Privacy Notice
This Privacy Policy explains how we handle and treat your data when you (i) contact us on our website or (ii) engage with us to use the products or services that Lionshead Law provides (our “Services”). It also includes information about other individuals whose personal information we may process as a result of providing the Services and individuals who apply to work at Lionshead Law.
1. Purpose of this Policy
This Privacy Policy (“Privacy Policy”) explains our approach to any personal information that we collect from you or which we have obtained about you from a third party and the purposes for which we process your personal information. It also sets out your rights in respect of our processing of your personal information. This Privacy Policy will inform you of the nature of your personal information that is processed by us and how you can request that we delete, update, transfer and/or provide you with access to it.
2. Data controller
Lionshead Law Limited of 78 York Street, London W1H 1DP (a UK law firm authorised and regulated by the SRA under number 644580) is the data controller responsible for the processing of your personal data.
3. How to contact us
If you have any questions about this Privacy Policy or want to exercise your rights set out in this Privacy Policy, please contact us by:
• sending an email to: enquiries@lionsheadlaw.co.uk; or
• calling us on: 020 7127 0432.
4. What personal information do we collect
We may collect personal information from you in the course of our business, including through your use of our website, when you contact or request information from us or when you engage our Services.
Our primary goal in collecting personal information from you is to:
• verify your identity
• deliver our Services
• carry out requests made by you on our website or in relation to our Services
• investigate or settle inquiries or disputes
• comply with any applicable law, court order, other judicial process, or the requirements of a regulator
• enforce our agreements with you
• protect the rights, property or safety of us or third parties, including our other clients and users of our website or our Services
• carry out recruitment, and
• use as otherwise required or permitted by law.
To undertake these goals we may process the personal information set out below. This is a non-exhaustive list which is reflective of the varied nature of the personal information processed as part of a law firm providing legal services:
• If you contact us via our website:
o Name.
o Email.
o Other information relevant to the provision of Services.
• If you are an individual client in receipt of our Services or prospective individual client:
o Identity Data, such as contact information, copies of your passport,
driving licence, birth certificate, national identity card, utility bills and/or
other identifying information required to be provided to us for Know Your
Client and anti-money laundering purposes.
o Matter Data, which includes any personal data about you connected with
your instructions to us, including correspondence between us, notes of
our calls and meetings, and third party information about your matter.
o Financial Data, which includes bank account and/or other billing details.
We may also need to obtain evidence of source of funds/wealth for the
purposes of Know Your Client and anti-money laundering.
o Transaction Data, which includes details about the costs of the matter
and any payments to and from you.
• Where Lionshead Law is engaged by corporate entities, such instructors are not data subjects. However, as part of such instructions personal information may be provided to us (e.g. personal information relating to any of our corporate clients’ or prospective clients’ officers or personnel, any opponent or vendor or purchaser or personal information relating to their legal advisors or personnel).
• If you are an individual whose personal information is processed by us as a result of our providing the Services to others (including individual clients and corporate clients) we will process a variety of different personal information depending on the Services provided. This may include personal information relating, without limitation, to any of our corporate clients’ or prospective clients’ officers or personnel, or to any opponent or vendor or purchaser personal information including personal information relating to their legal advisors, other advisors or personnel.
• We might also need to process personal information in relation to other third parties instructed either by our own clients or other persons or companies involved with us providing the Services to our client (for instance other law firms, experts etc.).
• For clients and prospective clients, we also collect information to enable us to update you about any legal changes or market our products and Services which may be of interest to you.
• If you are a potential recruit to join Lionshead Law as a Consultant or employee we might collect personal information relevant to your application or which we are required to collect. This could include identity data (such as, without limitation, passport and date of birth), career data (such as, without limitation, details about your education and qualifications, your skills and experience) and financial data (such as, without limitation, salary history and bank account and tax details).
5. How do we use your personal information
We may use your information for the following purposes:
• Fulfilment of Services
We collect and maintain personal information that you voluntarily submit to us during your use of the website and/or our Services to enable us to perform the Services. Please note also that our Terms of Business apply when we provide the Services.
o What is our legal basis?
It is necessary for us to process your information to perform our
obligations in accordance with any contract that we may have with you. It
is in our legitimate interest or a third party’s legitimate interest to use your
personal information in such a way to ensure that we provide the best
client service we can to you or others.
• Queries on our website and via telephone
Our website allows you to request information about our Services including electronic enquiry forms and a telephone enquiry service. Contact information may be requested in each case, together with details of other personal information that is relevant to your Service enquiry. This information is used in order to enable us to respond to your requests.
o What is our legal basis?
It is in our legitimate interest or a third party’s legitimate interest to use
your personal information in such a way to ensure that we provide the
best client service we can to you or others.
• Business administration and legal compliance
We use your personal information for the following business administration and legal compliance purposes:
o to comply with our legal obligations (including any Know Your Client or
Anti-Money Laundering or Anti-Bribery, conflicts or similar obligations
including, but without limitation, maintaining regulatory insurance);
o to enforce our legal rights;
o to protect the rights of third parties; and
o in connection with a business transaction.
o What is our legal basis?
Where we use your personal information in connection with a business
transaction, to enforce our legal rights, or to protect the rights of third
parties it is in our or a third party’s legitimate interest to do so. For all
other purposes described in this section, it is our legal obligation to use
your personal information to comply with any legal obligations imposed
upon us.
• Recruitment
We use your personal information for the following recruitment purposes:
o To assess your suitability for any position for which you may apply at
Lionshead Law including consultancy positions or employed positions.
o To review Lionshead Law’s equal opportunity profile in accordance with
applicable legislation to ensure that Lionshead Law does not discriminate
on the grounds of gender, race, ethnic origin, age, religion, sexual
orientation, disability or any other basis covered by UK legislation. All
employment related decisions are made entirely on merit.
o What is our legal basis?
Where we use your personal information in connection with recruitment it
will be in connection with us taking steps at your request to enter a
contract we may have with you or it is in our legitimate interest to use
personal information in such a way to ensure that we can make the best
recruitment decisions for Lionshead Law. We will not process any special
category data except where we are able to do so under applicable
legislation or with your explicit consent.
• Marketing communications
We may carry out the following marketing activities using your personal information:
o Email marketing. This will ordinarily just relate to the provision of legal
updates which might be of use to you and you have the right to opt out
of receiving such email updates. Occasionally we may email you to
market our products and Services.
o What is our legal basis?
It is in our legitimate interest or a third party’s legitimate interest to use
your personal information to update you about legal changes or for
marketing purposes. We will only send you marketing
communications where you have asked us to be on our mailing list for
such purposes or where we have a lawful right to do so. You have a
right to opt out of receiving such email updates.
6. What is our legal basis to use or process your personal information
It is necessary for us to use your personal information;
• To perform our obligations in accordance with any contract that we may have with you.
• It is in our legitimate interest or a third party’s legitimate interest to use personal information in such a way to ensure that we provide the Services in the best way that we can.
• It is our legal obligation to use your personal information to comply with any legal obligations imposed upon us.
7. Who do we share your personal information with
Lionshead Law may share personal information with a variety of the following categories of third parties as necessary:
• Our solicitor consultants.
• Government or regulatory authorities.
• Professional indemnity or other relevant insurers.
• Regulators/tax authorities/corporate registries.
• Third parties to whom we outsource certain services such as, without limitation, document processing and file management services, IT systems or software providers, IT support service providers, document and information storage providers and AML search agents such as Smartsearch.
• Third parties engaged in the course of the services we provide to clients such as accountants, counsel, arbitrators, mediators, clerks, witnesses, cost draftsmen, court, opposing party and their lawyers, document review platforms and experts such as tax advisors or valuers.
• Third party postal or courier providers who assist us in delivering documents related to a matter.
• Please note this list is non-exhaustive and there may be other examples where we need to share with other parties in order to provide the Services as effectively as we can.
9. Third party contractors and other controllers
As mentioned above, we may appoint sub-contractor data processors as required to deliver the Services who will process personal information on our behalf and at our direction. We conduct an appropriate level of due diligence and put in place contractual documentation in relation to any sub-contractor to ensure that they process personal information appropriately and according to our legal and regulatory obligations. To the extent that our solicitor consultants sub-contract services for administrative purposes, we also require them to put in place contractual documentation mirroring our data processing requirements in relation to any sub-contractor to ensure the appropriate processing of personal information in accordance with our legal and regulatory obligations.
Further, we may appoint external data controllers where necessary to deliver the Services (for example, but without limitation, accountants, barristers or other third party experts). When doing so we will aim to ensure that appropriate safeguards are put in place in relation to processing of personal data, which may include sending you a copy of their own Data Privacy Notice so you can understand how your personal data will be processed by them.
10. Where do we transfer your data to
In order to provide the Services it may sometimes be necessary to transfer your personal information to locations outside the jurisdiction in which you provide it. This would normally be where you have instructed us to seek advice from experts based outside the United Kingdom or this is otherwise necessary as part of the Services.
11. How long do we keep your personal information for
For visitors contacting us via our website, we will retain relevant personal information for at least three years from the date of our last interaction with you and in compliance with our obligations under the EU General Data Protection Regulation or similar legislation around the world, or for longer if we are required to do so according to our regulatory obligations or professional indemnity obligations.
For Service provision to any client, we will retain relevant personal information for at least six years from the date of our last interaction with that client and in compliance with our obligations under the EU General Data Protection Regulation or similar legislation around the world, or for longer as we are required to do so according to our regulatory obligations or professional indemnity obligations. We may then destroy such files without further notice or liability.
If personal information is only useful for a short period e.g. for specific marketing campaigns we may delete it.
12. Confidentiality and the security of your personal information
We are committed to keeping the personal information provided to us secure and we have implemented appropriate information security policies, rules and technical measures to protect the personal information that we have under our control from unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss.
All of our partners, employees, consultants, workers and data processors (i.e. those who process your personal information on our behalf, for the purposes listed above), who have access to, and are associated with the processing of personal information, are obliged to respect the confidentiality of such personal information.
13. How to access your information and your other rights
You have the following rights in relation to the personal information we hold about you:
• Your right of access
If you ask us, we will confirm whether we’re processing your personal information and, if necessary and lawful, provide you with a copy of that personal information (along with certain other details). If you require additional copies, we may need to charge a reasonable fee.
• Your right to rectification
If the personal information we hold about you is inaccurate or incomplete, you are entitled to request to have it rectified. If you are entitled to rectification and if we have shared your personal information with others, we will let them know about the rectification where possible. If you ask us, where possible and lawful to do so, we will also tell you who we have shared your personal information with so that you can contact them directly.
• Your right to erasure
You can ask us to delete or remove your personal information in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable). If you are entitled to erasure and if we have shared your personal information with others, we will let them know about the erasure where possible. If you ask us, where it is possible and lawful for us to do so, we will also tell you who we have shared your personal information with so that you can contact them directly.
• Your right to restrict processing
You can ask us to ‘block’ or suppress the processing of your personal information in certain circumstances, such as where you contest the accuracy of that personal information or you object to us processing it. If you are entitled to restriction and if we have shared your personal information with others, we will let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we will also tell you who we have shared your personal information with so that you can contact them directly.
• Your right to data portability
You have the right, in certain circumstances, to obtain personal information you have provided us with (in a structured, commonly used and machine readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.
• Your right to object
You can ask us to stop processing your personal information, and we will do so, if we are:
o relying on our own or someone else’s legitimate interests to process your
personal information, except if we can demonstrate compelling legal
grounds for the processing; or
o processing your personal information for direct marketing purposes.
• Your right to withdraw consent
If we rely on your consent (or explicit consent) as our legal basis for processing your personal information, you have the right to withdraw that consent at any time.
• Your right to lodge a complaint with the supervisory authority
If you have a concern about any aspect of our privacy practices, including the way we have handled your personal information, you can report it to the relevant Supervisory Authority.
Please note that some of these rights may be limited where we have an overriding interest or legal obligation to continue to process the data or where data may be exempt from disclosure due to reasons of legal professional privilege or professional secrecy obligations.
14. Collection of information by third-party sites and sponsors
Our website may contain links to other sites whose information practices may be
different than ours. Visitors should consult the other sites’ privacy notices as Lionshead Law has no control over information that is submitted to, or collected by, these third parties.
15. Changes to this Privacy Policy
We may make changes to this Privacy Policy from time to time. We may also make changes as required to comply with changes in applicable law or regulatory requirements. Where it is practicable, we will notify you by email of any significant changes. However, we encourage you to review this Privacy Policy periodically to be informed of how we use your personal information.