Braidwoods will be a “controller” of the personal information (also referred to as ‘data’) that you provide to us when you instruct us to act on your behalf.
When you become a client of Braidwoods, we will collect, store and use the personal information that you provide to us in your instructions and during the course of our solicitor / client relationship. We may ask you for additional personal information during the course of our solicitor / client relationship, which shall be collected, stored and used in accordance with this privacy notice.
We also collect, store and use personal information supplied by and pertaining to you from other data controllers and third party data processors within the meaning of the GDPR.
We need to collect your personal information so that we can act on your behalf. We will use your personal information to:
If you do not provide us with all of the personal information that we need to collect then this may affect our ability to provide you with legal advice and / or represent you as your solicitors.
We also process your personal information in pursuit of our legitimate interests to:
Where we process your personal information in pursuit of our legitimate interests, you have the right to object to us using your personal information for the above purposes. If you wish to object to any of the above processing, please contact Peter Braidwood, Braidwoods, 1 Charlotte Street, Dumfries
We are under a legal obligation to process certain personal information relating to you for the purposes of complying with our obligations under:
We may ask you if we can process your personal information for additional purposes.
We may be required to share personal information with statutory or regulatory authorities and organisations to comply with statutory obligations. We may share your personal information with third parties when we reasonably consider it to be in your interests to do so or in order to comply with legal and practice requirements.
We may also share personal information with our professional advisors for the purposes of taking advice.
Braidwoods employ third party suppliers to provide services, including IT, payroll, etc. These suppliers may process personal data on our behalf as “processors” and are subject to written contractual conditions to only process that personal data under our instructions and protect it.
In the event that we do share personal data with external third parties, we will only share such personal data strictly required for the specific purposes and take reasonable steps to ensure that recipients shall only process the disclosed personal data in accordance with those purposes.
Your personal information is stored in paper form and on our computer system. Our servers are based in the UK / EU, and are accessed by our staff for the purposes set out above.
We may be required to transfer your personal information outwith the UK / EU for the purposes set out above. If you instruct us to carry out business on your behalf which includes the transmission of your personal information outwith the UK / EU then we shall not be held to be responsible for failure to comply with GDPR concerning transmission of your personal information. In such circumstances it shall be your responsibility to put in place any necessary safeguards with the recipient country to protect your personal information.
We keep our clients’ personal data for periods sufficient to comply with legal requirements and professional guidelines relating to the conduct of legal business on your behalf and as required to protect our own legitimate interests. A copy of our Data Retention Policy can be made available upon request.
You can exercise any of the following rights by writing to us at Braidwoods, 1 Charlotte Street, Dumfries DG1 2AG.
Your rights in relation to your personal information are:
Any requests received by Braidwoods will be considered under applicable data protection legislation. If you remain dissatisfied, you have a right to raise a complaint with the Information Commissioner’s Office at www.ico.org.uk
