Privacy Policy

This Privacy Notice contains important information about the way in which we use, share and store your personal information. Please take some time to read it carefully.

This Notice is relevant to you because you are either a client of Gatling Solicitors Limited (Co. Reg. No. 13188870), or you have made an enquiry about our services through our website or otherwise, or  you have provided your contact details to us, or  receive updates, newsletters and information from us or are interested in our networking and marketing events and initiatives. 

This privacy policy sets out the way in which any personal information you provide to us is used and kept secure. It applies whenever we collect your personal data (including when you use our website or other digital platforms), so please read it carefully. 

Gatling Solicitors Limited provides legal services to it's clients in accordance with their instructions. 

About Us

For the purposes of the Data Protection Act 1998, Gatling Solicitors Limited is the “data controller” (i.e. the company who is responsible for, and controls the processing of, your personal data).

 About this privacy policy

This privacy policy explains what information we may collect about you, how we may use it, and the steps we take to ensure that it is kept secure. We also explain your rights in respect of your personal data.

Third party websites

Please note that our website and other digital platforms may contain links to third party websites / digital platforms which are provided for your convenience. We are only responsible for the privacy practices and security of our own digital platforms. We recommend that you check the privacy and security policies and procedures of each and every other website / digital platform that you visit.

Contact us

If you have any comments or queries regarding our use of your data, please contact us using the details on 'Contact Us' web page. 

Our Information Commissioner's Office registration is ZB046783.

What information do we collect about you and what is it used for?

To enable us to provide you with the legal services that we have been contracted to provide, respond to your enquiries about our services and to carry out the other functions referred to above, we may need to hold and use the following types of data:

 Personal

• Your name (and/or business name where relevant);
• Your contact details e.g. address, email address, telephone number(s);
• Your date of birth.

Financial

• Bank or building society account details;
• National Insurance number;
• Other relevant financial details personal to you such as HMRC records etc.

Identification

• Electronic ID;
• Passport;
• Driving Licence;
• Proof of address such as your latest utility bill etc.

Case or matter details and documents

This may include but is not limited to:

•  Details of products and services you have purchased from us;
• Personal information about you or others involved in the case or matter;
• Due diligence in transactions involving documents that contain personal information.

Legal documents

This may include but is not limited to wills, property title documents, marriage certificates, court orders etc.

Marketing

Name, title, address, telephone number, email address, company, job description, engagement, event attendance history and marketing preferences. 

Website  

When you interact with our digital platforms, we may also automatically collect the following information about your visit. This helps us better understand how people use our digital platforms to enable us create better content and more relevant communications: 

• how you have reached our digital platform and the internet protocol (IP) address you have used
• your browser type, versions and plug-ins, and your operating system
• your journey through our digital platform, including which links you click on and any searches you made, how long you stayed on a page, and other page interaction information
• what content you like or share
• information collected in any online forms you complete

Social media information 

Username, company details and engagement details (likes, retweets, shares, reactions, comments).

Legal basis for collecting and using your personal information

We rely on the following as the legal bases for processing your information:

• The performance of our contract to provide legal services to you
• compliance with legal obligations 
• a legitimate interest(s)

We will only rely on legitimate interests where it does not negatively impact on your interests, rights or freedoms.

Monitoring

We may record communications with you (such as telephone conversations) for the purpose of quality assurance to improve the quality of services that we provide to you.

Credit checking

To enable us to make credit decisions about you and for fraud prevention and money laundering purposes, we may search the files of credit reference and fraud prevention agencies (who will record the search). 

If you provide false or inaccurate information and we suspect fraud, we will report this. We may disclose information about how you conduct your account to such agencies and your information may be linked to records relating to other people living at the same address with whom you are financially linked. Other credit grantors may use this information to make credit decisions about you and the people with whom you are financially associated, as well as for fraud prevention, debtor tracing and money laundering purposes. 

Who will we share your personal information with?

We will share personal information with law enforcement agencies if required by applicable law.

We will not share your personal information with any other third parties without your consent unless required to do so by law, or where it is altogether necessary to do so.

Your Rights

As a "Data Subject" you have the following rights:

• The right to be informed;
• The right to obtain copies;
• The right to access personal data;
• The right to have inaccurate personal data rectified;
• The right to request the restriction or suppression of personal data; and 
• The right to be forgotten.

Under the General Data Protection Regulation, you have a number of important rights that you can exercise free of charge. In summary, these rights are:

• Transparency over how we use your personal data and fair processing of your information;
• Access to your personal information and other supplementary information;
• Require us to correct any mistakes or complete missing information we hold on you;
• Require us to erase your personal information in certain circumstances;
• Receive a copy of the personal information you have provided to us or have this information be sent to a third party, this will be provided to you or the third party in a structured, commonly used and machine-readable format;
• Object at any time to the processing of your personal information for direct marketing;
• Object in certain other situations to the continued processing of your personal information;
• Restrict our processing of your personal information in certain circumstances.
• Request not to be subject to automated decision making which produces legal effects that concern you or affect you in a significantly similar way;

If you want more information about your rights under the GDPR please see the Guidance from the Information Commissioner’s Office on individual’s rights under the GDPR.

If you want to exercise any of these rights please use the 'Contact Us' web page to contact us and inform us of your wish to exercise a right. When doing so please state the right or rights that you wish to exercise and provide:

• another piece of information so that we can identify you. We may need to contact you to request further information to verify your identity;
• proof of your identity and address;

We will respond to you within one month from when we receive your request. Please note if you wish to unsubscribe from any email you can do so by following the instructions on any email we send to you. It may take five working days for this to become effective.

Transfer of your information outside the European Economic Area (EEA)

It may be necessary to transfer your personal information outside the EEA or to an international organisation in order to check and discuss information. If so, you will be advised in advance to give your consent.

These countries do not have same data protection laws as the United Kingdom and EEA. The European Commission has not given a formal decision that these countries provide data protection that is substantially similar to those in the United Kingdom and EEA, however any transfer will be subject to safeguards as permitted under Article 46 of the General Data Protection Regulation. These safeguards are designed to protect your privacy rights and provide you with remedies in the unlikely event that your personal information is misused.

How long will we store your personal data for?

We will retain your personal data for the following time periods:

• Compliance with Anti Money Laundering Regulations; 5 years
• Subject to the legal service provided; 6 to 12 years
• Wills and other original documents; indefinitely unless otherwise agreed by you in writing.

If you would like further details on the retention period for your specific matter please contact the solicitor dealing with your matter or our Data Protection Officer. Your data will be destroyed/deleted at the appropriate time.

How to make a complaint?

We hope that you are happy with our service and that our Data Protection Officer can resolve any issues or complaints that arise. Please get in touch if you have any concerns.

The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where the alleged infringement of data protection laws occurred. The UK supervisory authority of the Information Commissioner’s Office who can be contacted at the following website address: https://ico.orguk/concerns/.

Automated Decision Making

We do not use automated decision making in relation to the legal services we provide.

Our Security

We protect your personal data using all reasonable and proportionate means, including computer security systems, staff training, compliance with all appropriate data protection legislation and professional conduct rules.

Future Processing

We do not intend to process your personal information for any reason other than stated within this privacy notice. If this changes, we will inform you.

Changes to this privacy notice

This privacy was published in March 2021 and will be reviewed in March 2022. We constantly review our internal privacy practices and may change this policy from time to time. When we do we will inform you.