Policy
Privacy Policy
Under the General Data Protection Regulation ("GDPR") and the Data Protection Act 2018 ("DPA"), we have to comply with certain obligations in connection with the handling of your personal data. The purpose of this notice is to provide you with the necessary information regarding your rights and obligations and explains the circumstances in which your data is collected and processed. This notice may need to be updated from time to time.
Penmans Law
Under the terms of the GDPR we are the data controller and we process your personal information. Our contact details are as follows:
Penmans
Stanhope House
High Street
Stanford-le-Hope
Essex SS17 0HA
Tel: 01375 677777
stanford@penmanslaw.co.ukThe purpose for collection of your personal data
These reasons include:
- To comply with legal obligations
- To comply with our obligations to you in supplying you with professional services
- To comply with professional obligations
- To satisfy our interests in dealing with any complaints or legal proceedings or professional proceedings against us
- Fulfilling our duties to client, employees and professional bodies with whom we are obliged to share data
The basis for processing your data
- Where you have consented
- To comply with any legal obligations we have
- In the performance of our obligations to you under our contract with you
- The pursuit of our lawful interests
The purposes for processing your personal data
- To check your identity
- To fulfil our obligations to you under our contract with you including sharing this data with third parties who are needed to assist us in performing the contract with you
- To inform you of any further services that we may offer
- To provide you with information regarding services that we supply following the termination of your contract
How long is your personal data retained?
The normal period is 6 years following the termination of our contract with you but this may be longer in certain circumstances eg if we are acting for a minor or a longer limitation period is required under the Limitation Acts, money laundering regulations and Lender's requirements.
When may we share your data?
It is not done without your consent or if it is necessary to share such data in the performance of our obligations to you under the terms or our contract or in fulfilling our obligations to third parties eg courts, Inland Revenue, Solicitors Regulations Authority, Land Registry etc.
Accessing your data — Subject Access Requests ("SARs")
You have a right to make an SAR and if you consider that we have incomplete or inaccurate information about you, you have the right to ask us to have it rectified, removed or amended.
The SAR must be responded to by us within 1 month of receipt although if the matter is complex then we will notify you if it is likely to take longer.
There is no fee for complying with a SAR but we can refuse it if it is unfounded or excessive.
Complaints / Queries
If you have any such or consider that we have processed your data unfairly or that we have not complied with the GDPR or DPA, you can complain. This complaint can be made to us at the address shown above. If you are not happy with our response, you have a right to lodge a complaint with the Information Commissioner's Office at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Tel: 0303 123 1113.