Your personal data is collected from you, processed and stored by EBR Attridge LLP Solicitors in accordance with the UK GDPR (Data Protection Act 2018)  and the Legal Aid Agency(LAA)/Solicitors Regulation Authority (SRA) rules. Only the absolute minimum amount of data is collected and is restricted to basic information required to complete ID checks and financial checks, for example if we are applying for Legal Aid on your behalf. Such information is name, date of birth, national insurance number, gender, address, marital status, spouse/partner details (if applicable), ethnicity, disabilities, welfare benefits and income details. Other personal data may be processed dependent on the nature of the retainer.

The reason for requesting this information is exclusively for the purpose of EBR Attridge LLP Solicitors to perform a service on your behalf. This is the lawful basis for collecting your personal data.

EBR Attridge LLP Solicitors have robust systems in place in order to ensure your personal data is retained and processed securely and as such take all reasonable measures to protect your data such as firewalls for electronically held data and secure off site storage facilities for the retention of paper based data. By the nature of the retainer the firm will be required to share your personal data with counsel/ experts/ non legal experts to obtain advice and assistance, translation agencies, and contracted suppliers who under contract with us or have their own satisfactory privacy policies have responsibilities to process personal data only for the purpose it was provided to ensure its safe keeping, not to share with any 3rd party (including outside of the UK) without written instruction and for that data to be returned upon request. Written agreements to this effect are in place with the firm’s IT provider, storage provider and our preferred outsourced interpreter supplier. In addition the firm may be required to share client’s personal data with external auditors or our regulator i.e. The LAA, Lexcel, SRA, Information Commissioners Office ( ICO) etc and any disclosure required by law or regulation such as the prevention of financial crime and terrorism funding and other members of the Criminal Justice System.

We are required to keep your personal data for a minimum period of six years from the conclusion of your matter in the event that you or we need to reopen your case for the purposes of defending complaints or claims against us.

Under the GDPR 2018 you are entitled to request a copy of your personal data that we hold. This is known as a Subject Access Request. If you wish to make a request please contact the person that is dealing with your matter. We will provide you with a copy of your file containing only your personal data and will not include associated documents that contain your personal data.

Personal data requested will be provided to you free of charge within 30 days of request providing the request is not unfounded, excessive or repetitive. Under these circumstances EBR Attridge LLP Solicitors reserve the right to refuse a request with the reason(s) being explained to you.

If you wish to make a complaint regarding how we have handled your personal data you can contact our Data Protection Officer Warren Brazier who can be contacted on warrenbrazier@ebrattridge.com

Should you wish to contact the ICO on such a matter view www.ico.org.uk/concerns

EBR Attridge LLP Solicitors is registered ICO with the under registration reference Z8895731