This is the privacy policy of Garnett Williams Powell Solicitors.

Our Office is at: 18 Kinmel Street, Rhyl, Denbighshire, LL18 1AL

DATA PROTECTION:

For the purposes of the EU General Data Protection Regulations (GDPR), we are the data controller of the Personal information and we will not sell, transfer or share this information, except, as set out in this Privacy Statement.

We have put in place appropriate technical measures to prevent unauthorised disclosure or use of your Personal Information. We will use all reasonable measure to safeguard your Personal Information.

INTRODUCTION:

This is a notice to inform you of our policy about all information that we record about you. It sets out the conditions under which we may process any information that we collect from you, or that you provide to us. It covers information that could identify you (“personal information”) and information that could not.

We undertake to preserve the confidentiality of all information you provide to us.

Our policy complies with UK law accordingly implemented, including that required by the EU General Data Protection regulation (GDPR).

The law requires us to tell you about ySaveour rights and our obligations to you in regards to the processing and control of your personal data.

INFORMATION PROVIDED BY YOU:

You provide us with personal date either in person, via email, or on the telephone. This includes name, address, date of birth, email address. We use this information primarily for the provision of legal services to you and for related purposes including:

• Updating and enhancing client records
• Analysis to help us manage our practice
• Statutory returns
• Legal and regulatory compliance

We also keep information contained in any correspondence you may have with us by post or email. Any information that you choose to give us will not be used for marketing purposes by us. We undertake at all times to protect your personal data in a manner which is consistent with our duty of profession confidence and the requirement of the GDPR concerning data protection.

SHARING INFORMATION:

We will keep information about you confidential but you may require us to pass on such information to third parties such as expert and other professional advisers, including sometimes advisers appointed by another party to your matter. We provide only the information they need to perform their specific service. Our practice will be audited and checked by our accountants. We do not normally copy such information to anyone outside the European Economic Area, however we may do so when the particular circumstances of your matter so require. All such third parties are required to maintain confidentiality in relation to your files.

We are subject to the law like everyone else. Sometimes, we must process your information in order to comply with a statutory obligation.

For example, we may be required to give information to legal authorities if they so request or have the proper authorisation such as a court order. This may include your personal information.

DATA SUBJECT RIGHTS:

The GDPR grants you (as the “data subject”) the right to access particular data that we hold about you. This is referred to as a subject access request. We shall respond promptly within one month from the point of receiving the request and all necessary information from you. You, the data subject, shall have the right to obtain from us the rectification of inaccurate personal data we hold concerning you.

You, the data subject, have the right to obtain from us the erasure of personal data concerning you. When we receive any request to delete personal information we shall first take steps to verify your identity before taking action.

Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent. We will then, however, be unable to act for you.

If you send us personal details about anyone other than yourself you will ensure you have any appropriate consents and notices in place to enable you to transfer that personal data to us, and so that we may use it for the purposes for which you provided it to us.

RETENTION PERIOD FOR PERSONAL DATA

Except as otherwise mentioned in this privacy notice, we keep your personal information only for as long as required by us:

• To provide you with the service you have requested.
• To comply with other law, including for the period demanded by our tax authorities

At the end of that retention period, your data will be deleted completely.

Any personal documents will be destroyed using a confidential document destruction service.