Your privacy is important to us. We will maintain the confidentially of and protect your information in accordance with our procedures, the Data Protection Act 1998 (as amended or replaced) and the General Data Protection Regulation (EU) 2016/679 “GDPR”. GDPR regulates the way in which personal data is held and processed. This privacy notice sets out how we collect and treat personal data that we collect from you during your contact with us.
The Data Controller for the purposes of our work for you is Maalik & Co (in this Privacy Notice, “us”, “we” and “our”) of 78 South Road, Southall, UB1 1RD.
Use of Personal Data
By you providing your personal data such as your name, address, contact numbers and emails, you agree to us contacting you about the information or legal services you request. We use the personal data you provide primarily for providing you with legal services and the incidental and related matters in accordance with your instructions.
In this regard, where required, we may also share all or part of your personal data with Government organizations, expert witnesses, barristers, and other third parties whose involvement is part of the matters in which we are instructed. Save for the aforementioned purposes, we will not disclose your personal data to any other third party unless required to do so by law or regulators.
The lawful basis for us to process your personal data may be any or all of the following:
• You have given express or implied consent to the processing of personal data for one or more specific purposes
• By agreeing with our terms of business you consent to the processing of your data by us and by any third parties instructed by us to assist with the delivery of legal services
• Processing is necessary for the performance of a contract to which you are party or to take steps at your request prior to entering into contract
• Processing is necessary for compliance with a legal obligation to which we are subject
• Processing is necessary to protect your vital interests or the vital interests of another natural person
We require you to provide personal data to us in order for us to provide our professional services to you. You have the right to withdraw consent at any time, by notice to us orally or in writing, but if you withdraw consent or if you fail to provide us with personal data which we request from you as part of your instructions, we will be unable to carry out our professional obligations to provide you with legal services and accordingly we will have to stop acting for you. Such withdrawal will not affect the legality of our processing your data prior to your withdrawal of consent. Such withdrawal will also not affect the legality of our processing your personal data as required by law or regulators.
Under the GDPR you have several rights including:
• To obtain access to, and copies of, the personal data that we hold about you;
• To require that we cease processing your personal data;
• To require us not to send you marketing communications;
• To require us to erase your personal data or restrict our data processing activities;
• To receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller;
• To require us to correct the personal data we hold about you if it is incorrect
Please note that the above rights are not absolute and we may be entitled to refuse requests where exceptions apply. You can find out more about your rights at Office of the Information Commissioner.
You have a right to object to the processing of your personal data based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiting); or for direct marketing (including profiling); and/or for processing for purposes of scientific/historical research and statistics provided you have an objection on “grounds relating to your particular situation”. Maalik & Co does not normally process your personal data for any of these purposes but we are required by law to notify you of your right to object. If you do have valid grounds to object, we must stop processing the personal data unless: We can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms; or the processing is for the establishment, exercise or defence of legal claims.
We will retain personal data provided by you for a minimum of 3 years from the conclusion of your matter on which we are instructed, but we may retain data beyond this period at our discretion to comply with relevant legal obligations, in accordance with guidance from our regulators, our professional indemnity insurers, or such other advice on best practice in force from time to time in relation to retention and storage of client files and data and/or in the interests of establishing, exercising or defending any potential future legal claims.
We reserve the right to destroy your files and data in our possession, custody or control at any time after the end of the period of 3 years from the conclusion of your matter, if we consider it appropriate to do so having regard to the nature and purposes of our instructions, and by agreeing to our terms of business you consent to your files and data being destroyed accordingly. If you wish to retain your original files on conclusion of your matter, then you must request the original file from us. In that event, we reserve the right to make and keep copies of paper documents from the file.
Right to Complain
If you wish to complain about our processing of your personal data, you have the right to make a complaint in accordance with our complaints procedure which is set out in our terms of business. If we are unable to satisfactorily resolve your complaint you have the right to make a complaint to the Information Commissioner’s Office (ICO).
All queries relating to GPDR should be referred to our central point of contact for data queries at: Email: email@example.com, Telephone: +00442085714981