Undertaking an initial assessment of whether you meet the criteria for joining a potential group claim and advising you | We will collect relevant information via eligibility questions on our Website. We will assess your answers to our questions and make a decision about whether you might meet the criteria for joining a potential group claim using a solely automated decision making process. (see below: ‘How we use your personal data for solely automated decision-making’). We will then advise you of our decision. If on the basis of your answers we assess that you might meet the criteria for joining a potential group claim, we will collect some further information from you, including your contact details and other limited information relevant to the potential group claim. We will store your personal data on our IT systems and destroy it in accordance with our data retention and other business policies. | Necessary to take steps at your request before entering into a contract with you: Article 6(1)(b) UK GDPR Necessary for compliance with a legal obligation to which we are subject (data protection law and solicitors’ professional rules on record maintenance): Article 6(1)(c) UK GDPR Necessary for our legitimate interests i.e. to ensure we are following our own internal procedures so we can deliver the best service we are able to: Article 6(1)(f) UK GDPR | Identity Data Contact Data Group Claim Data Other Data |
To prevent and detect fraud against you or us | We will check and monitor the security of our email and IT systems which hold your personal data and undertake other verification checks of your personal data (as necessary) | Necessary for your and our legitimate interests i.e. to minimise fraud that could be damaging for us and for you: Article 6(1)(f) UK GDPR | Potentially any personal data held |
For enquiries or investigations by regulatory bodies (e.g. the Solicitors Regulation Authority or the Information Commissioner’s Office) or law enforcement agencies | We will extract your personal data from our IT systems and disclose it as required by law or further to a court order | Necessary for compliance with a legal obligation to which we are subject (e.g. data protection law, solicitors’ professional rules or a court order): Article 6(1)(c) UK GDPR | Potentially any personal data held |
To ensure our business policies are adhered to e.g. policies covering security and internet use | We will check our use of your personal data against our business policies | Necessary for our legitimate interests i.e. to make sure we are following our own internal procedures so we can deliver the best service we are able to: Article 6(1)(f) UK GDPR | Potentially any personal data held |
To ensure the confidentiality of commercially sensitive information | We will put in place reasonable and appropriate security measures to protect the integrity of our systems that hold your personal data | Necessary for our legitimate interests i.e. to protect trade secrets and other commercially valuable information: Article 6(1)(f) UK GDPR Necessary for compliance with a legal obligation to which we are subject (e.g. solicitors’ professional rules): Article 6(1)(c) UK GDPR | Potentially any personal data held |
For statistical analysis to help us manage this potential group litigation and/or our practice e.g. in relation to our financial performance and other efficiency measures | We will use relevant personal data in data analysis software and also for manual analysis | Necessary for our legitimate interests i.e. to be as efficient as we can so we can deliver the best service we are able to at the best price: Article 6(1)(f) UK GDPR | Identity Data Contact Data Group Claim Data Other Data |
To prevent unauthorised access and modifications to our systems | We will put in place reasonable and appropriate security measures to protect the integrity of our systems that hold your personal data | Necessary for compliance with a legal obligation to which we are subject (e.g. data protection law): Article 6(1)(c) UK GDPR Necessary for our legitimate interests or those of a third party i.e. to prevent and detect criminal activity that could be damaging for us and for you: Article 6(1)(f) UK GDPR | Potentially any personal data held |
To update and maintain our records | We will enter and hold your personal data in the relevant parts of our IT systems and we may hold your personal data in manual records | Necessary to take steps at your request before entering into a contract with you: Article 6(1)(b) UK GDPR Necessary for compliance with a legal obligation to which we are subject (e.g. data protection law and solicitors’ professional rules): Article 6(1)(c) UK GDPR Necessary for our legitimate interests or those of a third party i.e. to make sure we can keep in touch with you where necessary: Article 6(1)(f) UK GDPR | Potentially any personal data held |
For staff management, training and administration | We will access and use your personal data held in our IT systems and may use it in emails between our staff and for training purposes | Necessary for our legitimate interests i.e. to make sure we are following our own internal procedures and working efficiently so we can deliver the best service that we are able to: Article 6(1)(f) UK GDPR | Potentially any personal data held |
To deal with complaints or legal claims against us | We will review your personal data held in our IT systems and may collect other information relevant to the complaint/legal claim. We will review any information collected and assess the merits of any complaint or legal claim. We may also communicate with third parties as necessary to seek advice/representation and/or in connection with legal or prospective legal proceedings | Necessary for our legitimate interests i.e. to ensure that we are able to respond to any complaints or legal claims made against us: Article 6(1)(f) UK GDPR | Potentially any personal data held |
To enforce or apply our Website terms and conditions or any other agreements | We will review your personal data held in our IT systems and if appropriate, use it to take enforcement action, including legal proceedings | Necessary for our legitimate interests i.e. to enforce our legal rights and protect our business: Article 6(1)(f) UK GDPR | Identity Data Contact Data Group Claim Data Other Data |
To administer and protect our business and our Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | We will use your personal data held in our IT systems | Necessary for our legitimate interests i.e. for running our business, network security, to prevent fraud and in the context of a business reorganisation: Article 6(1)(f) UK GDPR Necessary for compliance with a legal obligation to which we are subject (e.g. data protection law): Article 6(1)(c) UK GDPR | Identity Data Contact Data Technical Data |
To improve our Website and your experience (through the use of data analytics) | We will use personal data collected via cookies and other similar technologies on our Website | Necessary for your and our legitimate interests i.e. to understand how our Website is used, keep our Website updated and relevant, improve your user experience and to develop our business: Article 6(1)(f) UK GDPR | Technical Data Usage Data |
For the transfer of your potential legal matter to another entity capable of assessing and/or progressing your potential claim (including a claims management company or another firm of solicitors) (if applicable)) | We will extract your personal data from our IT systems and disclose it to the other firm of solicitors or other entity | Necessary for your and our legitimate interests i.e. to ensure your potential claim is dealt with appropriately: Article 6(1)(f) UK GDPR | Potentially any personal data held |