Data Controller: Tessa Hennessy Solicitor of 27 Hugh Allen Crescent, Oxford, OX3 0HL (“the Firm”)

Purposes of processing: Your data is processed in order to:
– Provide legal services to you under contract;
– Comply with regulatory and legal obligations;
– Protect the Firm against potential claims;
– Tell you about news/events which may be of interest to you (during the period of the retainer).

Legal basis: Your data will be processed on the basis that the Firm has a legitimate interest in achieving the aims of processing as set out above.

Personal data held: As a minimum, the Firm is required to positively identify its clients. This includes identifying a trustee or director of a charity or company respectively. In addition, the Firm holds whatever information is provided to it by its clients and others. This will rarely if ever include special category data.

Data sources: The Firm obtains most personal data from its clients but also obtains data from public sources, such as Companies House and/or the Charity Commission.

Recipients of data: Any data provided by a client of the Firm is treated as confidential to that client and will not be shared with third parties unless this is to comply with regulatory and other legal obligations and/or to protect the Firm against a potential claim. Occasionally, it may be necessary to refer a client to another firm of solicitors or to other professional advisors but this will only happen if the client expressly agrees to such a referral.

Data storage: The Firm uses a cloud service provider for storing data and has received appropriate assurances that the data is securely held.

Retention period/deletion of data: Data is held for six years from the end of the relevant client matter. After that period has elapsed, it is destroyed.

Data subject’s rights: Where relevant you have the right, subject to client confidentiality, to
a) withdraw consent to the processing of your data for the purposes set out above;
b) complain to the Information Commissioner’s Office (https://ico.org.uk/) regarding the processing of your data; and
c) obtain a copy of data held on you and to correction of any errors in that data.

Automated decision-making: There is no automated decision-making and we do not use Cookies on our website.