The below Privacy Notice sets out how the Blackwater Law website uses your personal information, your rights in relation to your personal information and Blackwater Law’s obligations in relation to your personal information.
1. Who is Blackwater Law
Blackwater Law is a trading style of Holmes & Hills LLP, a limited liability partnership authorised and regulated by the Solicitors Regulation Authority (SRA Number: 534489).. Blackwater Law is a ‘Data Controller’ as defined by the General Data Protection Regulations (GDPR). Throughout this privacy notice Blackwater Law refers to the legal entity Holmes & Hills LLP andis referred to as ‘we’, ‘us’ and ‘our’.
2. What information do we collect from you?
For the purposes set out in section 4), we collect your personal information and in some instances ‘special category’ information.
Your personal information includes your name, address, telephone number, email address, financial information, date of birth, National Insurance number and electronic identifiers. We may also collect other details subject to the nature of the matter you have instructed us on, including: details of your spouse/partner and dependents or other family members as necessary to deal with your enquiry effectively and deliver services.
‘Special category’ information includes racial or ethnic origin, trade union membership, genetic data, criminal convictions and information concerning your health, sex life or sexual orientation.
‘Special category’ data will only be processed by us on the grounds of dealing with your enquiry, carrying out our contract to deliver services to you, to protect your vital interests, to protect the interests of someone physically or legally unable to give consent or to defend a legal claim, as well as circumstances set out in 4) a) below.
3. Sources of personal information
We collect personal information through a number of means, including:
- From you providing this to us in a face-to-face meeting, or via telephone, e-mail, social media or completion of an online form
- Referrals from third parties you deal with
- Health organisations
- Charitable organisations you deal with
- Digital tracking technologies
4. How and why we use your personal information
a) Provide you with details about our services
Prior to entering into a contract with us to provide you with services, you are likely to want information from us relating to the services you require. We will collect your personal information so as to provide you with this service information. Where you are enquiring about particular services, for example such as litigious claims, you may provide us with ‘special category’ information so that we can provide you with accurate guidance relating to the strength of any potential claim and the appropriateness of our services, for example.
b) Manage complaints
In the event you make a complaint about our legal services, we will process your personal information according to our Complaints Procedure which we advise in our Terms of Business, received by you at the point of instruction.
c) Meet our legal and regulatory obligations
As part of our authorisation and regulation by the Solicitors Regulation Authority and pursuant to relevant UK and EU legislation, we will process your personal information as necessary to ensure compliance with our legal and regulatory obligations.
d) external audits and quality checks
Files relating to your matter and containing personal information may be inspected by third party auditors (including but not limited to LEXCEL, Association of Personal Injury Lawyers, ATE/BTE legal insurers, The Law Society, Action against Medical Accidents, Resolution) to ensure we maintain service quality and operational standards in the interests of our clients and in support of our legitimate business interest to maintain our accredited statuses.
e) Improve operational effectiveness
Your personal information may be processed as part of statistical analysis in support of our legitimate business interest of ensuring we operate as effectively and efficiently as possible, so we can provide our clients with the best possible service at the best possible price.
f) Provide for your partaking in a prize-draw or survey
It is in our legitimate business interest to monitor service standards and as part of this we may use your personal information to invite you to provide us with feedback and in analysing any feedback. As part of providing us with feedback, you may grant consent to use of a testimonial you have provided on our marketing materials and websites. If as part of providing us with feedback you enter into the associated prize-draw, we may process your personal information in operating this.
g) Monitor and audit usage of this website
Anonymous online identifiers derived from your personal data (including gender, geographic location and other demographic location) will form part of an aggregated data set. This aggregated data will be used to monitor the performance of our websites, in particular to monitor technical faults and to make improvements to usability and enhance the visitor experience. This anonymous personal information may be shared with advertising partners, digital consultants and digital publishers to serve advertising to you relating to our services, legal updates, events or changes concerning Holmes & Hills LLP. This is because it is in our legitimate business interest to enhance the performance of our digital assets and effectively target the promotion of our services.
Our websites may contain links to other websites so as to provide you with easy access to third party content we believe may be of interest. These other sites will not be under our control and will therefore not be governed by this Privacy Notice. We are not responsible for the protection and privacy of your personal information that is shared with these third party websites. We recommend you familiarise yourself with the privacy statements and cookie policies of these third party websites.
h) Communicate with you about services, news regarding the healthcare industry and changes concerning Blackwater Law (i.e. marketing)
We have a legitimate business interest to process your personal information in order to promote our services and news concerning Blackwater Law or NHS service providers relevant to you . We will not normally require your consent to process your personal information for these purposes, where we do (such as when we intend to use an electronic method of communication), we will seek this separately and clearly.
Where your relationship to Blackwater Law is due to to your position at a corporate entity (Ltd, PLC, LLP, etc.) and where we have carried out a Legitimate Interest Assessment, we will process your personal information to send you communications in either electronic or non-electronic form.
Where we send ‘marketing’ communications to you by email we may collect information about how you engage with this content, your web browsing activity, operating system and IP address, so as to improve our communications. If you wish to cease receiving such communications you can opt-out using the appropriate links in such emails, or you can contact us at firstname.lastname@example.org . You may continue to receive emails relating to any services we are providing to you.
To better understand you as a client, provide for compliance with the GDPR and other relevant UK and EU legislation; and to help manage the accuracy of your personal information, we may share your personal information with data service providers.
‘Special category’ data will not be used in the targeting of aforementioned ‘marketing’ communications.
We do not knowingly target communications, ‘marketing’ or otherwise, at children.
We will never sell your personal information to third parties for their ‘marketing’ or any other purpose.
5) Keeping your personal information secure
We take the security of your personal information very seriously and have appropriate security measures to prevent personal information being lost or damaged through accident or unlawful access. Those accessing your data will do so in an authorised manner and are subject to a duty of confidentiality. We also have stringent technological and, where possible, physical controls in place to restrict access to our systems and documentation.
We have procedures in place to deal with any suspected data breach and will inform you and any relevant regulator in the event of a suspected data breach where we are legally required to do so.
6) Who might we share your information with?
We may share your personal information with relevant third parties as necessary to deliver services to you as contracted. These parties include, but are not limited to:
- HM Revenue & Customs
- Courts and Tribunals
- Agents, Insurers and Brokers
- Legal Counsel
- Non-legal expert advisors
- Medical experts and agencies
- Financial institutions
- Law enforcement agencies
- Local authorities
- Identification verification providers
- Document signing representatives
Where the sharing of your personal information is not necessary to provide the services you have requested from us or for reasons elsewhere stated in this privacy notice, your consent will be sought prior to this personal information being shared.
7) How long do we hold your information?
Where we are providing or have provided services to you, we will keep your personal information for as long as is necessary to deliver the contracted services you have requested from us or in order to comply with legal and regulatory obligations, resolve disputes and legal claims, as well as enforce the terms of our contracts. In other circumstances we will hold personal information for as long as is necessary and in accordance with this privacy notice.
In some instances we will anonymise your personal information in order to provide for statistical analysis over periods extending beyond the retention period, we therefore cease to process your personal information as part of this statistical analysis.
8) Your rights
Under the General Data Protection Regulations you have the rights set out below.
a) The right to be informed
b) The right of access
You have the right to request access to the personal information we hold about you.
c) The right to rectification
You have the right to request that any personal information is rectified if this is inaccurate or incomplete.
d) The right to erasure (the right to be forgotten)
You have the right to request the erasure of your personal information where there is not a compelling reason for us to continue to hold this.
e) The right to object
You have the right to object to processing of personal information on the grounds of legitimate interest. Where we can demonstrate compelling legitimate grounds for the processing, which override your interests, freedoms and rights, your personal information may continue to be processed.
f) The right to restrict processing
You have the right to request that we block or restrict the processing of your personal information in certain circumstances.
g) Rights relating to automated decision-making and profiling
We do not subject your personal information to automated decision-making other than as part of the process of entering into a contract. We may profile your personal information so as to better understand you as a client, including your other or future legal needs and to meet your reasonable expectations for relevant, timely and accessible communications from us. This is because it is in our legitimate business interest to provide you with timely information on service offerings you may need, in our attempt to engage, retain or re-engage you as a client, through legally compliant means.
To opt-out of profiling, contact us using the details provided in section 12) Contact us.
When exercising these rights, we will go through a process of verifying your identify to ensure data is not disclosed to parties that do not have the right to receive it. These rights can be exercised without cost but for circumstances where requests made of us are excessive in their frequency or scope, or are unfounded, a reasonable fee will be charged.
Responding to a request to exercise a right:
We will aim to respond to all requests within one calendar month but in some circumstances it may take us longer to respond if your request is one of a series of requests, your request is particularly complex, you are requesting excision of multiple rights at once, or we are having difficulty verifying your identify.
9) Where your personal information is held
Information may be held at our offices and those of relevant third parties (see section 5) Who might we share your information with?) with whom your personal information may be shared for the reasons set out previously. Some of these third parties may be based outside of the European Economic Area (EEA). Also see section 11) Transferring your personal information outside of the EEA.
10) Making a complaint
If you are not satisfied with our response to your comment or question relating to our processing of your personal information and you think we are not processing your personal information in accordance with legislation, you can complain to the Information Commissioner’s Office (ICO).
11) Transferring your personal information outside of the EEA
In order to deliver the requested services to you as contracted, in some circumstances it may be necessary to share your personal information with third parties outside of the EEA. Examples include where an expert or advisor is located outside of the EEA, where you are based outside of the EEA, or where there is an international element to your matter, amongst others.
Non-EEA countries do not have the same data protection laws as the United Kingdom and EEA.
12) Contact us
You can contact us about your personal information or our processing of this using email@example.com or by calling 01376 529293. Alternatively you can write to us at the below address:
Holmes & Hills LLP (trading as Blackwater Law)