INTRODUCTION
1. Dylan Nair Solicitors Limited (“we”, “our” or “us”), [trading as Dylan Nair] is a firm of solicitors and is a body authorised and regulated by the Solicitors Regulation Authority under section 9 of the Administration of Justice Act 1985.

2. When we collect and use information provided to us, or information about visitors to our website, we will do so in accordance with applicable data privacy laws.

3. This Privacy Policy explains how we use information that we obtain about you.

SCOPE OF PRIVACY POLICY
4. This Privacy Policy applies to your use of any of our services, including when you request information from us or engage our legal and other services, or as a result of your relationship with one or more of our clients, or where you apply for a job or work placement, or to any information collected from third parties.

5. This Privacy Policy also applies to our website www.dylannair.com

6. We may need to collect certain details from you through our online services if, for example, you want to sign up to our newsletter, enquire about our services, or apply for a job. Our online services may make use of cookies and similar technologies, as described in more detail below.

7. Our client confidentiality obligations are not addressed in this Privacy Policy but are instead described in our terms of business.

USE OF COOKIES
8. Our website uses cookies to better the users experience while visiting the website. Where applicable our website uses a cookie control system allowing the user on their first visit to the website to allow or disallow the use of cookies on their computer / device. This complies with recent legislation requirements for websites to obtain explicit consent from users before leaving behind or reading files such as cookies on a user’s computer / device.

9. Cookies are small files saved to the user’s computer’s hard drive that track, save and store information about the user’s interactions and usage of the website. This allows the website, through its server to provide the users with a tailored experience within our website.

10. Users are advised that if they wish to deny the use and saving of cookies from our website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from our website and its external serving vendors

11. Our website uses tracking software to monitor its visitors to better understand how they use it. This software is provided by Google Analytics which uses cookies to track visitor usage. The software will save a cookie to your computer’s hard drive in order to track and monitor your engagement and usage of the website, but will not store, save or collect personal information. You can read Google’s privacy policy here for further information: www.google.com/privacy.html

12. Other cookies may be stored to your computer’s hard drive by external vendors when our website uses referral programs, sponsored links or adverts. Such cookies are used for conversion and referral tracking and typically expire after 30 days, though some may take longer. No personal information is stored, saved or collected.

INFORMATION COLLECTION

General
13. We will collect personal information directly from you, from clients or from authorised representatives. We may also collect personal information from third parties such as regulatory authorities, your employer, other organisations with whom you have dealings, government agencies, credit reporting agencies, recruitment agencies, information or service providers, publicly available records and the third parties described in the ‘Disclosure of your information’ section below. We will handle any unsolicited information in accordance with law, including destroying or de-identifying such information where we are required to do so by law.

14. We may collect current and historical personal information including for example your name, contact details, identification, organisation, employment, positions held and enquiry/complaint details. We may also collect personal information about your other dealings with us and our clients, including any contact we have with you in person, by telephone, email or online.

Online Services
15. When you use our online services, we may collect the following:

Information you provide by completing forms (this includes information you give us when registering for any of our online services, subscribing to our services, submitting material or requesting further services);
Information you provide to us if you contact us, for example to report a problem with our online services or raise a query or comment; and Details of visits made to our online services including, but not limited to, the volume of traffic received, logs (including, where available, the IP address and location of the device connecting to the online services and other technical information and identifiers about the device and the nature of the visit) and the resources accessed.

Careers and Recruitment
16. If you apply for a job or work placement you may need to provide information about your education, employment, background and state of health. Your application will constitute your express permission to our use of this information to assess your application and to allow us to carry out both recruitment analytics and any monitoring activities which may be required of us under applicable law as an employer.

17. We may also carry out screening checks (including reference, background, directorship, financial probity, identity, eligibility to work, vocational suitability and criminal and regulatory record checks) and consider you for other positions. We may exchange your personal information with academic institutions, recruiters, screening check providers, health service providers, professional and trade associations, law enforcement agencies, recruitment providers, referees and your current and previous employers. Without your personal information, we may not be able to progress considering you for positions with us.

USE OF YOUR INFORMATION
18. We will use your information where it is necessary to fulfil our contractual obligations to you, or because you have asked us to do something before entering into a contract with you (such as provide you with a quotation), or, where it is necessary for us to do so to comply with a legal or regulatory obligation, or where it is necessary to do so because we have, or a third party has, a legitimate interest in doing so (subject to any overriding interests, rights or freedoms of yours).

19. We will only use special categories of personal data (as defined by Article 9 of the General Data Protection Regulation) about you where it is necessary for the purpose of, or in connection with, any legal proceedings (including prospective legal proceedings), or for the purpose of obtaining legal advice, or for the purposes of establishing, exercising or defending your legal rights, or where it is necessary for the purposes of employment and social security law. Special category data includes, but is not limited to, information about your health, ethnicity and your political or religious beliefs.

20. We will only process data concerning your criminal convictions, offences, related security measures, the alleged commission of offences by you, or proceedings for an offence committed or alleged to have been committed by you or the disposal of such proceedings, including sentencing, where it is necessary for the purpose of, or in connection with, any legal proceedings (including prospective legal proceedings), or for the purpose of obtaining legal advice, or for the purposes of establishing, exercising or defending your legal rights.

21. By way of example, we will use information about you to do the following things:

To carry out legal work for you in accordance with our agreement with you;
To facilitate our internal business operations, including to manage risk and to fulfil our legal and regulatory obligations;
To maintain and develop our relationship with you;
To provide you, on an ongoing basis, that you request from us or that we believe may be of interest to you and to measure the popularity and effectiveness of services such as newsletters and seminars, in order to improve what we offer to you and other recipients;
To ensure that content from our online services is presented in the most effective and secure manner for you and for your device and settings;
For research, planning, service development, security or corporate governance or financial management;
To maintain and update our records;
22. Under applicable data protection legislation, we have a duty of care to ensure that your personal information is accurate and up to date. Therefore, please advise us of any changes to your information.

23. We will only retain your personal information for as long as is reasonably necessary in the circumstances. Personal information provided in connection with the provision of our legal services will be retained for no longer than fifteen years unless we agree otherwise with you.

DISCLOSURE OF YOUR INFORMATION
24. We may, in providing our services and operating our business, allow certain service providers and other third parties to access your information.

25. In addition, we may exchange your personal information with third parties where:

You have permitted us to share your personal information in this way;
We are under a legal, regulatory or professional obligation to do so (for example, in order to comply with anti-money laundering requirements, a rule of law or an order of a court or tribunal) or in order to enforce or apply our terms of business or to protect the rights and interests, property, or safety of our firm, our clients or others;
Where disclosure of your information is necessary for the purpose of legal proceedings, including prospective legal proceedings, or so that we can obtain legal or compliance advice, or so that we can otherwise establish, exercise or defend our legal rights, or where a claim to legal professional privilege could be maintained in legal proceedings in respect of any of your information we disclose to our lawyers;
All, or substantially all our assets, or the assets of an associated firm, are merged with or acquired by a third party, or we expand or re-organise our business, in which case your personal information may form part of the transferred or merged assets or we may need to transfer your information to new entities or third parties through which our business will be carried out;
It is relevant in the circumstances to disclose the information to our clients, your employer or place of business, your professional advisers and parties with whom we have co-promotional arrangements (such as jointly sponsored events);
We provide anonymous statistical information about users of our websites and related usage information to reputable third parties, including analytics and search engine providers; or
We use a third-party service provider to provide services that involve data processing, for example archival, auditing, reference checking, professional advisory (including legal, accounting, compliance, financial and business consulting), mailing house, delivery, technology, website, research, banking, payment, client contact, data processing, insurance, forensic, litigation support, marketing and security services.
26. Some of the third parties with whom we share personal information may be located outside of the United Kingdom and / or the European Economic Area. While such third parties will often be subject to privacy and confidentiality obligations, you accept that such obligations may differ from and be less stringent than the requirements of the UK’s privacy laws. In those cases, we are not responsible for imposing the laws of the UK and you may not be able to seek redress under the laws in that jurisdiction.

SECURITY
27. The transmission of information via the internet is not completely secure. We cannot guarantee the security of your data transmitted to our online services; any transmission is at your own risk. Once we have received your information, we will take reasonable steps to use procedures and security features to try to prevent unauthorised access, modification or disclosure. For example, if you communicate with us using email, you assume the risks that such communications between us are intercepted, not received, delayed, corrupted or are received by persons other than the intended recipient.

28. We take reasonable steps to hold information securely in electronic or physical form. Our information security policy is supported by a number of security standards, processes and procedures and we store information in access-controlled premises or in electronic databases requiring logins and passwords. We require our third-party data storage providers to comply with appropriate information security industry standards. All partners and staff and third-party providers with access to confidential information are subject to confidentiality obligations.

THIRD-PARTY SITES
29. In addition to our online services, which we control directly, we also use and provide links to websites which are controlled by third parties, which may include Twitter, LinkedIn and YouTube, where we have certain accounts and profiles.

30. If you use or follow a link to any of these third-party websites, please be aware that these websites have their own privacy policies and that we cannot accept any responsibility for their use of information about you.

YOUR RIGHTS
31. Right of access – You have a right to access personal data that we hold about you. This is referred to as a “subject access request”. We shall respond to subject access requests in accordance with the law, which usually means without delay but at the latest within one month.

32. Right to rectification – You have a right to have inaccurate personal data rectified or completed.

33. Right to erasure – You have a right to request that your personal data is removed from our records.

34. Right to restrict processing – You have a right to request the restriction or suppression of your personal data, subject to certain exceptions.

35. Right to data portability – You have a right to obtain and reuse your personal data for your own purposes and to move, copy or transfer your data from our IT environment to another in a safe and secure way.

36. Right to object – You have a right to object to us using your data based on the legitimate interests of our business, or for direct marketing (including profiling) purposes.

37. Invoking your rights – If you would like to invoke any of the above data subject rights with us, please write to Raj Nair at Dylan Nair Solicitors Ltd, 55 Garstang Rd, Preston, PR1 1LB or Email us at raj@dylannair.com.

38. All of the rights at 32 to 37 above do not apply to information about you that we are obliged by law or by an order of a court or tribunal to disclose, to the extent that any exercise of those rights by you would prevent any such disclosure. This means, for example, that we may refuse to erase information about you if we may need to disclose that information to a court, a regulatory body, a statutory complaints body, or to law enforcement authorities.

39. All of the rights at 32 to 37 above do not apply to information about you where disclosure of that information is necessary for the purpose of, or in connection with, legal proceedings (including prospective legal proceedings) or for the purpose of obtaining legal advice, or otherwise for the purposes of establishing, exercising or defending legal rights. This means, for example, that we may refuse to stop using information about you if we need to use it to defend our own legal rights.

40. We may send you marketing materials relating to our services by email or post. If, at any time, you would prefer to stop receiving newsletters and updates from us, please use the “unsubscribe” option included in the email or other material or alternatively send an email to raj@dylannair.com.

41. Accuracy of information – In order to provide the highest level of customer service possible, we need to keep accurate personal data about you. We take reasonable steps to ensure the accuracy of any personal data or sensitive information we obtain. We ensure the source of any personal data or sensitive information is clear and we carefully consider any challenges to the accuracy of this information. We also consider when it is necessary to update this information, such as name or address changes and you can help us by informing us of these changes when they occur.

STATUS OF THIS POLICY
42. Your provision of personal information to us constitutes your acceptance of the terms of this Privacy Policy.

43. Technologies and information governance practices are constantly developing. We may therefore need to revise this Privacy Policy in future. You should therefore review this page, as a copy will be placed on our website, regularly to ensure that you are aware of any changes to its terms.

CONTACT AND FURTHER INFORMATION
44. If you have any questions about this Privacy Policy or want to submit a written complaint about how we handle your personal information, please contact us via email, in writing or call our office, or you may submit a complaint to the Information Commissioners Office (ICO), you can contact them on 01625 545745 or 0303 123 1113.

45. If you make a privacy complaint, we will respond to let you know how your complaint will be handled. We may ask you for further details, consult with other parties and keep records regarding your complaint.