Town Legal LLP is a boutique planning law firm. We are committed to safeguarding your personal information and dealing with it responsibly and in accordance with UK law and data protection principles. Town Legal LLP is the data controller of any personal information collected by, or provided to, us in connection with our business.
We are registered with the UK Information Commissioner’s Office with registration number ZA221370. Our Data Privacy Partner is Elizabeth Christie and her deputy is Raj Gupta.
Your data privacy rights
You have a number of rights regarding any personal information of yours that we process. You have the right to ask us for:
In certain circumstances, you may also object to our processing of your personal information or restrict the processing of your information.
The extent to which we must comply with your request will depend on the circumstances, including our reason for processing your information. You can find out more about your rights by visiting the Information Commissioner’s Office website at www.ico.org.uk
If you have provided us with your consent to the processing of your personal information (for example, when subscribing to one of our mailing lists) you have the right to withdraw your consent at any time and we will cease processing your information for that purpose. We may, however, continue to process your personal information for other purposes where we have another legitimate basis for doing so.
If you have any requests concerning your personal information or any queries concerning our processing, please contact us at firstname.lastname@example.org or in writing to our Data Privacy Partner, 10 Throgmorton Avenue, London EC2N 2DL. We will respond to your enquiry within 30 days unless the query is complex.
You will not have to pay a fee to access your personal information (or to exercise any other right as data subject). However, we may charge a reasonable fee, if your request is clearly unfounded or excessive.
How we obtain personal information
We obtain personal information in the course of our business from or about a number of different categories of people and from a number of different sources. This information may be provided directly by you or:
What we collect
We collect personal information which can include one or more of the following:
This information may include special category data which the law requires us to treat with extra care. Special category data can include information about your health, racial or ethnic origin, religious or political beliefs, trade union membership, sex life or sexual orientation.
What we do with your personal information
We collect, create, hold and use personal information for the purpose of providing legal services to our clients pursuant to contracts for services with the clients. We process that information in order to perform the legal services that have been requested and also for background purposes including business acceptance (conflict, anti-money laundering and reputational checks), billing and finance purposes and administration of the matter. This information may be disclosed to third parties to the extent necessary to provide our legal service to our clients.
We also use personal information for our own business purposes including:
We do not make decisions based on automatic profiling.
What is the basis for processing your personal information?
We will only process your personal information where we have a lawful basis for doing so. The lawful basis for processing personal information are set out in UK legislation and are explained in detail on the Information Commissioner’s Office website at www.ico.org.uk. The lawful basis we rely on to process your data are:
Sharing personal information
We are based in England. If you are outside the UK, any personal information you transfer to us will be transferred to and stored in the UK. This may involve a transfer of your personal information out of the European Economic Area or another geographical area where information protection may be higher than offered in the UK. We use cloud services for storing information. Consequently, your personal information will be stored in the cloud. Details about how we protect your personal information are set out below.
We may share your personal information with third parties where this is permitted under UK data protection law including with:
We do not sell personal information to third parties.
Protecting your personal information
We use trusted IT suppliers to protect and preserve personal information we process and control. They employ up-to-date data storage and security techniques to protect your personal information from unauthorised access, improper use or disclosure, unauthorised modification or unlawful destruction or accidental loss. All our employees and any third parties we engage to process your personal information are obliged to respect the confidentiality of your personal information.
Keeping personal information
We hold personal information and other information for different periods reflecting both good data protection practice and our regulatory, statutory and contractual requirements. These periods are set out in our data retention policy, which is revised from time to time. Please contact us if you would like to know the retention period for your own data.
Personal data supplied for the purpose of due diligence checks is used only for that purpose. It will be kept for a minimum of five years after the termination of the business relationship between us and destroyed when your client file is destroyed. This will usually be between six and ten years after the last matter file is closed.
Town Legal LLP’s website
We are committed to safeguarding the privacy of visitors to our website.
You are not required to provide any personal information on the public areas of our website. However, you may choose to do so by completing the contact form on our website. If you do, your personal information will be treated as set out in this policy.