Lawfinity Solicitors Data Protection Policy
1. Introduction
Lawfinity Solicitors (hereinafter referred to as “the Firm”) is committed to ensuring the protection, privacy, and security of personal data in compliance with the General Data Protection Regulation (GDPR) and relevant data protection laws. This Data Protection Policy outlines our commitment to safeguarding personal data, our adherence to GDPR requirements, and our registration with the Information Commissioner’s Office (ICO). Additionally, it clarifies our stance on physical document handling, emphasising secure digital storage in a password-protected cloud drive.
2. Data Protection Principles
The Firm adheres to the following data protection principles:
2.1. Lawfulness, Fairness, and Transparency:
We process personal data lawfully, fairly, and transparently. Clients are informed about the purpose and legal basis for processing their data.
2.2. Purpose Limitation:
We collect and process personal data only for specified and legitimate purposes and do not further process it in a manner incompatible with those purposes.
2.3. Data Minimisation:
We ensure that personal data is relevant, adequate, and limited to what is necessary for the purposes for which it is processed.
2.4. Accuracy:
We take reasonable steps to ensure that personal data is accurate, and we will rectify any inaccuracies promptly.
2.5. Storage Limitation:
We retain personal data only for as long as necessary for the purposes for which it was collected and in compliance with legal and regulatory requirements.
2.6. Integrity and Confidentiality:
We implement appropriate security measures to protect personal data from unauthorised access, disclosure, alteration, or destruction.
3. Handling of Physical Documents
3.1. Digital Data Storage:
Lawfinity Solicitors does not obtain, retain, or process physical documents provided by clients. Instead, we exclusively utilise secure digital storage for all client-related information.
4. Digital Data Storage
4.1. Secure Cloud Drive:
Personal data collected and processed by the Firm is stored securely in a password-protected cloud drive. Currently, we utilise Google Drive for this purpose, implementing robust access controls and encryption to ensure data security.
4.2. Access Controls:
Access to personal data stored on the cloud drive is restricted to authorised personnel on a need-to-know basis. Access is protected by strong and unique passwords, and multi-factor authentication is enabled where applicable.
4.3. Data Encryption:
Personal data transferred to or stored on the cloud drive is encrypted to prevent unauthorised access. This includes both data in transit and data at rest.
5. GDPR Compliance
5.1. Consent:
The Firm obtains explicit consent from individuals for processing their personal data when required by law, and we provide individuals with clear and accessible information regarding the data processing
5.2. Data Subject Rights:
We respect individuals’ rights under GDPR, including the right to access, rectify, erase, restrict processing, object, and data portability. Requests related to these rights should be submitted to our Data Protection Officer.
5.3. Data Protection Impact Assessment (DPIA):
Lawfinity Solicitors conducts DPIAs as necessary to assess and mitigate the risks associated with data processing activities.
6. ICO Registration
Lawfinity Solicitors is registered with the Information Commissioner’s Office (ICO) in accordance with legal obligations. Our ICO registration number is ZB769266
7. Data Protection Officer (DPO)
For any queries, concerns, or requests related to data protection, you may contact our Data Tamim Tasdik
info@lwfinitysolicitors.com
8. Review and Update
This Data Protection Policy is subject to regular review and update to ensure continued compliance with applicable data protection laws and regulations.
