This Privacy Notice is to be read in conjunction with our website Terms of Use, Data Protection and Privacy Policy, Cookie Policy and Marketing Permissions together with any Terms of Business you may receive from us.

Name and Contact Details of Data Controller

Clive Burrell, Senior Partner
Leonard Gray LLP 72-74 Duke Street Chelmsford Essex CM1 1JY
legal@leonardgray.co.uk

Leonard Gray LLP is a data controller and it collects, processes and stores the personal information that you provide us with. Leonard Gray LLP is registered at the above office as Limited Liability Partnership in England and Wales (No: OC333691). Authorised and regulated by the Solicitors Regulation Authority (No: 484894).

The Data

You could be asked to provide your contact details including full name, address, email address and telephone number. You may also be asked to provide other information including, but not exclusively, your date of birth, job title, employment status, marital status, financial information, payment information and National Insurance number.

Purpose of the Data Processing

We collect personal information for the purposes of:

  • providing you with and to improve our Legal, Mediation and Estate Agency services;
  • the performance of any contract with you and to deal with any enquiries/requests made by you;
  • complying with our regulatory, legal and professional obligations; and
  • complying with any other legitimate interests, such as for operational, compliance and security purposes.

The Lawful Basis for Data Processing

Under the Data Protection Act 1998 we have a legal basis upon which we may process your personal information including:

  • your consent;
  • for the performance of any contract with you or so that a contract may be entered into with you; and
  • for the purposes of our legitimate interests, such as for operational, compliance and security purposes.

The Legitimate Interests for the Processing

These are for us to conduct and manage our business and give you the best service available. These include, but are not limited to, providing you with Legal, Mediation and Estate Agency services, cost estimates, initial advice prior to instruction, managing/processing payments and enforcing any contracts with you. We do not use your personal data for activities where our interests are overridden by the impact on you.

The Categories of Personal Data

This may be data obtained from a third party and will likely fall into the category of “The Data” set out above.

Recipients and Providers of Personal Data

There are certain third party service providers we may need to share your data with and who may provide us with your data. These may be, but not exclusively, banks, courts, HMRC and accountants. We and such other persons/organisations will be allowed to process your data in the same way described in this Privacy Notice.

Rest assured we will, on every occasion, take all necessary steps to make sure that your information is used by others responsibly and, wherever possible, in accordance with this Privacy Notice. We will never sell your data and will keep it safe and secure at all times.

As a general principle, we assure you that we will not divulge, profit from or otherwise relay any of the information you provide to us, without your express permission.

We may be required by law to share your data, for example, to assist an investigation. Please bear this in mind that such matters will be outside our control.

Please also see our Cookie Policy.

Automated Decision Making

There will be also occasions where we will be required to share your data with automated systems, such as to undertake identity verification checks.

Data Processors Outside the EU

In some cases, personal information may be sent to countries outside of the EU.

This will only take place in accordance with “The Lawful Basis for Data Processing” as set out above and to a country/international organisation which provides appropriate safeguards.

Retention periods for Personal Data

The data retention period is as long as required to fulfil the purposes we collected it for which includes our legal and compliance requirements. Generally, the period will be a minimum of six years but in determining the relevant retention period we also consider the nature/sensitivity of the data, the purpose of retaining your data, the amount of data and the potential risk of harm from unauthorised use/disclosure of your data.

Rights Regarding Data Processing

You have the right to request us to provide you with access, erasure and rectification of your personal information.  You also have the right, in certain circumstances to restrict or object the processing of your information or to request the erasure of it as well as the right to ask us to transfer your personal information to another person or business.

The Right to Withdraw Consent

You are free, at all times in the future, to change your mind about whether you would like us to process your personal information. You should, in such circumstances, contact us in writing using the above contact details.

Please also see our Privacy Policy and Marketing Permissions.

The Right to Lodge a Complaint

The supervisory authority with whom to lodge a complaint is the Information Commissioner’s Office (ICO) – www.ico.org.uk .