Privacy Notice
Who we are
Preston Turnbull LLP is the data controller.
Preston Turnbull LLP is the data controller of information gathered through our website and off-line. We are a limited liability partnership registered in England and Wales (with registered number OC428624) and are authorised and regulated by the Solicitors Regulation Authority. The firm’s registration number is 663774. Preston Turnbull’s registered office is Walsingham House, 35 Seething Lane, London, EC3N 4AH. The firm is registered with the UK Information Commissioner’s Office, with registration number ZA564789
This Privacy Notice
This is our main general privacy notice that applies across our business. It explains how and why we use personal information that we collect through the provision of our services and during our communications with you.
We have a separate HR privacy policy for current and former employees.
What data do we collect?
When you use our website or when we communicate with you, the categories of personal data that we collect may include:
- Contact information (name, address, email, telephone and fax numbers);
- Professional information such as job titles, former job titles, organisational associations, professional experience and qualifications.
- Where you use our website, profile and usage data (for more information, please see our Cookies policy).
- Where you provide the information to us, information about your interests both business and personal.
- Identification documents: including name, address and date/place of birth and photographic identification.
- Your preferences in receiving marketing information and communication preferences.
- Details of your attendance at our events.
- Details of your visits to our websites.
- Images captured by our offices’ CCTV cameras.
- If you connect with us via LinkedIn, we may collect personal information (according to your privacy settings).
- Where necessary, and legally permitted, we may also collect sensitive data such as health and ethnicity data.
In addition to the above, for our legal services we may also collect:
- information collected from publicly available sources or data sites for client due diligence purposes.
- Identification information from you or from your organization or other third parties for compliance with our legal and professional duties.
- Payment data, such as data necessary for processing payments and fraud prevention, and other related billing information.
- Other personal data regarding your preferences, opinions and comments where it is relevant to our services
In the course of our client services, we may represent you and/or your organisation in legal matters that require us to collect and use special category personal information relating to you (that is, information about your racial or ethnic origin, political opinions, religious beliefs, trade union activities, physical or mental health, sexual life, details of criminal offences, or genetic or biometric data).
Recruitment
We collect personal data during the recruitment and selection process through CVs and covering letters, from your passport or other identity documents such as your driving licence; from forms completed by you at the start of or during employment, from correspondence with you or through interviews, meetings, or other assessments from third parties such as references, and criminal records checks permitted by law.
Where the information provided is defined as special category data (or sensitive personal data) (such as your racial background or your state of health), your provision of such information is usually necessary for the performance of a contract. We will use racial background information only to allow us to carry out equal opportunities monitoring and to report on our diversity initiatives. In the case of health data, we may use this to assess whether you require reasonable adjustments during the recruitment stage. In any event, we will only use such information as permitted by law. In addition, we may receive personal information about you from third parties such as referees.
How we collect your data
Your personal data may be collected in a number of ways, including:
- When you contact us to enquire about our services.
- Through the provision of legal services to you, your employer or the organisation that you represent.
- During the course of our dealings with you for and on behalf of a client.
- When you provide us with information relating to attendance at any of our events (including marketing events)
- When you contact us in relation to job opportunities and recruitment.
- When you contact us via our website, feedback forms and surveys.
- Online via our website or social media such as LinkedIn.
- Automatically using cookies and other tracking software (see our Cookies policy).
- Through our clients, suppliers and other third parties; and
- When we collected publicly available information about you or your business (including through electronic data sources).
How we use your data
We use the information provided to:
- Contact you by email, fax, post or phone, in the course of our business relationship.
- Carry out the services we have agreed to provide to you.
- Carry out our obligations arising from any contracts entered between us.
- Maintain and develop our relationship with you.
- Provide you with the information and services that you request from us.
- Pass your details to experts, including counsel and other professionals for the purposes of obtaining professional advice and complying with our contractual obligations.
- Contact you in the course of providing services to our clients.
- Comply with legal and professional obligations.
- Help us monitor our commitment to equality and diversity.
- Assist with recruitment and selection.
- Monitor website trends.
- Operate our business more effectively (i.e. seeking feedback)
- Improve our products and services, to ensure good governance, accounting, management and auditing and to maintain internal records.
- Send you information, or newsletters and legal updates which you may find of interest where you have indicated your wish to be contacted for such purposes and
- Where we have other legitimate reasons, such as to enforce our terms and conditions, or take other action required or permitted by law or for other safety and security reasons.
Sharing your information
In providing our services, we may provide your personal information to staff in our offices or other third parties, such as:
- Other suppliers, such as expert witnesses, counsel or other external agencies (including training providers) that we engage on our/your behalf. When we do so, they are required to act in accordance with our instructions and keep your personal information secure with an adequate level of protection.
- Courts, tribunals and other government bodies and relevant regulators (SRA, Law Society and the ICO) in connection with matters relating to provision of our services.
- Professional indemnity insurers, brokers, auditors and other professional advisers.
- Our clients in connection with the provision of our services.
- Auditors.
- Other third parties when required by law or other regulatory authorities, where we are under a duty to do so to comply with legal or professional obligations (for example to comply with anti-money laundering obligations and counter terrorism measures).
- Enforce or protect our rights, property or the safety of our partners, consultants, staff and clients.
- Other parties in legal proceedings, including solicitors acting on the other side of a case.
Marketing
We may provide you with information which we think you may find interesting via our newsletters, updates, seminars and events. You can tell us at any time if you would prefer not to receive our publications, event information and/or marketing communications.
We do not pass your information to third parties to allow them to market their goods and services to you.
Legal basis and consent
The legal basis for processing your personal data depends upon the nature of our relationship with you, and are as follows:
- For the performance of a contract.
- For the purpose of legitimate interests; and
- Where necessary for compliance with mandatory legal obligations.
We operate on the basis of consent when sending newsletters and other marketing information.
Access to your information and correction
You have the right to request access to the information we hold about you. If you find at any time that any of the information, we hold about you is incorrect then you should promptly notify us, and we will correct the inaccuracy.
Retention periods
We only retain your information for as long as necessary for the purpose for which it was obtained. This could include compliance with legal obligations (for example, in relation to anti money laundering regulations). It could also include conducting legal work as instructed, establishing or defending claims which could be made against us.
Contact Us
If you have any questions or comments about this Privacy Notice, or if you wish to exercise your rights, please contact our designated Data Protection Person, Helen Preston, at any time:
- By email: helenpreston@preston-turnbull.com
- By telephone: +44 (0) 20 7119 1551