Introduction

Maintaining the security of your data is a priority of Gary Jacobs & Co Ltd, and we are committed to respect your privacy rights. We undertake to handle your data fairly and legally at all times and we are also dedicated to being transparent about what data we collect from you and how we may use such data.

This privacy notice aims to explain the types of personal data Gary Jacobs & Co ltd may collect about you when you interact with us whether you visit our offices, use your mobile device or go on line. It also aims to explain how we will process, share and keep your data.

We hope this information will answer any questions you have, but if you still have any questions, please get in touch with us.

As we may need to update this notice from time to time, we will update you if there are any significant changes.

Who is Gary Jacobs & Co Ltd

Gary Jacobs & Co Ltd is a registered company # 6426695. We gather and process your personal information in accordance with this privacy notice and in compliance with the relevant data protection regulation and law. This notice provides you with the necessary information regarding your rights and obligations, and explains how, why and when we collect and process your personal data.

Gary Jacobs & Co Ltd is also registered on the Information Commissioner’s Register.

Why do we collect your personal data;

We may collect and process your personal data for a number of reasons. These reasons include:

• so that we may comply with any legal obligation we have;
• in order to comply with our duties and exercising our rights under a contract with you;
• the pursuit of our legitimate interests (as set out below);
• where you have consented to the processing of your personal data;
• this includes, but is not limited to, information provided by you and 3^rd Party providers;
• when you/they contact us in person, over the telephone, by e-mail or by post;
• when you apply for a job vacancy with us

Our legitimate interests

The normal legal basis for processing customer data, is that it is necessary for the legitimate interests of Gary Jacobs & Co Ltd, including:

• protecting clients, employees and other individuals and maintaining their health, safety and welfare;
• promoting, marketing and advertising our services;
• understanding our Client’s instructions, activities, preferences and needs;
• improving existing services and developing;
• complying with our legal and regulatory obligations;
• preventing, investigating and detecting crime, fraud or anti-social behaviour and prosecuting offenders, including working with law enforcement agencies;
• handling client contacts, queries or disputes;
• protecting Gary Jacobs & Co Ltd, its employees and clients, by taking appropriate legal action against third-parties who have committed criminal acts or are in breach of legal obligations to Gary Jacobs & Co Ltd ; and
• fulfilling our duties to our clients, employees and Director.

The purposes and reasons for processing your personal data

We take your privacy very seriously and will never disclose or share your personal data without your knowledge, unless we are required to do so by law. We only retain your data for as long as is necessary and for the purposes specified in this notice. Unless we notify you, we will not process your personal data outside of the European Economic Area (EEA), as it is currently defined.

Detailed below are examples of when we would collect, process and in some cases share, your personal data:

• to ensure that content from our website is presented in the most effective manner for you and for your computer/device;
• to verify your identity;
• to process job applications;
• to process and manage your instructions;
• to carry out our obligations arising from any contracts entered into between you and us;
• to monitor customer satisfaction;
• to provide you with information, products or services that you request from us;
• to notify you about changes to our services;

Where you have consented to us providing you with our services, you are free to withdraw consent at any time.

In the event of any criminal investigations, we may be required by law, to share the data captured with the relevant authorities.

How long will we keep your data

We only ever retain personal information for as long as is necessary and we have retention policies in place to meet these obligations.

We are required under some laws or regulations to retain your personal data for a set period of time for example, the maximum legally obliged retention period for file details is 6 years or until such time as the youngest child in proceedings reaches the age of 21.

How we will share your data

We do not share or disclosure any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement.

We use trusted third-parties to provide the below services and business functions, however all processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures.

We may disclose your information to third parties if:

• we are under a duty to disclose or share your personal data in order to comply with any legal obligation; or
• in order to apply or enforce our contracts with you; or
• to protect our rights, property, or our safety and/or the safety of our clients, or others.

We may also disclose your information to represented parties to proceedings to fulfil directions as ordered by the court.

These third parties may include (but not limited to):

• Solicitor Advocates;
• Barristers;
• Professional Experts;
• Other Parties in Proceedings;
• The Legal Aid Agency;
• The Law Society;
• HMRC;
• Payroll Accounts;
• Pension Regulators;
• Private Medical Company;
• Police Disclosure Unit

What are your rights over your personal data

The ICO is the UKs independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

GDPR provides the following rights for individuals:

1. The right to be informed
2. The right of access
3. The right to rectification
4. The right to erasure
5. The right to restrict processing
6. The right to data portability
7. The right to object
8. Rights in relation to automated decision making and profiling

You have the right to be informed (1) and access (2) any personal information that we process about you and to request information about:

• What personal data we hold about you.
• The purposes of the processing.
• The categories of personal data concerned.
• The recipients to whom the personal data has/will be disclosed to.
• How long we intend to store your personal data for.
• If we did not collect the data directly from you, information about the source.

If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct (3) and/or complete (3) the information and we will strive to update/correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.

If you would like your personal data to be removed (4) or the use to be amended, you have the right to request:

• your personal data to be erased (deleted) from our records;
• the use / processing of your personal data to be restricted (5) in accordance with data protection laws;
• to opt out of any direct marketing from us (this can be done in a number of ways and will depend on the marketing you are receiving;
• to be informed about any automated decision-making that we use.

To ensure we comply with data portability (6), if you request a copy of your data, we will ensure the data is transmitted in a structured commonly used readable format.

We recognise your right to raise an objection (7) to the data we retain.  Any request for objection will be dealt within one month of request.  NB  We may have to refuse an individual objection.  Where an objection is submitted by an individual and refused by the firm, we will provide the individual with reasons for doing so. 

This firm does not engage with automated decision making (8) (without human involvement).  No processing of data is undertaken in this way.

If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the relevant request; this is to ensure that your data is protected and kept secure.

Subject Access Request (SAR)

Please note that any Subject Access Request (SAR) will be dealt within one month of receiving such request.  The one month timeframe is only relevant after such time as the identification of the data subject has been confirmed.  For further details, please ask to see our SAR Policy.

We will inform you if your request is possible under current regulations and inform you to what extent your request has been processed. Where we are under legal obligation to retain your information, we will clarify the requirements around the extent of data as well as the duration we will continue to hold your personal data.

If you would like to make a request around the processing of your personal data, please contact us at pj@gjlaw.co.uk

Further details, questions, or complaints

We hope we have provided you sufficient of information around the processing of your personal data that we undertake and the rights you have over it, however if you have any additional questions or would like more details around any of the points listed above, please contact:

Paula Jacobs

Gary Jacobs & Co Ltd

137 George Lane

South Woodford

London

E18 1AN

Tel 0208 5364050

Lodging a Complaint

If you are not happy with this notice and believe we have processed your data in an unfair or unjust way or are non-compliant with the relevant data protection laws and you wish to raise a complaint, please contact us and we will carefully consider your complaint and respond to you. You also have the right to lodge a complaint with the supervisory authority (the Information Commissioners Office).

ICO

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Tel: 0303 123 1113

https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/