Personal information about unsuccessful candidates will be held for 6 months after the recruitment exercise has been completed, it will then be destroyed or deleted. Once a person has joined us, we will compile a file relating to their employment. The information contained in this will be kept secure and will only be processed for purposes directly relevant to that person’s employment contract. Once their employment has ended, we will retain the file in accordance with the requirements of our Data Assets Register and then destroy it. For people who make enquiries or requests under the Data Protection Act 2018 We may be asked by any person (including clients and former clients) what personal information we hold about them and about their rights under Data Protection Act 2018. In order to respond to such enquiries we will normally ask for some personal data (and we may have to establish the person’s ID) for example their name, address and email address. For visitors to our website When someone visits our website we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this for example, to show the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. Processing data via outsourced services that we use The table below gives details. Outsourced service provider What data is used? Where is it stored? Is it shared further? How is it protected? When is it destroyed? Overflow telephony A record of our telephone calls Computer system No Restricted access Subject to data retention policy Compliance, auditing We may share personal information for compliance and planned auditing purposes but only where this helps us to fulfil effectively our statutory and regulatory functions Server, Case management database, Office premises No Restricted access Subject to data retention policy
Our professional indemnity insurers Personal information may be disclosed but only where this helps up to fulfil effectively our statutory and regulatory functions Server, Case management database, Office premises No Restricted access Subject to data retention policy ID checks on clients and others We may use personal information provided to carry out credit checks via online search providers Server, Case management database, Office premises No Restricted access See privacy notice for clients and contacts Payroll We may share personal information with those who provide this service to us. Restricted computer system With accountants, HMRC and benefits agency Restricted access In accordance with Retention policy HR functions We may share personal information to deal with general employment related matters. Restricted computer system If appropriate with Legal Expenses Insurers/Legal Advisors Restricted access In accordance with Retention Policy Barristers and experts Certain information to enable us to lawfully perform our professional services N/A No Subject to Confidentially agreement See privacy notice clients and contacts Copying and binding services Certain information to enable us lawfully perform our professional services in respect of the work which we have been instructed to undertake N/A No Restricted Access/ confidentially agreement N/A as data is returned.