The Data Protection Act 2018 controls how your personal information is used by organisations, businesses or the government. The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR).
This statement sets out what personal information I may collect from people who contact me and to whom I provide immigration advice.
Information I may collect
I may collect the following personal information about you:
- Contact and identity information such as your name, date of birth, sex, gender identity, postal address, email address, telephone number, social media address, job title and employer’s details.
- Financial information including bank details, statements, payment card details, billing address and payment information.
- Information provided for the purposes of attending meetings with you, or information collected when you access my website.
- Marketing and communication preferences, identification and background information collected as part of my business engagement process.
- Personal information or any other information given by you to me or on your behalf or by third parties.
- Information created in the course of the legal work that I do for you.
I am required to collect personal information in order to identify you before I begin to advise you. I may ask you for other information so that I can advise and represent you in your immigration matter.
How I use your information
I may use your personal information in the following ways:
- Comply with my own legal and regulatory obligations.
- To perform my obligations to you under my terms of business or contract with you.
- To communicate with you, verify your identity, source of funds and other background checks.
- For legitimate business purposes including providing client services, exchanging information on immigration matters, litigating on your behalf, preparing documents, keeping financial records, instructing third parties on your behalf, and working on your matter.
- To manage and respond to complaints.
- In line with any consent about data processing that you may give me.
I do not normally copy your information to anyone outside the European Economic Area except when the particular circumstances of your matter require it. All third parties to whom I may provide your personal information are required to maintain confidentiality in relation to your files.
How your information is stored
If you send me hard-copy documents, these are held in a paper file until they have been scanned and saved electronically to your file. Paper files are held in a locked filing cabinet. I aim to return hard-copy documents within 1 week of receipt.
Electronic copies of documents are held in cloud-based case management software known as Clio which carries ISO27001 certification and using Microsoft software which carries ISO27001 certification equivalent to ISO/IEC 27001:2013 and ISO 27018.
At the conclusion of your matter, I will return any remaining hard-copy documents to you. It is my policy to archive my files for a period of 6 years following completion of your matter. Archived files are held electronically using cloud-based case management software. Accordingly, I may keep your personal information for up to 6 years from the end of your matter.
Your rights
You have the following rights under the GDPR and Data Protection Act 2018:
- The right to access your personal information by making a request to me.
- The right to rectification of personal information that I hold about you.
- The right to erasure of your personal information in line with the GDPR and Data Protection Act 2018.
- The right to restrict the uses I can make of personal information I hold about you.
- The right to move or copy your personal information to another data processor.
- The right to object to my use of your personal information for marketing purposes. In other cases I may continue to use your personal information if there is a compelling reason for me to do so.
If you make a request in relation to your rights listed above I will respond to you within 1 month from the date on which I receive your request. You also have the right to complain to the Information Commissioner’s Office.
Website analytics
When you visit https://kittyfallsimmigrationlaw.com we may collect technical information about your device, including your IP address, operating system and browser type, for system administration and anonymous analytics. This is statistical data about browsing actions and patterns and does not identify any individual.
If Google Analytics or similar tools are used on this site, they may set first-party cookies to help understand how visitors engage with the website so that it can be improved. You can opt out of Google Analytics using Google’s opt-out tools without affecting how you visit the site.
Contact
My identity and contact details: Kitty Falls, Solicitor, 83 Binscombe Lane, Godalming GU7 3QH. Tel: 07752 722 292. Email: kf@kfimmigration.com.