Please read the following information carefully.
This Privacy Notice contains information about what data I collect and store about you and why. It also tells you with whom I share this information, how to contact me if you have a complaint, and how I retain your information.
I am a “data controller” for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws. I am registered with the Information Commissioner’s Office (ICO).
I am committed to protecting and respecting your privacy. When we conduct business together, I will collect personal information about you. I use that personal information in accordance with the law, particularly with regards to data protection and privacy law including the General Data Protection Regulation.
I take your security very seriously and I have security measures in place to ensure appropriate security for your personal data. Only authorised Nexus Chambers staff and third parties processing data on my behalf have access to your personal data, and then only to the data necessary for the purposes for which they have been given access.
Under the GDPR, you have a number of rights that you can exercise in certain circumstances. These are free of charge. In summary, you may have the right to:
If you want more information about your rights under the GDPR please see the Guidance from the Information Commissioners Office on Individual’s rights under the GDPR.
What information does Andrew collect from you?
In the course of my business, which is the provision of legal services, I process personal data of many different types which may include:
*This is an example of a type of “special category” or a sensitive class of personal data.
How does Andrew obtain my information?
The vast majority of the personal data that I collect is provided to me by or on behalf of my clients to provide legal services to them and/or to consider whether I am in a position to provide legal services to them.
Whose Personal Data does Andrew Process?
I process personal data about my lay and professional clients, potential clients, and individuals who feature in the matters in respect of which I am asked to provide legal services (including but not limited to: witnesses and experts, legal professionals representing other parties, other barristers with whom I am working, court staff and members of the judiciary, and other ancillary to actual or potential proceedings).
Why does Andrew need my information?
(These are the legal bases for Andrew processing your personal information)
Please note you have the right to withdraw this consent at any time, but this will not affect the lawfulness of any processing activity that I have carried out prior to you withdrawing your consent. However, where I rely on other bases apart from consent for processing your information, you may not be able to prevent processing of your data. The withdrawal of your consent will also not affect the lawful retention of your information for the purposes of a potential complaint or appeal or for regulatory purposes.
Who has access to my information?
I do not sell or rent your information to third parties. I also comply with my professional duties including my duties to you which I take very seriously. Subject to my duties and to legal professional privilege, it may be necessary to share your personal data with:
Please note that Andrew does not use automated decision making in the processing of your personal data.
How long will my information be kept?
Andrew will normally only store your information for as long as is necessary for the purposes for which it is being used and in order to fulfil Andrew’s legal and regulatory obligations. Generally this will be around seven years after the end of the case, or seven years after the date of the last payment or the date of writing off fees.
How do I make a complaint?
Andrew is committed to protecting and respecting your privacy. Andrew is also committed to providing you with the best possible service and hopes that you will be satisfied with the way in which he approaches and uses your personal data.
However, the General Data Protection Regulation also gives you the right to lodge a complaint with the Information Commissioners’ Officer if you are in the UK, or with the supervisory authority of the Member State where you work, normally live, or where the alleged infringement of data protection laws occurred. The Information Commissioner’s Officer can be contacted at http://ico.org.uk/concerns/.
In the first instance if you have a complaint about the way that I handle your personal data, I hope that you will contact me so that I have an opportunity to resolve it.
I will occasionally change this Privacy Notice as I continually review my privacy practice.