Sarah Rostamlou-Andrews Law Privacy Statement

This Privacy Statement explains what information I will hold about you as my client, why I have that information in my possession and what I do to protect it and how you can have that information removed if you require me to do so. I am providing you with this information pursuant to the General Data Protection Regulations (GDPR).

I, Sarah Rostamlou-Andrews, am the person with responsibility for this Privacy Statement and ensuring compliance with its contents.  

I reserve the right to change this Privacy Statement from time to time and you should, therefore, check the website of Sarah Rostamlou-Andrews Law to make sure that you are aware of my up to date policy. It is important that you read this Privacy Notice and my Terms and Conditions of business so that you are aware of the terms upon which I will undertake work for you and how I treat your personal information.

Who am I?

I am a freelance solicitor who is regulated by the Solicitors’ Regulation Authority (the ‘SRA’).

My business address is:

Willowbank Barn

Charnleys Lane

Banks

Southport

PR9 8HH

What information do I hold about you and why?

The information that I hold about you is necessary for me to carry out your instructions and may include such information as your name, address, date of birth, contact details, gender and nationality.

Any information that you provide to me is vitally important as it enables me to carry out any work on your behalf accurately and to the best of my ability. For that reason should any of your personal information change it is essential that you let me know as soon as possible.

I use the information you provide to me primarily for the provision of legal services to you and related purposes including updating and enhancing client records, analysis to help me manage my Practice, statutory returns and legal/regulatory compliance.

My use of that information is subject to your instructions, the Data Protection Act 1998 and the General Data Protection Regulation (GDPR).

Your personal information is primarily collected from you directly but may, on occasions, be provided by third parties.

The information that I hold about you will only be information that is directly relevant to your instructions to Sarah Rostamou-Andrews Law. The personal information that I receive will vary depending upon the type of work that I undertake.

Who do I share your personal information with?

The personal information that I hold about you will be used for the purposes of carrying out my work on your behalf. Accordingly, that information may be provided, for example, to third parties such as Barristers, IT Support, the Court and regulatory bodies. You have the right of access under the Data Protection Legislation to the personal data that I hold about you.

How long will I hold your information for?

Whilst I will hold your information for as long as I am undertaking work on your behalf, I have certain legal and insurance obligations to keep a record of that information for a period of time after the work that has been undertaken for you has been completed. This varies from case to case but broadly any such information will be held for at least 6 years from the date of the conclusion of your instructions.

I will only seek to use your personal information for the purpose for which it was originally collected.

Because of the legal and regulatory requirements that Solicitors operate in accordance with, information may be shared, insofar as it is necessary, in particular, with the Solicitors Regulation Authority, the Law Society, the Legal Ombudsman and my Insurers.

Where permissible and appropriate any such information will be anonymised.

My Responsibilities

I take the utmost care with confidential information that I hold about you. When I contact you by email or other electronic means I do this with your consent and in order to carry out your instructions. The same applies to communications by telephone and by letter. I ensure that any personal information that you provide to me, in any paper format, is stored securely within my office and, likewise, any electronic information that I hold is stored securely on my secure computer system.

The only people with access to that information are myself and my IT Support who assist in protecting the confidentiality of your information.

I employ measures to protect the security of any personal information that you provide to me from being accessed by anyone who is unauthorised to access that information or from being lost or inadvertently disclosed in any way.

You will appreciate that email is not a totally secure medium but I do strive to ensure in all ways possible that your personal information is kept safe. I will use my best endeavours to ensure that no unauthorised parties have access to your private information.

Should you be concerned about the way in which I handle your personal data at any time, I would ask you to raise this with me in the first instance. You do ultimately, have the right to lodge a complaint with a supervisory body such as the Information Commissioner’s Office, the Solicitors Regulation Authority or the Legal Ombudsman.

Please note that external firms or organisations may conduct audits or carry out quality checks on my Practice. These external firms and organisations are required to retain confidentiality in relation to your files just in the same way as I am. You have a right to have personal information amended if any of the information held about you is inaccurate in any way.

You may also have a right to be forgotten where, in particular circumstances, you can ask for personal information about you to be erased subject to my legal and regulatory obligations.

You may have a right to restrict processing though this may have an impact on my ability to provide legal advice and assistance to you.

You also have the right to have personal information held about you to be transferred to another organisation.

You also have the right to object to certain types of processing such as marketing. However, I will only contact you for such purposes where you have provided your specific consent and authority for us to do so.

In limited circumstances where you have provided your consent to the collection, processing and transfer of your personal information for a specific purpose you may have the right to withdraw such consent for that specific processing at any time. To withdraw your consent please contact me directly.

Further Information

I hope that the information set out in this Privacy Statement is of assistance to you but in the event that any specific issues arise upon which you require further clarification please do not hesitate to contact me.