PRIVACY NOTICE
This privacy policy sets out how Baker Chase Solicitors (a trading name of Baker Chase LLP) uses and protects any information that it receives from this website and from its clients.
Baker Chase Solicitors are committed to ensuring that your privacy is always protected. If we request for you to provide any information by which you can be identified when using this website, your information will only be used in accordance with this privacy notice.
What we collect
We may collect the following information from you:
- Your name
- contact information including email address
- demographic information such as postcode, preferences and interests
- other information relevant to customer surveys and/or promotional offers
What we do with the information we gather
We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
- Internal record keeping
- To improve our products and services
- To notify you of any new products, services, special offers or other information which we think may be of interest to you.
- From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or by post. We may use the information to customise our website according to your interests.
Security
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have suitable processes and procedures in place to safeguard and secure any information that we collect from you via our website.
How we use cookies
A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information relating to your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to the needs of our prospective clients. We only use this information for statistical analysis purposes.
Overall, cookies help to provide you with a better ‘customer journey’ when visiting our website by enabling us to monitor which pages are of interest to you. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you so prefer. This may prevent you from accessing all parts of our website.
Links to other websites
Our website is linked to our parent site, www.bakerchase.com which adheres to the same policy statement.
Controlling your personal information
You may choose to restrict the collection or use of your personal information in the following ways:
- whenever you are asked to fill in a form on the website, let us know in your message that you do not want the information to be used by anybody for direct marketing purposes
- if you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to us or emailing us at info@bakerchase.com.
We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting.
You may request details of personal information which we hold about you under the Data Protection Act 1998. If you would like a copy of the information held on you please write to 624-626 Stockport Road, Longsight, Manchester, M13 0SH or email us at info@bakerchase.com.
If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.
1). How your data will be processed
| Identity and Contact Details | Your personal data will be processed by Baker Chase Solicitors, a trading name for Baker Chase LLP (OC383129). For the purposes of the GDPR, Baker Chase LLP is the ‘Data Controller’. Baker Chase LLP is registered with the Information Commissioners Office under registration number ZA105188.
|
| Purpose of processing your data and how we will use your data | Your personal data will be processed for the purposes of providing legal services to you pursuant to your instructions. Your personal data could consequently be used to instruct third parties with a view of progressing your legal matter.
|
| Legal basis for processing | legitimate Interests |
| Legitimate Interests
|
For the provision of legal services |
| Data Category
|
Personal Data |
| Sharing your personal data | You should note that your personal data could be shared with the following:
Third Party Insurance Companies ATE Insurance Companies Hire Companies Medical Experts Treatment Providers Courts Engineers GP Surgeries / Hospitals Home Office Other professionals, such as an accountant, barrister etc, to progress you case.
Your personal data may also be shared with:
§ Our regulatory body, the SRA, for the purpose of monitoring and/or enforcing our compliance with any regulatory rules. § Other organisations where we are legally obliged to share your personal data (eg. if we receive a valid request from the police in the interests of detecting and preventing crime).
|
| Transfer of Data to a 3rd country and safeguard details
|
Your personal data will not be transferred to a third country. The safeguards that we have in place to ensure that this does not happen include, but is not limited to, the following:
|
| Retention Period
|
After the conclusion of your legal matter, we are legally obliged to store your personal data for a period of 6 years after which it will be permanently destroyed.
|
| Your right to withdraw consent | You have the right to withdraw your consent for us to process your personal data. To invoke this right of withdrawal, you must notify our DPO at the email address provided above. Due to the nature of our retainer, your withdrawal of consent to process your personal data would in essence mean that we would have to terminate our retainer. In light of this, we request that you read our terms of business letter for information on terminating our retainer.
|
| Your right to complain | You have the right to make a complaint if you have any grievance with the way your personal data has been processed. Any complaint should be made in writing to the firms DPO at the email address provided above. We will respond to your complaint within 5 working days, although we will make every effort to respond within 3 working days.
|
| Source of your personal data | We have received your personal data pursuant to instructions we have received from you.
|
| Statutory / contractual requirements | There are no known statutory or contractual requirements to process your data. Should, however, any such grounds become apparent at any time during the duration of our retainer, we will notify you immediately in writing.
|
| Automated decision making | Your personal data will not be processed as a consequence of automated decision making. All decisions relating to your personal data will be subject to informed decision-making pursuant to our legitimate aim to provide you with legal services
|
2). Access to your data
| Subject Access Request | You have the right to request for a copy of your personal data at any time. This is called a ‘Subject Access Request’. The first copy will be provided free of charge. Any further copies will incur an administrative charge of £50+VAT per copy. Any requests for access to your personal data should be addressed to our firms DPO, who will provide a copy of your personal data within 1 month of receipt. You should note that we will need to verify your identity before dispatching a copy of your personal data to you.
|
3). Rectification of your Data
| Request to Rectify inaccurate or incomplete personal data | If we hold any personal data on you which you consider to be inaccurate or incomplete, you can request, without undue delay, for your personal data to be rectified to the form in which you had intended for it to be processed. Any requests to rectify your personal data should be addressed to our firms DPO. Notification of rectification will be sent to you within one month unless the request for rectification is complex. In such cases, we will notify you of the expected time for rectification which should in any event be no longer than 3 months from the date of your request to rectify.
|
4). Erasure of your data (‘Right to be forgotten’)
| Request to erase personal data | You have a qualified right to request for your personal data to be permanently deleted without undue delay. You can engage your right to erase your personal data on one of the following grounds:
§ Your personal data is no longer necessary in relation to the purpose for which it was collected or otherwise processed; § You withdraw your consent for us to process your data (effectively terminating our retainer); § There are no overriding legitimate grounds for the processing; § Your personal data was unlawfully processed; § Your personal data must be erased to comply with a legal requirement; § Your personal data is processed in relation to the offer of information society services to a child
|
| When your request for erasure can be refused | You should note that your request of erasure of your personal data can be refused in certain circumstances. Your request for erasure can be refused where your personal data is processed for the following reasons:
§ To exercise the right of freedom of expression and information; § To comply with a legal obligation or for the performance of a public interest task or exercise of official authority; § For public health purposes in the public interest; § Archiving purposes in the public interest, scientific research, historical research or statistical purposes; or § The exercise or defence of legal claims
|
| Notifying third parties about the erasure of your personal data | If during the duration of our retainer, we had disclosed your personal data to any third parties, we will, after receiving a request for erasure, notify all third parties of your request for erasure. We will thereafter follow up our notification with a request for written confirmation of erasure.
|
5). Restriction of use of your data
| Request for restriction of use of your data | We are required to restrict the processing of your personal data in the following circumstances:
§ Where you have contested the accuracy of the personal data, we will restrict processing it until we have verified its accuracy; § When you have objected to the processing of your personal data and there are no legitimate grounds to counter your objection; § Where processing your personal data is unlawful and you have opted for restricting processing your data as opposed to erasure. § Where we no longer require your personal data but you require it to establish, exercise or defend a legal claim.
|
| Notifying third parties about the restriction of your personal data | If during the duration of our retainer, we had disclosed your personal data to any third parties, we will, after receiving a request for restriction, notify all third parties of your request for restriction. We will thereafter follow up our notification with a request for written confirmation of restriction.
|
6). Data Portability
| Your right to data portability | You are permitted to obtain and reuse your personal data for your own purposes across different services. This will allow you to move, copy or transfer your personal data from one IT environment to another in a safe and secure manner without any hinderance as to usability.
Your right to data portability only applies, however:
§ To personal data you have provided to us; § Where processing your data is pursuant to your consent for the performance of a contract; and § Processing of your data is carried out by automated means
Assuming you satisfy the above criteria, we will provide a copy of your personal data in a machine-readable format that can be easily transferrable. The format we can provide will naturally be restricted by our processing systems which may or may not be compatible with the processing systems of the organisation you are proposing to transmit your personal data.
Any requests for the data portability of your personal data should be addressed to our firms DPO, who will provide a copy of your personal data within 1 month of receipt unless the request is unduly complex. In such cases, we will notify you of the expected time for data portability which should in any event be no longer than 3 months from the date of your request.
|
7). Objecting to the Processing of your data
| Your right to object to the processing of your data | You can, at any time, object to the processing of your data, on grounds relating to your particular situation, if the processing:
§ Is based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling); § Involves direct marketing (including profiling); and § Is for the purposes of scientific/historical research and statistics
|
| Procedure for objecting to us processing your data | If you wish to object to us processing your data for one or more of the reasons stated above, you must do so in writing by emailing our DPO at info@bakerchase.com. Please make it explicitly clear that you are objecting to the processing of your personal data and the grounds for doing so. Our DPO will thereafter contact you to confirm our response in relation to your objection.
|
| Are we obliged to accept your objection to the processing of your data? | We are obliged to accept your any objection to the processing of your data, and thereafter stop processing your data, unless:
§ We can demonstrate that there are compelling legitimate grounds for the processing which override your interests, rights and freedoms; or § The processing of your data is required to establish, exercise or defend a legal claim.
You should note that we are legally obliged to stop processing your personal data for direct marketing purposes as soon as we receive an objection from you. We can not refuse your objection for this purpose.
|
8). Automated decision making and profiling
| Your rights relating to automated decision-making | We are obliged to provide safeguards to protect you from the risk that a potentially damaging decision is taken regarding the processing of your personal data without human intervention.
You have the right to avoid being the subject of an automated decision if it produces a legal effect (or a similarly significant effect) on you. In such cases, we are required to ensure that decisions of such magnitude involve human intervention, allow you to express your opinion and obtain an explanation of the decision, and, if need be, challenge any such decisions.
|
| Does your right apply to all automated decisions? | No. Your right to avoid being the subject of an automated decision does not apply if the decision:
§ Is necessary for entering into, or the performance of a contract between us; § Is authorised by law (for example, for the purposes of fraud or tax evasion prevention); or § Is based on explicit consent § Does not have a legal (or similarly significant effect) on someone
|
| What is ‘profiling’? | The relevant Regulations (GDPR) define ‘profiling’ as any form of automated processing intended to evaluate certain personal aspects of an individual, in particular to analyse or predict:
§ Performance at work; § Economic situation; § Health; § Personal Preferences § Reliability § Behaviour § Movements
|
| Our use of ‘automated decisions’ and ‘profiling’ | At present, we can confirm that we do not process any personal data by means of automated decisions or profiling. Should be decide to do so in the future, we are obliged to ensure that there are appropriate safeguards in place to ensure that:
§ Processing is fair and transparent by providing meaningful information about the logic involved, as well as the significance and the envisaged consequences § Appropriate mathematical or statistical procedures are used for profiling § We implement suitable technical and organisational measures to enable inaccuracies to be corrected and to minimise the risks of any errors § Personal data is secured in a way that is proportionate to the risks to your rights and interests and prevents any discriminatory effects.
In any event, we can confirm that no automated decisions will be taken in relation to the personal data of a child. We will also not take any automated decisions on the processing of special categories of data unless:
§ You have the explicit consent of the individual; or § The processing is necessary for reasons of substantial public interest on the basis of EU/Member state law. This must, however, be proportionate to the aim pursued, respect the essence of the right to data protection and provide suitable and specific measures to safeguard your fundamental rights and interests.
|