Who Are We?
We are Gowen & Stevens LLP. We are a limited liability partnership which is registered in England and Wales and is authorised and regulated by the Solicitors Regulation Authority. Our Registered Office is 5 Mulgrave Chambers, 26-28 Mulgrave Road, Sutton, Surrey, SM2 6LE. You can contact us:-
- By post at our registered office address given above;
- By telephone on 020 8661 8611.
How We Collect Data
As a client of Gowen & Stevens LLP, we collect personal data about you in relation to the legal advice and services that we provide to you. The data is collected in the following ways:-
- From any contact that we have with you in relation to your matter whether by telephone, in writing, in person, by email or via our website.
- From information provided to us by other parties such as electronic identification verification companies, other parties that we may have dealings with during the course of any work carried out for you such as mortgage providers, mortgage brokers, estate agents, financial services organisations, opposing parties in litigation, Courts, Government and law enforcement agencies, other information publicly available through online sources.
Cookies are small files saved to the user’s computer’s hard drive that track, save and store information about the users interactions and usage of the website. This allows the website, through its server to provide the users with a tailored experience within our website.
Users are advised that if they wish to deny the use and saving of cookies from our website on to their computer’s hard drive they should take necessary steps within their web browsers security settings to block all cookies from our website.
Other cookies may be stored to your computers’ hard drive by external vendors when this website uses referral programs, sponsored links or adverts. Such cookies are used for conversion and referral tracking and typically expire after 30 days, though some may take longer. No personal information is stored, saved or collected.
Legal Basis and Purposes of Processing
GDPR allows us to use personal information only if we are using it for a reason allowed by law. The basis upon which we may use your personal information will be one or more of the following reasons:-
- Consent – You have given consent to the use of the data for a specific purpose. You can withdraw your consent at any time. Please see the section later in this Notice as to how you can withdraw your consent.
- Contractual – When it is necessary for us to use the data in order to be able to perform the Contract between us, i.e. to carry out the work that you have instructed us to deal with such as purchasing a property or drafting your Will for you.
- Legal obligation – This is when we have to use the personal information in order for us to be able to comply with a legal obligation e.g. in order to comply with the Money Laundering Regulations 2017
- Legitimate Interests – The processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal information which overrides those legitimate interests. A “legitimate interest” is when we have a reason connected to the business or commercial interests of this firm. For example:-
- Internal administrative purposes;
- Ensuring that we comply with the legal and regulatory obligations that are applicable to our business and/or the type of work that we carry out for you;
- To prevent fraud;
- Ensuring information security
- [Processing of personal data for direct marketing to you (however, please see the right to object to such processing, referred to later in this policy)]
Use of your Personal Data
The information that we collect or receive about you may be used in the following ways:-
- To carry out the work that you have instructed us to carry out for you; or
- To deal with any queries that you may raise which are not part of the work that we have been instructed to carry out;
- To contact you and provide information on specific matters or services when you request it;
- To ensure compliance with our legal and regulatory obligations;
- To prevent or detect fraud;
- To ensure the security of our services.
Sharing of your Personal Data
We may share your personal data with our service providers and third parties who provide services on our behalf and who are based in the UK or the European Economic Area (“EEA”). This can include, but is not limited to:-
- IT providers, e.g. providers of our CRM software, IT support company or to the host of our website;
- Providers of electronic identification verification or credit reference agencies;
- Other professionals that we may need to instruct to provide the legal advice or services to you, for example, experts, surveyors, barristers, Courts or other solicitors.
- Government bodies, regulators, professional indemnity insurers and the Legal Ombudsman.
Transfers of your Personal Data outside the EEA
We do not anticipate that any of your personal data will be transferred to or stored by persons outside the EEA. If any personal data is transferred outside the EEA, we will take steps to ensure that there are appropriate safeguards in place to protect the data or it is otherwise allowed under the applicable law.
Retaining your Personal Information
The period of time that we hold your personal data will vary depending on various reasons. We will need to retain your personal data for as long as is necessary for the purposes referred to above. We will normally retain your data for at least 6 years. This is to meet the purposes of our business; to comply with the appropriate legal and regulatory requirements, or for any legal claims. For example, we need to keep the personal data for a period of up to 5 years after the business relationship has ceased in order to comply with the Money Laundering Regulations 2017, or for property transactions involving the disposal of an interest in a property, the personal data will be retained for a period of 12 years.
Although we may obtain or collect a considerable amount of personal data about you, we wish to be as transparent and accessible as possible to you in relation to that personal data.
You also have the following rights:-
- To obtain confirmation from us as to whether or not personal data concerning you is being processed. If it is being processed, to have access to that personal data including:-
- The purposes of the process;
- The categories of personal data concerned.
- The recipients;
- Storage time period/criteria to determine that time period;
- Your rights in relation to that data;
- Whether or not automated profiling is in existence.
- You have the right to have your information kept up to date. We must, without any undue delay, rectify any inaccurate personal data held about you.
- If the personal data is incomplete, in view of the purposes of the processing, you are entitled to have your data made complete.
Right to Erasure
You can require us to delete data, without undue delay, where one of the following grounds applies (except where the processing is needed for compliance with the legal obligation or other legitimate interests;
- The data is no longer necessary for the purpose;
- You have withdrawn any consent that you may have given to that data being held;
- You object to the processing (please see section below in relation to the right to object) and there are no overriding legitimate grounds for the processing;
- Where the personal data is processed for direct marketing purposes and you object;
- If the personal data has been unlawfully processed;
- The personal data has to be erased in order to comply with a legal obligation to which you are subject;
Right to restrict processing
You have the right to restrict processing of your personal data where one of the following applies:-
- If you contest the accuracy of the personal data (the data can be restricted for a period sufficient to allow us to verify its accuracy);
- The processing is unlawful;
- We no longer need the personal data for processing;
- You have objected to the processing, for example, if it was for direct marketing purposes;
- If the right to restrict processing is used then except for storing the data, we cannot process anything without your consent or to protect another person’s rights or for reasons of important public interest. If the restriction on processing is to be lifted then we will inform you in advance.
Right to Data Portability
You are entitled to receive your personal data which you have provided to us in a structured form and in a commonly used, machine readable format.
- This right is without prejudice to the right of erasure.
- If the processing is based upon consent that you have given, then you are entitled to ask us to transmit the data to another data controller without hindrance (if the processing is carried out by automated means).
Right to Object
You are entitled to object to the processing of your data if it relies upon our legitimate interests or is for direct marketing (including profiling) purposes.
You can find out more about your rights by accessing the Information Commissioners Office website at: ico.org.uk