1. E & K Solicitors are committed to maintaining the confidentiality and security of clients' personal data and in line with the updated General Data Protection Regulation (GDPR, 2018). All processed personal data from clients will be stored securely and in confidence using computer data storage and organisational measures.
2. Any information retained will not be sold to third parties. Clients' personal data will not be copied or disclosed to any third-party, other than those highlighted to the client, in order to undertake the service requested. Any third parties working with E & K Solicitors, who may have access to personal data, will adhere to the same rules and requirements in order to protect clients' personal data, under the GDPR rules and regulations.
3. All retained data is held securely within the United Kingdom and transfer of data outside of the European Economic Area is prohibited.
4. In accordance with GDPR, the company will be the data controller; as such will comply with the updated regulation.
5. As such, clients will be informed about the collection and use of their personal data. E & K Solicitors will be instructed to act on behalf of clients with a written contractual agreement. We will retain clients' personal data throughout the period we are instructed by them, and after that for at least six years. The data will be retained so that E & K Solicitors have accurate business records. Depending on individual circumstances, the client can exercise their right under GDPR and request for the data to be no longer retained by contacting our offices.
6. Each individual client will be informed of all of the purposes for the use of their personal data and the recipients the data may be disclosed to, along with the reason. Clients will be informed about the source of their personal data, where it is not obtained directly from the individual. Privacy information will be provided to the individual when personal data is provided to the company and/or provided from other sources.
7. Clients will be informed of the categories of personal data concerned and have the right to access their personal data at any time.
8. Clients have the right to request rectification, erasure, restriction or suppression of their personal data via writing or verbally, which will be responded to within 30 days and fee free. Exclusions for erasure occur to active clients and their personal data will be held for a minimum of six years. Clients will be informed about how long we shall retain any information on them for and where the information will be stored, which is outlined in our client care information. Subsequently, all data will be securely destroyed after six years.
9. If requested by the client, E & K Solicitors shall permanently destroy all personal data held, subject to our own retention period in clause 3 of this addendum.
10. Clients have the right to lodge a complaint to the Information Commissioner's Office (ICO) if they believe we have not handled their data correctly.
11. E & K Solicitors will notify any personal data breaches to the client within 24 hours, such as actual or attempted unauthorised access to information or systems, cyber-attacks and physical security breaches.
12. All information provided will be clear, concise and easily accessible, and in clear and plain language.