In addition to your right to be informed of the grounds for the Company’s processing of your data, you are also advised of the following rights relating to the processing of your personal data:
Right of access
You have the right to access your data and to ensure that our grounds for processing your data are legitimate.
Any information requested will be provided free of charge unless the Company believes any data access request to be unfounded, excessive or repetitive in nature. In these circumstances, the Company can charge a fee that it believes to be reasonable based on the nature of the request.
Any subject access request will be responded to within one calendar month unless it is particularly complex or numerous requests are made. In these circumstances, the Company has up to two months to respond to you.
Right to rectification
If you become aware that any of your personal data that we hold is in any way inaccurate or incomplete, you have the right to have this data rectified.
If the data has been disclosed to any third party, we will inform them of the rectification and advise you of which third parties have received your data.
This will be addressed within one calendar month unless the request is complex in which case the period will be two months.
Right to erasure
In certain circumstances, you have the right to have any personal data we hold for you to be erased.
This would normally apply where we no longer have a lawful basis for processing your personal data or where you have initially given consent to the processing of your personal data and subsequently withdraw that consent.
However, the Company has a file retention policy where certain matters are kept on file for a specific period of time.
The Company may also retain certain documents until they can be released to you or, in the case of certain private client matters, indefinitely. This is in order to comply with legal and regulatory obligations and for insurance purposes in both your and the Company’s interests.
In these circumstances, your data will be held securely and, where practicable, we will anonymise your data. Once this time limit elapses your files (whether held electronically or in hard copy) will be securely deleted or destroyed.
Should you wish to be advised of this we will send you confirmation that your file has been deleted or destroyed.
Right to object
You have the right to object to the processing of your personal data where we have a legitimate interest for processing that data.
Any objection must be based on grounds relating to your particular situation and we may continue to process your personal data if we identify legitimate grounds for continuing to do so and which override your personal interests and also for the establishment, exercise or defence of legal claims.
It is your absolute right to object to the processing of your personal data in relation to direct marketing at any time.
Right to restrict processing
The Company will cease processing your data but may continue to retain it if you:
- Contest the accuracy of the data we hold for you until it is verified;
- Object to the processing of the data in certain circumstances;
- Require the data to be held for the purpose of establishing, exercising or defending a legal claim even where we are no longer required to retain that data.
If your data have been shared with a third party we will notify them of the restriction of the processing of your data.
For further information about your rights please visit the Information Commissioner’s Office website at: www.ico.org.uk