6. How Do We Use Your Data?
6.1 All personal data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. We will comply with our obligations and safeguard your rights under the Data Protection Act 2018 and GDPR and any subsequent legislation at all times. For more details on security see section 7, below.
6.2 Our use of your personal data will always have a lawful basis, either because it is necessary for our performance of a contract with you, because you have consented to our use of your personal data (e.g. by subscribing to emails), or because it is in our legitimate interests. Specifically, We may use your data for the following purposes:
- We will use your personal contact information to contact you by telephone or email and liaise with you regarding our services and products that may be of interest to you;
- Supplying our products and/or services to you (please note that we require your personal data in order to enter into a contract with you);
- Personalising and tailoring our products and/or services for you;
- Replying to emails from you;
- Supplying you with emails that you have opted into (you may unsubscribe or opt-out at any time by clicking the unsubscribe link in the footer of emails)
- Market research;
- Analysing your use of our Site and gathering feedback to enable us to continually improve our Site and your user experience;
6.3 With your permission and/or where permitted by law, We may also use your data for marketing purposes which may include contacting you by email and/or telephone and/or text message and/or post with information, news and offers on our products and/or services. We will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that we fully protect your rights and comply with our obligations under the Data Protection Act 2018 or GDPR and subsequent legislation and the Privacy and Electronic Communications (EC Directive) Regulations 2003.
6.5 You have the right to withdraw your consent to us using your personal data at any time, and to request that we delete it.
6.6 We do not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected or to comply with any legal regulatory or reporting obligations or to assert or defend against legal claims.
Data will therefore be retained for the following periods (or its retention will be determined on the following bases):
- Pre-Sale Information: Any information we hold that does not lead to a sale will generally be kept for a period of 12 months. If you have asked us not to contact you it will be necessary for us to keep your basic contact information within our suppression files for the purposes of recording and complying with your request.
- Post Sale Information: Due to the nature of the business of Estate Planning we will keep any information indefinitely due to the importance of providing on-going customer service.
8. Do We Share Your Data?
8.1 Subject to section 8.2, we will not share any of your data with any third parties for any purposes without your consent unless we are legally obligated to do so.
8.2 In certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal obligations, a court order, or a governmental authority.
8.3 We may share your data with other companies in our group details of which are listed in Schedule Two for those purposes stated within that Schedule Two.
8.5 We may sometimes contract with third parties to supply products and services to you on our behalf. These may include payment processing, delivery of goods, search engine facilities, advertising, and marketing. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, We will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, our obligations, and the obligations of the third party under the law.
8.6 We may compile statistics about the use of our site including data on traffic, usage patterns, user numbers, sales, and other information. All such data will be anonymised and will not include any personally identifying data, or any anonymised data that can be combined with other data and used to identify you. We may from time to time share such data with third parties such as prospective investors, affiliates, partners, and advertisers. Data will only be shared and used within the bounds of the law.
8.7 We may sometimes use third party data processors that are located outside of the European Economic Area (“the EEA”) (The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein). Where we transfer any personal data outside the EEA, We will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK and under the Data Protection Legislation as set out in Schedule Two.
8.8 In certain circumstances, We may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal requirements, a court order, or a governmental authority.
9. What Happens If Our Business Changes Hands?
9.1 We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Notice, be permitted to use that data only for the same purposes for which it was originally collected by us.
9.2 In the event that any of your data is to be transferred in such a manner, you will not be contacted in advance and informed of the changes. When contacted you will, however, have the choice to have your data deleted or withheld from the new owner or controller.