Privacy Notice

We want you to know that when you use our firm you can trust us with your information. We are determined to do nothing that would infringe your rights or undermine your trust. This Privacy Notice describes the information we collect about you, how it is used and shared, and your rights regarding it.

Data Controller

We are registered with the Information Commissioner’s Office (ICO) as a Data Controller for the personal data that we hold and process. Our registered address is 33 Hamilton Road, Bangor, BT20 3TA, our registration number is Z7886610, and our Data Protection Officer (DPO) is Adele Summers. Our Data Protection Officer can be contacted at dpo@wilson-nesbitt.co.uk or in writing at 33 Hamilton Road, Bangor, BT20 3TA.

Data Collection

The vast majority of the information that we hold about you is provided to us by yourself when you seek to use our services. We will tell you why we need the information and how we will use it.

Our Lawful Basis for processing your information

The General Data Protection Regulation (GDPR) requires all organisations that process personal data to have a Lawful Basis for doing so. The Lawful Bases identified in the GDPR are:

  • Consent of the data subject
  • Performance of a contract with the data subject or to take steps to enter into a contract
  • Compliance with a legal obligation
  • The legitimate interests of ourselves, or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject.

Examples of legitimate interests include:

  • Where the data subject is a client or in the service of the controller
  • Transmission within a group of undertakings for internal administrative purposes
  • Processing necessary to ensure network and information security, including preventing unauthorised access
  • Processing for direct marketing purposes, or to prevent fraud and
  • Reporting possible criminal acts or threats to public security

Our Lawful Bases for processing are:

  • Consent of the data subject – We may process your personal data for marketing purposes, including the use of cookies. Where we do so we will always seek your clear consent prior to processing
  • Legitimate Interests – We may process your personal data in order to carry out our general business interests, known as Legitimate Interests. Our Legitimate Interests are:
    • Facilitating contact with solicitors and staff within the firm
    • Processing payments

 We use your information to:

  • Provide services, quotations, and information in relation to legal transactions or business updates/marketing messages
  • Process or support payments for services
  • Conduct data analysis, and to monitor and analyse usage and activity trends
  • Direct your enquiries to the appropriate team or individual
  • Investigate and address your concerns
  • Communicate with you about services, surveys, news, updates and events

Where any part of our processing includes automated decision-making, we ensure that the proposed decisions are reviewed by a member of staff before being applied. You will always be able to get an explanation for the decision and to challenge it if you are unhappy with it.

We collect and process both personal data and special categories of personal data as defined in the GDPR. This includes:

Customer/client data

  • Name
  • Email
  • Phone number
  • Address
  • Payment or bank details
  • Date of birth
  • Location details

We may share your personal data with:

  • Delivery partners
  • Any other party where we ask you and you consent to the sharing

Transfers to third countries and international organisations 

We do not transfer any personal data to third countries or international organisations.

We retain your personal data while you remain a client, customer, or contact unless you ask us to delete it. Our Retention and Disposal Policy (copy available on request) details how long we hold data for and how we dispose of it when it no longer needs to be held. We will delete or anonymise your information at your request unless:

  • There is an unresolved issue, such as claim or dispute
  • We are legally required to or
  • There are overriding legitimate business interests, including but not limited to fraud prevention and protecting client/customers' safety and security

Your Rights

The General Data Protection Regulation gives you specific rights around your personal data. For example, you have to be informed about the information we hold and what we use it for, you can ask for a copy of the personal information we hold about you, you can ask us to correct any inaccuracies with the personal data we hold, you can ask us to stop sending you direct mail, or emails, or in some circumstances ask us to stop processing your details. Finally, if we do something irregular or improper with your personal data you can seek compensation for any distress you are caused or loss you have incurred. You can find out more information from the ICO’s website https://ico.org.uk/your-data-matters/ and this is the organisation that you can complain to if you are unhappy with how we deal with you.

Accessing and Correcting Your Information

You may request access to, correction of, or a copy of your information by contacting us at dpo@wilson-nesbitt.co.uk.

Marketing Opt-Outs

You may opt out of receiving emails and other messages from our firm by following the instructions in those messages.

Cookies

Cookies are small text files that are stored on your browser or device by websites, apps, online media, and advertisements. We use cookies to:

  • Remember user preferences and settings
  • Determine frequency of accessing our content
  • Measure the effectiveness of advertising campaigns and
  • Analyse site visits and trends

We will occasionally update our Privacy Notice. Any update Notice will be published on our website.