1.1 We may hold Personal Information because:
1.1.1 you supply it to us, for example, when you or your organization seek legal advice from us; or complete a form, make an enquiry, request to join our Alumni network, or otherwise interact on our website or other online platforms; or when you attend our seminars or other events or sign up to receive information from us, including training; or when you correspond with us by phone, email or other electronic means, or in writing, or when you enter into conversations with our lawyers, consultants and staff; or when you or your organization offer to provide, or provides services to us;
1.1.2 we learned it from someone else, either in the context of providing legal services to our clients, or in the context of our business more generally;
1.1.3 of the use of cookies (please see our Cookies Policy for further information) and tracking software which enables us to identify when legal updates, event invitations and other similar email communications (including embedded links within them) are opened; or
1.1.4 it is publicly available.
1.2 We may collect (and use for the purposes set out in this Privacy Policy) the following information about you:
1.2.1 Identity and contact information
- When contacting or visiting us, whether online, via telephone, via email, in writing, or otherwise, or when instructing us, you may provide Personal Information about yourself, including your name, address, telephone number, date of birth, passport number, job title and function, photographs and other personal data concerning your preferences relevant to our services.
1.2.2 Financial and payment information
- When instructing us, or if you or your organization provide services to us, you may provide Personal Information including your bank account and other data necessary for processing payments and fraud prevention, including credit/debit card numbers, security code numbers and other related billing information.
1.2.3 Information about those related or otherwise connected to our staff
- We sometimes ask members of our staff to provide details of their next of kin for the purpose of our emergency scenario planning or in case an incident occurs at work. We may also ask for details of their dependents, spouses and/or other people in relation to their employee benefits arrangements. We will only ever use this information for the benefit of our staff and for the purpose it was provided.
1.2.4 Information about clients and those who work with or are connected with clients or the matters that we are asked to advise on.
- When we are instructed to provide advice, we will ask you for “know your client”, anti-money laundering, and other necessary Personal Information which the law requires us to collect. We may also be provided with, or ask for information about you or third parties who we don’t have a direct relationship with, in the context of matters that we are instructed to advise on, and where this information is necessary in order for us to be able to provide our advice and services.
1.2.5 Information about individuals who are our suppliers or other business contacts (and individuals who are employed by our suppliers and business contacts)
- If you provide services to us or have a business dealing with us (or are employed or engaged by an organization which provides services or has a business dealing with us), we may acquire your name, contact details, some employment information and we may acquire copies of ID documents or similar information (if, for example, you are a director at a business in respect of which we are required to due diligence or carry out anti-money laundering processes).
1.2.6 Profile and usage information
- We collect Personal Information about your preferences in receiving marketing information from us, your communication preferences, and information about how you use our website – please see our Cookies Policy for further information in this regard. We also collect information such as passwords, to password protected platforms or services.
1.2.7 Physical access information and dietary requirements information
- We may collect Personal Information such as access times and requirements and dietary requirements or preferences when you visit our premises.
1.2.8 Other special category data
- We may be instructed to advise on, or as a result of our corporate social responsibility and probono work get involved with, matters that require us to collect and use sensitive (otherwise known as special category) Personal Information relating to you or a third party (that is, information about your racial or ethnic origin, political opinions, religious beliefs, trade union activities, physical or mental health, sexual life or sexual orientation, or genetic or biometric data). For the same reason we may also have to collect and use information about criminal offences or alleged offences that you or a third party may have committed, or have been alleged to commit.
1.3 We use your Personal Information:
1.3.1 to provide our services;
1.3.2 to run our business affairs, including internal record keeping;
1.3.3 to carry out verification checks, for example in relation to anti-money laundering and know your client procedures;
1.3.4 to comply with our legal obligations, including reporting obligations;
1.3.5 to manage access to our premises and for security purposes;
1.3.6 to protect the security of our communications and other systems and to prevent and detect security threats, frauds or other criminal or malicious activities;
1.3.7 send business or marketing communications (such as legal updates) which we think may be of interest (we will provide a simple mechanism for you to unsubscribe from such communications if you so wish);
1.3.8 to organize and hold marketing events in connection with the promotion of our business;
1.3.9 to carry out our Corporate Social Responsibility Programme.
1.4 The legal basis on which we hold your Personal Information is primarily for the purpose of pursuing our legitimate interests as a business which provides legal advice and services. In some instances we may rely on your express consent to use your Personal Information, but we will let you know (and give you the chance to withdraw consent) if we do. In some instances we may use your Personal Information in order to enable us to perform a contract which we have in place with you.