Privacy Notice

We collect or use the following personal information to comply with legal requirements:

• Name
• Contact information
• Identification documents
• Client account information
• Health and safety information
• Any other personal information required to comply with legal obligations
• Safeguarding information
• Criminal offence data

We also collect or use the following special category information to comply with legal requirements. This information is subject to additional protection due to its sensitive nature:

• Racial or ethnic origin
• Political opinions
• Religious or philosophical beliefs
• Health information
• Sex life information
• Sexual orientation information

We collect or use the following personal information to protect client welfare:

• Names and contact information
• Client account information
• Health and wellbeing information
• Emergency contact details

We also collect or use the same special category information listed above to protect client welfare, subject to additional protection due to its sensitive nature.

Under UK data protection law, we must have a lawful basis for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO's website.

Which lawful basis we rely on may affect your data protection rights, which are set out in brief below:

• Your right of access. You have the right to ask us for copies of your personal information.
• Your right to rectification. You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
• Your right to erasure. You have the right to ask us to delete your personal information.
• Your right to restriction of processing. You have the right to ask us to limit how we use your personal information.
• Your right to object to processing. You have the right to object to the processing of your personal data.
• Your right to data portability. You have the right to ask that we transfer your personal information to another organisation, or to you.
• Your right to withdraw consent. When we use consent as our lawful basis, you have the right to withdraw your consent at any time.

If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the contact details at the top of this notice.

Our lawful bases for the collection and use of your data

• Consent. We have permission from you after we gave you all the relevant information.
• Legal obligation. We have to collect or use your information so we can comply with the law.
• Legitimate interests. We collect or use your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone.
• Vital interests. Collecting or using the information is needed when someone's physical or mental health or wellbeing is at urgent or serious risk.
• Public task. We have to collect or use your information to carry out a task laid down in law.

• Directly from you
• Regulatory authorities
• CCTV footage or other recordings
• Legal bodies or professionals such as courts or solicitors
• Publicly available sources
• By speaking with you directly or indirectly through phone, email or any other medium
• Through social media
• From your bank, PayPal or similar when you make payments to us
• From your feedback

We will try to store your data and documents on our system and cloud for a period of two years. However, this is not guaranteed. Due to any known or unforeseen circumstances or space limitations, if your data is lost, erased or deleted, we cannot be held liable for it. We also reserve the right to delete your data and shred your documents without giving you any notice.

Ultimately, you are responsible for keeping a record of your documents and data and must not rely on us in any event. Once a document has been sent out to you by any medium, including but not limited to email, post or WhatsApp, it will be considered in your possession and you will be responsible for its storage.

• Other financial or fraud investigation authorities
• Professional or legal advisors
• Emergency services
• Insolvency practitioners
• Regulatory authorities
• Organisations we are legally obliged to share personal information with
• Professional consultants

If you are a resident of the European Economic Area (EEA) or the UK, you have the following data protection rights:

• The right to access your data
• The right to rectify inaccurate data
• The right to object to data processing
• The right to restrict processing
• The right to data portability
• The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal

You can exercise these rights by contacting us.

We may employ third party service providers to facilitate our service or assist with data processing. These providers have access to your personal data only to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose.

GDPR Compliance

My Legal Friend is GDPR compliant. Our registration number is to be confirmed. We retain a record of your data and documents in line with GDPR regulations and guidelines. In the event we have to use a contractor in the UK or abroad, they will adhere to strict confidentiality, privacy and data protection standards in line with GDPR regulations.

ICO Certification

My Legal Friend is ICO certified. Our registration number is to be confirmed.

If you have any concerns about our use of your personal information, you can make a data protection complaint to us by email: contact@mylegalfriend.co.uk

If you remain unhappy with how we have used your data after raising a complaint with us, you can also complain to the ICO.

This privacy notice may be updated from time to time. Please check back for the latest version.