Privacy Policy

Contact Details

Name: KMC LEGAL & FINANCE LTD

Address of Registered Office: First Floor, 8 Water Street, Liverpool, L2 8TD

Phone number: 078385648788

Email: katie@kmc-legal.co.uk

This privacy policy sets out how KMC Legal & Finance Ltd uses and protects any information that you give.

We adhere to the principles of the data protection legislation as set out in the Data Protection Act 2018 and EU General Data Protection Regulation (GDPR). Our Data Protection Register number is  A8923221.

Data Collection

The vast majority of the information that we hold about you is provided to us by yourself when you seek to use our services. We will tell you why we need the information and how we will use it.

Our Lawful Basis for processing your information

The General Data Protection Regulation (GDPR) requires all organisations that process personal data to have a Lawful Basis for doing so. We process data on the following legal bases:

• Consent of the data subject
• Performance of a contract with the data subject or to take steps to enter into a contract
• Compliance with a legal obligation
• To protect the vital interests of a data subject or another person
• Performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
• The legitimate interests of ourselves, or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject.
• Where we rely on ‘legitimate interests’ as our legal basis, our legitimate interest includes running an efficient, legal and profitable business.

We use your information to:

• Provide goods, services, deliveries, quotations, and information, for example, catalogues and newsletters;
• Process or support payments for goods and services;
• Conduct data analysis, testing, and research, and to monitor and analyse usage and activity trends;
• Maintain the safety, security and integrity of our services;
• Direct your enquiries to the appropriate customer support staff;
  Investigate and address your concerns;
• Communicate with you about products, services, promotions, studies, surveys, news, updates and events;
• Process promotions/competitions, including prizes, and send you information about our services and those of our business partners;
• Investigate or address legal proceedings relating to your use of our services/products, or as otherwise allowed by applicable law;

We do not use automated decision-making in the processing of your personal data however we do use Google Analytics to track basic website traffic. See below for further information.

We process both personal data and special categories of personal data as defined in the GDPR. This includes:

Common data types we collect:

• Name;
• Email;
• Phone number;
• Address;
• Payment or bank details.

Specific data is collected for:

Customer/client data

• Location details
• Device IP address

Employee Data

• Date of birth
• Family & next-of-kin details
• Medical details
• Equality and Diversity Data

Where necessary for the effective implementation of our Respect Policy:

• Personal details including your name, date of birth and contact details;
• Family details;
• Lifestyle and social circumstances;
• Education, training and employment information;
• Physical and/or mental health information;
• Racial or ethnic origin;
• Political opinions;
• Religious, philosophical or other beliefs;
• Sex life or sexual orientation;
• Rarely, genetic data;
• Rarely, biometric data;
• Details of criminal proceedings, outcomes and sentences, and related security measures.

We may share your personal data with:

• Delivery partners;
• Our business partners;
• Our subsidiaries;
• The general public when you contribute to a public forum;
• Our legal advisors in the event of a dispute or other legal matter;
• Law enforcement officials, government authorities, or other third parties to meet our legal obligations;
• In connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, refinancing, or acquisition of some or all of our business by another company; and
• Any other party where we ask you and you consent to the sharing.

Transfers to third countries and international organisations

We do not normally transfer any personal data to third countries or international organisations.

If we do transfer personal data to third countries or international organisations because we have barristers working overseas on International matters we have satisfied ourselves that such transferred data is fully protected and safeguarded as required by the General Data Protection Regulation.

We retain your personal data while you remain a client,  employee or consultant, unless you ask us to delete it. Our Retention and Disposal Policy (copy available on request) details how long we hold data for and how we dispose of it when it no longer needs to be held. We will delete or anonymise your information at your request unless:

• There is an unresolved issue, such as a claim or dispute;
• We are legally required to; or
• There are overriding legitimate business interests, including but not limited to fraud prevention and protecting customers' safety and security.

Your Rights
Under the General Data Protection Regulation, you have a number of important rights that you can exercise free of charge. In summary, these rights are:

• Transparency over how we use your personal data and fair processing of your information;
• Access to your personal information and other supplementary information;
• Require us to correct any mistakes or complete missing information we hold on you;
• Require us to erase your personal information in certain circumstances;
• Receive a copy of the personal information you have provided to us or have this information be sent to a third party, this will be provided to you or the third party in a structured, commonly used and machine readable format;
• Object at any time to processing of your personal information for direct marketing;
• Object in certain other situations to the continued processing of your personal information;
• Restrict our processing of your personal information in certain circumstances;
• Request not to be subject to automated decision making which produce legal effects that concern you or affect you in a significantly similar way.

If you want more information about your rights under the GDPR please see the Guidance from the Information Commissioner's Office on Individual's rights under the GDPR.

If you want to exercise any of these rights, please:

• Email, call or write to us. Our data protection Manager is Katie McCreath katie@kmc-legal.co.uk 
• Provide other information so that we can identify you (a passport, driving licence or utility bill). We may need to contact you to request further information to verify your identity;
• Let us have proof of your identity and address; and
• State the right or rights that you wish to exercise.

We will respond to you within one month from when we receive your request.

Accessing and Correcting Your Information

You may request access to, correction of, or a copy of your information by contacting us at katie@kmc-legal.co.uk

Marketing Opt-Outs

You may opt out of receiving marketing emails and other messages from our organisation by following the instructions in those messages. You can unsubscribe at any time by selecting the ‘unsubscribe’ link that appears in every email.

Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

Cookies are small text files that are stored on your browser or device by websites, apps, online media, and advertisements. We use cookies to:

• Validate users;
• Remember user preferences and settings;
• Determine frequency of accessing our content;
• Measure the effectiveness of advertising campaigns; and
• Analyse site visits and trends.

Cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Delivering them may prevent you from taking full advantage of the website. You can find out more about cookies and how to control them from your browser by visiting http://www.aboutcookies.org/

How we store your information

Your information is securely stored at our office on our electronic case management system (which is backed up off-site) and/or on paper files.

We generally keep your file for 6 years.  We will then dispose of any papers file securely using a secure disposal system.

Personal information will be stored electronically permanently unless otherwise stated or agreed.

Security

We are committed to ensuring that your information is secure.  In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect and process.

Your rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.

Your right to object to processing – You have the the right to object to the processing of your personal data in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Under the DPA 2018, you may ask us to provide you with the details of any personal information that we hold about you. Such request should be sent to our Data Protection Officer in our Compliance Department whose details are below.  We will not charge any fee and we will respond within one calendar month.   If we refuse a request, we will explain why and set out your rights to complain.

If you believe that any information we hold about you is incorrect or incomplete or you have any comments, queries or requests relating to the use of your personal information, please contact our Data Protection officer. Any information which is found to be incorrect will be promptly corrected.

Changes

We will post any material changes that we may make to our Privacy Policy in the future on this page and, where appropriate, we will notify you of the change by email.

How to complain

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

Contact US

For further information on how your information is used, how we maintain the security of your information, and your rights to access information we hold on you, please contact: Katie McCreath, our Data Protection Officer on katie@kmc-legal.co.uk