information about others you must ensure you have their consent or are otherwise entitled to do so. Commercial Legal Centre will retain information collected about you for as long as permitted for legitimate business purposes and to meet any legal obligations.
5. This is what we use your personal information for:
6. Personal information about you:
We may collect information about you or your business from some or all of these sources:
This information will be retained for the duration of the period during which we provide you with legal services or a period of ten years, whichever is the longest.
Commercial Legal Centre does not collect, use or disclose sensitive personal information, such as race, religion or political affiliations, without your explicit consent.
7. Who we will share your personal information with:
8. Sending Data Outside of the European Economic Area (EEA):
We do not currently send your data outside of the EEA to follow your instructions, to comply with legal duties or to work with our agents, advisers and suppliers who Commercial Legal Centre uses to help run our business and legal services. If in future we do transfer information outside of the EEA we will ensure that the receiver agrees to only use your personal data in accordance with our instructions that it is protected in the same manner as if it was being used within the EEA. To do this we will adopt the following safeguards:
9. How long do we keep this information about you?
We keep information in line with our retention policy. These retention periods are in line with the length of time we need to keep your personal information in order to provide you with legal services and our need to meet any legal, statutory and regulatory obligations. These reasons can vary from one piece of information to the next. In all cases our need to use your personal information will be reassessed on a regular basis and information which is no longer required will be disposed of securely.
10. If you do not wish to give us personal information:
We may need to collect personal information about you. If you choose not to give us this personal information it will prevent us from being able to meet our obligations. It may also mean that we are unable to perform the legal services required and may result in Commercial Legal Centre stopping the provision of legal services to you. Any data collection that is optional will be made clear at the time of collection.
11. Accuracy of information
In order to provide the highest level of client service possible, we need to keep accurate personal data about you. We take reasonable steps to ensure the accuracy of any personal data or sensitive information we obtain. We ensure that the source of any personal data or sensitive information is clear and we carefully consider any challenges to the accuracy of the information. We also consider when it is necessary to update the information, such as name or address changes and you can help by informing us of these changes when they occur.
12. Data subject rights:
The General Data Protection Regulation (GDPR) grants you (“the “data subject”) the right to access particular personal data that we hold about you. This is referred to as a subject access request. We shall respond promptly, and certainly within one calendar month from the point of receiving the request and all necessary information from you. Our formal response shall include details of the personal data we hold about you, including the following:
You shall have the right to obtain from us, without undue delay, the rectification of inaccurate personal data we hold concerning you. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
You shall have the right to obtain from us the erasure of personal data concerning you without undue delay where not required to be maintained by us by law. If you do not wish us to hold the minimum personal data required for us to provide legal services we will cease acting for you. In these circumstances Commercial Legal Centre will retain the information required by law for the relevant period.
Subject to exemptions, you, the data subject, shall have the right to obtain from us restriction of processing where one of the following applies:
We shall communicate any rectification or erasure of personal data or restriction of processing as described above to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. We shall provide you with information about those recipients if you request it.
You shall have the right to receive your personal data, which you have provided to us, in a structures, commonly used and machine-readable format and have the right to transmit this data to another controller, without hindrance from us.
You shall have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you, including any personal profiling; unless this relates to processing that is necessary for the performance of a task carried out in the public interest or an exercise of official authority vested in us. We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing, which override the interest, rights and freedoms of you or for the establishment, exercise or defence of legal claims.
We do not carry out any automated processing, which may lead to an automated decision based on your personal data.
13. Invoking your rights
If you would like to invoke any of the above data subject rights with us, please write to us at Commercial Legal Centre LLP, 36 Tay Street, Perth, PH1 5TR addressing your letter for the attention of our Data Protection Administrator or email the same to [email protected]
14. Security of your Personal Information
Commercial Legal Centre undertakes to protect your personal information from unauthorised access, use or disclosure. Commercial Legal Centre secures the personally identifiable information you provide on computer servers in a controlled, secure environment, protected from unauthorised access, use or disclosure.
15. Changes to this Statement
Commercial Legal Centre will occasionally update this Statement of Privacy to reflect company and customer feedback and to meet the requirements as set out in law. We encourage you to periodically review this Statement to be informed of how we are protecting your information.
16. Contact Information
We welcome your comments regarding this Statement of Privacy. If you believe that Commercial Legal Centre has not adhered to this Statement, please contact us at [email protected]. We will use commercially reasonable efforts to promptly determine and remedy the problem.