Confidentiality and Data Protection
BLS Law Limited is defined as a data controller under the GDPR and Data Protection Act 2018 and is registered with the Information Commissioner’s Office (ICO) under ZA470379. BLS Law only collects or uses personal information for those purposes indicated in our notification with the Information Commissioner’s Office.
The information we collect
We process personal data including but not limited to:
- Name, address and contact details
- Correspondence with you, such as any information that you have provided
- Information pertaining to your personal circumstances
- Information regarding living individuals (e.g. customers / suppliers, staff)
- Financial details
- Data provided to prove your identity or the identity of shareholders and directors.
We may process sensitive data special category data such as:
- Racial or ethnic origin
- Political opinions
- Religious or philosophical beliefs
- Trade union membership
- Genetic data
- Biometric data
- Data concerning Health
- Data concerning a natural persons sex life or sexual orientation
Legal grounds for processing your information
We will rely on the following legal bases under the General Data Protection Regulation to process your personal data:
- Performance of a contract
- Legal obligation
- Vital interest
- Public interest or exercise of official authority
- Legitimate interests pursued by the controller or third party
Our contact details
If you have any questions our contact details are:
Address: BLS Law Limited
6 Alexa Court, 73 Lexham Gardens
Telephone: 020 7244 5985
We also have a Designated Data Protection Officer, who is responsible for data compliance issues. Their contact details are:
How we use information
We may gain information about you from your use of this website. It may be ‘voluntary information’ information that you provide to us such as personal data, (e.g. contact details or information contained in an employment application form) or ‘involuntary information’ information that we gather through our monitoring of visits to this website.
Involuntary information will not generally identify individual visitors to our website and is mainly statistical. It will be used mainly to improve the website and its navigability, and to identify areas that are of most interest to visitors.
Where visitors are identified they can be either individuals in their own right and/or organisations that already have relationships with us, and the information we gain will be used in developing those relationships and improving the services we provide.
The information obtained will be retained and utilised in accordance with all applicable laws in particular, the Data Protection Act 2018 and the General Data Protection Regulation, in accordance with which we will maintain and protect the confidentiality of your information.
Navigating and using our website will not normally require you to provide personal data although, you may need to provide personal data if you would like to use other services available on the website. We are the sole owner of the data collected and will not transfer, trade, sell or share the data.
We will use the information to improve our services and for marketing purposes only where a person/organisation has supplied explicit consent. Further, we will use your data to respond to your enquiries, provide you with legal and non-legal services and manage your relationship with us.
We may collect your name and contact details (such as your email address, phone number or address) in order to send you information about our services which might be of interest to you. We may collect this directly from you, or through a third party. If a third party collected your name and contact details, we will process your professional data based on legitimate interests to send you a fair processing notice and then respect any communication preferences given to us.
You have the right to opt-out of receiving our marketing information. You may exercise the right at any time by contacting us at: firstname.lastname@example.org. If we send you any marketing emails we will always provide an unsubscribe option to allow you to opt-out of any further marketing emails. If you opt-out you will be added to our suppression list to ensure we do not accidentally send you further marketing information. When unsubscribing from any postal marketing, you may initially still receive some content which has already been printed or sent, but we will remove you from any future campaigns. We may still need to contact you for administrative or operational reasons but we will make sure that those communications do not include direct marketing.
If you are an existing client or acting as a business we use your contact details as necessary for our legitimate interests in marketing to you and maintaining a list of potential clients.
We never share your name or contact details with third parties for marketing purposes. We do use third party service providers to send out our marketing material but we only allow them to use that information on our instructions and where they have agreed to treat the information confidentially and to comply with the data protection legislation.
We will retain your details on our marketing list until you opt-out at which point we add you to the suppression list. We keep the suppression list indefinitely to comply with our legal obligations to ensure we do not accidentally send you any more marketing material.
We use Google Analytics features for Display Advertising. You can opt-out of Google Analytics and disable tracking using the Google Analytics Opt-Out Browser Add-on. We use the data provided by Google Analytics Demographics to develop our website and content in line with our users’ interests.
Registration for events
Registration forms may need to be completed in order for you to attend, or show your interest in attending, an event. We may ask you to consent to provide personal data regarding your name, company name, email address and postcode. This information enables us to contact you about the events in which you have expressed an interest. These details will be added to our current contact database and used to identify areas where we can improve our services. You may be taken to third party websites to register and/or make a payment for attending the event. We cannot be responsible for third party websites; we recommend you ensure you read the privacy statements when you visit third party websites.
E-bulletins/ legal research and sector wide newsletters
We will only provide you with e-bulletins / legal research and sector wide newsletters that you have consented to receiving. This will either be through you positively consenting on our subscription forms by ticking a box stating, for example, you wish to receive the employment e-bulletin via email or you have directly contacted us requesting a subscription or in pursuit of our legitimate interests. If you would like to unsubscribe to receiving updates sector please email email@example.com.
We will assume, unless notified of the contrary before the information is provided to us and we approve the position, that data provided by a prospective client or an existing client concerning a prospective matter:
- does not carry confidential obligations that are owed to a third party or
- is not given in breach of any confidential obligation owed to a third party or
- is not confidential and so that we would not be barred from acting for other individuals.
Links and IP addresses
Our websites contain links to various third party websites. We are not responsible for the content or privacy practices of any external websites that are linked from our sites.
We use IP addresses in order to assess patterns, gather broad demographic information for aggregate use, track visitors to the website’s movements, and to manage our website. We do not link the IP addresses with any identifiable personal information.
Information collected at our premises
We collect information about visitors to our premises. We may record information on your visit, including the date and time you were visiting, your name, contact details and vehicle registration number. This information is kept for a period of 12 months.
Information received from third parties
We may receive information about you from various sources.
Our service providers, for example business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers and credit reference agencies who may provide us with information about you to be used as set out above.
If we have acquired another business, or substantially all of its assets, which originally held your personal data, we will hold and use the personal data you provided to them or which they otherwise held about you in accordance with the Privacy Notice.
We may obtain your data from publicly available sources, for example Companies House.
Why we might share your data with third parties
We may share your personal data with third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our contract with you, to protect the rights, property or safety of us, our clients or others, or where we have another legitimate interest in doing so.
Which third party service providers will process your personal information?
We may also share your personal data with:
- Other organisation and service providers that we work with or partner with from time to time including, for example third party websites, analytics providers, advertising and media companies to enable them to show you adverts, including online and mailing houses so that we can send you information in the post.
- Our professional advisers.
- Any third party that purchases, or which we transfer, all or substantially all our assets and business. Should such a sale or transfer occur, we will use reasonable efforts to try and ensure that the entity to which we transfer your information uses it in a manner that is consistent with this policy.
As well as the measures set out above in relation to sharing your personal data, we have put in place appropriate internal security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to the duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach as required by law.
How long will we keep your information for?
As well as the periods set out above we generally keep your information for a period of seven years from the date in which your file is closed. There are certain types of work which require a retention period of 15 years. These include, for example, company and commercial, commercial litigation and property files. In certain circumstances it may be necessary to keep your personal data for longer than that in order to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.
In determining the appropriate retention period for the retention of personal data we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve these purposes through other means and the applicable legal requirements.
In certain circumstances we may anonymise your personal data so that it can no longer be associated with you, in such cases we may use such information without further notice to you.
The GDPR and Data Protection Act 2018 provide you with a number of rights. Your key rights are set out below. Further information may be obtained from the Information Commissioner’s Office.
- To be informed in a clear, transparent and easily understandable way about how we use your personal data and about your rights
- Request to access your personal data. This provides you with the right to obtain a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Request correction of the personal data that we hold about you. This allows you have any incomplete or inaccurate data corrected.
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no valid reason for us continuing to process it.
- Object to processing your personal data. In cases where we are relying on a legitimate interest or those of a third party and there are particular facts which make you want to object to us using your data on this basis and we do not have a compelling legitimate basis for doing so which overrides your rights, interests and freedoms. You also have the right to object where we are processing your personal information for direct marketing purposes.
- Request the restriction of processing of your personal data. This allows you to ask us to suspend the processing of personal data about you.
- Request the transfer of your personal data to a third party where you provide it to us and we are using it based on your consent, or to carry out a contract with you, and we process it using automated means.
- Withdraw consent. In limited circumstances we will be relying on your consent to the collection, processing and transfer of your personal data for a specific purpose. You have the right to withdraw your consent for that specific processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your personal data for the purpose or process you originally agreed to, unless we have another legitimate interest in doing so.
- Lodge a complaint. If you consider we are using your information in a way which breaches the GDPR or the Data Protection Act 2018, you have the right to lodge a complaint with the ICO.
If you wish to review, verify, correct or request the erasure of your personal data, object to the processing of your personal data, withdraw your consent to the processing of your personal data or request that we transfer a copy of your personal data to a third party please contact either firstname.lastname@example.org or our Data Protection Officer email@example.com
We will respond to your request as soon as we can. Generally this will be within one calendar month from when we receive your request but on occasions it may take longer to deal with your request and in such circumstances we will let you know.
Changes to this Privacy Notice
Any changes we make to our Privacy Notice in the future will be posted on our website and where appropriate notified to you by email or otherwise.