1. Introduction
2. Definitions
- Personal Data: Any information relating to an identified or identifiable natural person (“data subject”).
- Processing: Any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.
- Controller: The entity that determines the purposes and means of processing personal data.
- Processor: The entity that processes personal data on behalf of the controller.
- Cookies: Small text files placed on your device by our website to improve user experience and gather analytics.
3. Data We Collect
We may collect the following categories of personal data:
- Identity Information: Name, date of birth, gender, and nationality.
- Contact Information: Address, email address, and telephone number.
- Professional Information: Job title, employer details, and professional credentials.
- Financial Information: Bank account details, payment information, and transaction history.
- Technical Information: IP address, browser type, and operating system.
- Usage Data: Details about how you use our website and services.
- Sensitive Data: Only when necessary and in accordance with GDPR provisions.
4. How We Collect Data
We collect personal data in the following ways:
- Direct interactions: Through forms, emails, phone calls, or in-person meetings.
- Automated technologies: Cookies, server logs, and analytics tools when you visit our website.
- Third parties: From business partners, service providers, or public databases.
5. Purpose of Data Processing
We process personal data for the following purposes:
- To provide legal services and advice.
- To comply with legal obligations and regulatory requirements.
- To manage client relationships and communication.
- To process payments and manage financial records.
- To improve our website, services, and client experience.
- To market our services, with your consent.
6. Legal Basis for Processing
We rely on the following legal bases for processing personal data:
- Performance of a contract.
- Compliance with legal obligations.
- Legitimate interests, such as improving our services.
- Consent, where required, for specific purposes such as marketing.
7. How We Protect Your Data
The security of your data is a priority for us. We implement the following measures:
- Limiting access to personal data to authorized personnel only.
- Using encryption and secure protocols for data transmission.
- Regularly updating and testing our security systems.
- Implementing data breach response procedures.
8. Data Sharing and Transfers
We may share your personal data with:
- Service providers who assist in delivering our services.
- Regulatory bodies and law enforcement, where required by law.
- Third parties involved in legal proceedings, as necessary.
- International transfers: We ensure that data transferred outside the EEA is protected by appropriate safeguards, such as standard contractual clauses.
9. Retention of Data
We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, regulatory, or reporting requirements. When no longer needed, personal data is securely deleted or anonymized.
10. Your Rights as a Data Subject
Under GDPR, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request corrections to inaccurate or incomplete data.
- Erasure: Request deletion of your personal data, subject to legal requirements.
- Restriction: Request a limitation on processing your data.
- Portability: Request transfer of your data to another organization.
- Objection: Object to processing based on legitimate interests or direct marketing.
- Withdrawal of Consent: Withdraw consent at any time for processing activities based on consent.
To exercise these rights, please contact us at:
- Email: law@chhokar.com
11. Cookies and Tracking Technologies
Our website uses cookies to enhance user experience and gather analytics. You can manage your cookie preferences through your browser settings. For more information, see our Cookie Policy.
12. Data Breach Notification
In the event of a data breach, we will:
- Notify affected individuals without undue delay if there is a high risk to their rights and freedoms.
- Report the breach to the relevant supervisory authority within 72 hours, as required by law.
13. Third-Party Links
Our website may include links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.
14. Updates to This Privacy Policy
We may update this policy to reflect changes in our practices or legal requirements. The latest version will always be available on our website, with the date of the last update indicated.
15. Contact Information
For questions, concerns, or to exercise your rights, contact us:
- Email: law@chhokar.com
This Privacy Policy was last updated on 24/12/2024
Chhokar & Co Solicitors
a business name of
ChhokarLaw LLP -OC448596
29a The Broadway
Southall, UB1 1JY
- +44 (0) 208 574 2488
- law@chhokar.com