BHB Law Limited trading as BHB Law ("we", "us", "our") is committed to protecting the personal data you share with us. This statement explains how we collect and use your personal data when you visit www.bhblaw.co.uk or use our telephone or email services, and how you can control our use of it. Our use of your personal data is governed by our professional duty of confidentiality, the Data Protection Act 2018 and the UK General Data Protection Regulation.
Data controller: BHB Law Limited, registered in England and Wales under company number 06964037. Registered office: 145-147 New Union Street, Coventry, CV1 2NT. Authorised and regulated by the Solicitors Regulation Authority under SRA number 517635. Registered with the Information Commissioner's Office under registration number Z1892420.
1. Our promise
When we collect personal data, we will:
- only use it for the purpose for which it was obtained, unless the law provides otherwise;
- keep it safe;
- not sell it.
2. Information we collect
Personal data is information from which a living person can be identified, such as names, addresses, telephone numbers, email addresses, photographs, dates of birth and identity documents. We collect it:
- From you, when you write to us, telephone us, complete our online enquiry form or post comments about us on our website or social media.
- From others you have authorised to act on your behalf, publicly available sources, credit reference agencies, information providers, regulatory bodies or government departments.
- From our website, including your IP address and other information collected through cookies.
Special category data (such as racial or ethnic background, religious beliefs or health) is only collected when necessary to provide our services and with your agreement. If you withhold consent we may not be able to continue acting for you, for example in an asylum matter.
3. How and why we use your information
We only use your personal data where we have a lawful basis to do so:
- Contract: to provide the legal services you have asked for, operate our case management system, administer our relationship with you and work with experts and counsel on your matter.
- Legitimate interests: to manage and improve our business, prevent fraud, check creditworthiness and keep our staff and premises secure (including through CCTV).
- Legal obligation: to meet legal and regulatory duties, such as verifying your identity under the Money Laundering Regulations 2017, which may include online identity checks.
- Consent: where you have agreed, for example to use your child's data in an immigration application or to receive information about our services. You can withdraw consent at any time.
4. Sharing your information
We only share personal data where necessary to deliver our services, comply with the law and run our business. Recipients may include:
- our staff and professional advisers such as barristers and accountants;
- IT, case management, accounting, postal, courier, banking, insurance and storage providers;
- credit reference agencies;
- regulators, law enforcement and government bodies such as the SRA, HMRC and the National Crime Agency;
- organisations we must deal with to deliver your matter, such as the Home Office on immigration applications;
- external auditors and quality checkers, who are bound to keep your file confidential.
5. Cookies
Our website uses cookies, including Google Analytics, to understand how visitors use the site (pages viewed, device, browser and IP address). Third-party social media cookies may also be set. You can reject cookies through your browser settings, although parts of the website may not work as intended.
6. Storage and retention
We keep your personal data secure in our offices, with our service providers and with an ISO 27001 accredited cloud provider. Your personal data is only stored or shared within the United Kingdom.
We generally retain personal data for up to 6 years after your matter ends, balancing our legal, regulatory and contractual obligations. Different periods may apply depending on why the data was collected.
7. Your rights
Depending on the circumstances, you have the right to know how your personal data is used, obtain a copy of it (a Data Subject Access Request, answered within 30 days), object to direct marketing, challenge our use of legitimate interests, have data erased or corrected, and have it transferred to another organisation.
To exercise your rights or raise a concern, contact our Data Privacy Officer, Mrs Kiran Binning, on 024 7662 9355 or at kbinning@bhblaw.co.uk, or our main office on 024 7655 5191 or at info@bhblaw.co.uk.
You can also complain to the Information Commissioner's Office on 0303 123 1113 or at www.ico.org.uk.
8. Children under 18
Where an immigration matter involves your children, we may need to collect and use their personal data. In addition to their consent we may need yours as parent or guardian, along with documents such as a birth certificate or passport.