Burnetts Solicitors LLP
Please read the following information carefully. This privacy notice contains information about what data we collect and store about you and why. It also tells you about those with whom we share this information, the security mechanisms we have put in place to protect your data and how to contact us if you have a complaint.
Who we are
Burnetts Solicitors LLP t/a Burnetts are a northern law firm in England. We have offices in Carlisle, Newcastle, Cockermouth, and Hexham. Please see Our Locations on our website to find out the contact details for each of these offices. Burnetts collects, uses and is responsible for personal information about you. When we do this, we are the ‘controller’ of this information for the purposes of the General Data Protection Regulation and other applicable data protection laws.
Our Data Protection Officer
Lydia Sutton is our Data Protection Officer. She can be contacted by email at firstname.lastname@example.org and by telephone on 01228 552222.
How we collect your personal data
We collect personal data in the following ways:
Direct Interactions - Most of the personal information we process is provided to us directly by you. You may provide personal data when you correspond with us (by post, phone or email), complete an online form through our website, sign up to receive our newsletters or join our mailing list.
Automated Technology - we automatically collect personal data (technical and usage) when you browse or interact with our website, by using cookies, server logs and other similar technologies including Facebook tags. We may also receive technical data about you if you visit other websites which use our cookies or interact with our services (for example Facebook and LinkedIn). Please see our cookie notice for further details.
Publicly Available Sources - we may collect personal data from publicly availably sources.
Information we collect about you
When carrying out legal work for you we may collect the following personal information about you:
- Your name
- Your date of birth
- Your contact details
- Information relating to your legal matter
How we use your personal data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation.
- Where it is a legitimate interest to be expected as part of the running or structuring of our business
Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us on 01228 552222 or email@example.com.
Purposes for which we will use your personal data
We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.
Type of data
Lawful basis for processing including basis of legitimate interest
To follow up any enquiries taken via our website ‘contact us’ page, email or telephone
Performance of a contract with you
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)
(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
(b) Necessary to comply with a legal obligation
To use data analytics to improve our products/services, website, marketing, customer relationships and experiences
Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
Failure to provide personal data
If we are required by law, or under the terms of a contract we have with you, to collect your personal data and you fail to provide it, we may not be able to enter into any contract with you or perform the contract with you and we may have to restrict your access to any online service. This will be notified to you if relevant.
With whom will we share your personal information?
We have relationships with a number of third parties with whom we routinely share personal data. We will share your personal data to enable us to act on your legal matter. If you would like more details on who we may share your personal details with, please contact our Data Protection Officer.
Transfer of your information outside the European Economic Area (EEA)
Occasionally, it may be necessary to transfer your personal information outside the European Economic Area or to an international organisation. We use a number of suppliers for the operation of our business who may have access to the personal information we process. This could be an IT supplier providing software support to us.
Where we do use suppliers in different jurisdiction, we will take the necessary steps to ensure that your information is secure and that adequate safeguards are in place in accordance with applicable law.
If you would like any further information, please contact our Data Protection Officer.
The security of your data is a priority at Burnetts. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We also limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know and they can only process your personal data on our instructions and will be subject to a duty of confidentiality. In addition, we have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
For how long will we store your personal data?
We will store your data after collection. The length of storage can be found here. Our storage periods take into account how long we need to keep data in the event of any claims or litigation; compliance with legal obligations; guidance from our regulator and the nature of the data we hold.
Under the General Data Protection Regulation, you have a number of important rights that you can exercise free of charge. In summary, these rights are to:
- Be informed about how we are processing your data
- Access to your personal information and other supplementary information
- Require us to correct any mistakes or complete missing information we hold on you
- Require us to erase your personal information in certain circumstances
- Receive a copy of the personal information you have provided to us or have this information be sent to a third party. We will do this by providing the information to you or the third party in a structured, commonly used and machine-readable format
- Object at any time to processing of your personal information for direct marketing
- Object in certain other situations to the continued processing of your personal information
- Restrict our processing of your personal information in certain circumstances
- Request not to be subject to automated decision making which produce legal effects that concern you or affect you in a significantly similar way
- Withdraw your consent.
If you want to exercise any of these rights, please:
- Email, call, or write to us
- Let us have proof of your identity and address
- State the right or rights that you wish to exercise
We will respond to you within one month from when we receive your request.
How to change your marketing preferences
Please note if you wish to unsubscribe from any email, you can do so by following the link provided in your next email or by sending an email to firstname.lastname@example.org with the word “unsubscribe” in the subject header. It may take up to 14 days for this to become effective.
How to make a complaint
We hope that you are happy with our service and that our Data Protection Officer can resolve any issues or complaints that arise. Please get in touch if you have any concerns.
The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority. The UK supervisory authority is the Information Commissioner’s Office who can be contacted the following ways:
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
We will contact you following legal work undertaken for you to give us feedback by way of a survey. We do not intend to process your personal information for any reason other than stated within this privacy notice.
Changes to this privacy notice
We constantly review our internal privacy practices and may change this policy from time to time. Any updates we make will be posted on this page and we may notify you by email.
Get in touch
If you have any questions about this privacy notice or the information we hold about you, please contact us:
By phone: 01228 552222
By email: email@example.com
By post: Burnetts Solicitors LLP, Victoria House, Wavell Drive, Rosehill, Carlisle.CA1 2ST
If it would be helpful to have this notice provided in another format (for example; in another language, audio, braille) please contact us (see ‘Get in touch’ above).
Last updated: July 2023