We are Macaulay Wray LLP Solicitors (“Macaulay Wray”). We have offices at the following location:
- 35 New Row, Coleraine BT52 1AH
Our Data Protection Officer is Sean McKay, Practice Manager. You can contact our Data Protection Officer by post at 35 New Row, Coleraine BT52 1AH, or by email at email@example.com.
- through our client engagement processes when you engage our legal services;
- through our provision of legal services to you;
- when you request information from us or make enquiries of us;
- when we collect or receive information about you from third parties or publicly available sources;
- through the administration of your engagement with us. For example, through the processing of payments and billing;
- as a result of your relationship with our client(s);
- when you apply for a job or work placement with us; and
- for compliance with our legal and professional obligations.
The type of personal data that we may process includes but is not limited to:
- basic information and contact details (including name, date of birth, national insurance number, postal address, email address and telephone number);
- financial information (including bank details and bank and credit card statements);
- vehicle information, including driving license, motor insurance information and photographs of your vehicle;
- details of your hobbies and interests;
- details of your employer;
- personal information provided to us by or on behalf of you in connection with our provision of legal services to you. Where required, this may include special categories of more sensitive data such as health data (including your GP details, photographs of injuries, medical notes, reports and records), details of criminal offences and equality and diversity data; and
- employment related information such as qualifications, previous roles and experience, the results of pre-employment checks, references, information relating to your right to work and information relating to any reasonable adjustments required for a disability.
Grounds for processing
The legal basis on which we process your personal data is primarily to support our legitimate interests as a business which provides legal services.
In certain circumstances, we may rely on your express consent to use your personal information however we will let you know when such circumstances arise and you will have the opportunity to withdraw your consent.
The legal basis for processing your personal information in relation to recruitment is because it is necessary to:
- perform or enter into a contract with you;
- comply with our legal obligations; and
- support our legitimate interests in managing our business.
Storage and disclosure
Your personal information will be stored in our case management system and in computer and / or paper files.
We will retain your personal information only for as long as necessary for the purposes for which it was collected, taking into consideration legal and regulatory requirements to which we are subject, limitation periods for taking legal action and our business purposes.
We may share your information with third parties, including:
- those involved in the provision of services to clients, including barristers, other solicitors, accountants, medical experts, other professional advisers and insurance companies;
- third party service providers, such as IT support, banking, insurance, dataroom and security services; and
- courts, tribunals, the Legal Service Agency, government agencies and other law enforcement agencies.
You have the right, in accordance with data protection law, to:
- Access and Information – you have the right to request details and a copy of the personal data that we hold about you and information as to how we process it;
- Rectification – you have the right to request that any inaccurate or incomplete data that we hold about you is corrected or updated;
- Erasure – you have the right to request that we delete the personal data that we hold about you. This is also known as ‘the right to be forgotten’. Please note that this is not an absolute right. This means that it only applies in certain circumstances. We will notify you if we are unable to comply with your request;
- Restriction of processing or to object to processing – you have the right to request that we no longer process your personal data for a particular purpose or to object to such processing;
- Data portability – you have the right to request that we provide you with a copy of your personal data in a form which ensures that it is easily transferable from one IT environment to another in a safe and secure manner; and
- Withdraw consent – if we are processing your personal data on the basis of your consent, you may withdraw that consent at any time.
You have the right to submit a complaint to the supervisory authority for data protection in the United Kingdom, if you feel that we are not processing your personal data in accordance with the law. The relevant body is the Information Commissioner’s Office (“ICO”).
Its contact details are:
The Information Commissioner’s Office – Northern Ireland
3rd Floor , 14 Cromac Place, Belfast
Telephone: 028 9027 8757 Email: firstname.lastname@example.org
We would, however, be grateful for the opportunity to address your concerns before an approach is made to the ICO. Please therefore contact our Data Protection Officer in the first instance.