Privacy Policy

GDPR Introduction - Hextons Law Limited, is authorized and regulated by the Solicitors Regulation Authority (‘SRA’), SRA number 8010340, registered in England under Company Number 16040429.  

​

We are dedicated to safeguarding the privacy and confidentiality of our clients, prospective clients, former clients, and their affiliates. This privacy statement describes the kinds of data we gather, why we gather it, how we use it, who we may share it with, and how to update or change it. 

​

What Is Personal Data? 

​

"Any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier" is what the General Data Protection Regulation (UK GDPR) defines as personal data.

  

Personal data is any information about you that allows for identification. In addition to more overt information like your name and contact information, personal data also includes less visible information like identification numbers, electronic location data, and other online identifiers.  

​

How do we collect Your Personal Data? 

​

Regarding legal advice, you give us most of the personal data we handle directly. We may obtain this data from you through a variety of channels, such as our website (such as our online chat or inquiry form), phone, or email. Name, address, phone number, birthdate, specifics of your case, and personal information about your case are some examples of the personal information you may provide to us.  

 

Additionally, we might get personal information indirectly, like this: 

​

• By getting in touch with outside parties, including medical or other specialists, in relation to the services we offer you. 

• If you are mentioned in correspondence or other documents pertaining to a legal matter by a claimant or a third party. 

• From our suppliers, including introducers or referrers. 

• From public authorities, regulators, or law enforcement bodies; or an employee of ours gives your contact details as an emergency contact or a referee.  

 

Please be aware that we may not be required to notify you that we are processing your information if you are a third party, and we are doing so in conjunction with legal proceedings or if legal professional privilege is applicable.  

​

We may use your Personal Information: 

​

• To provide legal services. 

• To engage the services of a third party (where instructed). 

• For the purposes of operating our business (such as management information). 

• To comply with legal and regulatory obligations. 

• To contact you in relation to customer surveys or market research; or 

• To send you legal updates, or information in relation to products and services that may be of interest to you from DV Solicitors. 

 

What Are My Rights? 

​

Under the Data Protection Legislation, you have the following rights, which we will always work to uphold: 

​

• The right to know how your personal information is collected and used.  

• The right to access the personal data we hold about you. 

• The right to request that any erroneous or missing personal information we may have about you be corrected. 

• The right to request that we remove or otherwise get rid of any personal information we may have about you. the ability to limit—that is, stop—the processing of your personal information. 

• The right to object to us using your personal data for a particular purpose or purposes. 

• The right to revoke consent. This implies that you have the right to revoke your consent at any moment if we are using it as the legal justification for using your personal information. 

• The right to transfer data. This implies that you can request a copy of your personal data so that you can use it for another service or business in many situations if you have given it to us directly and we are using it with your permission or to fulfill a contract. The data is handled automatically. 

•  The Rights relating to automated decision-making and profiling. We do not use your personal data in this way. 

​

You may also request a copy of our privacy notice or obtain one directly from our website at https://hextonslaw.com for more details about your rights and how we handle your data. Additionally, you can get information from your local Citizens Advice Bureau or the Information Commissioner's Office on your rights and GDPR in general. 

​

You can complain to the Information Commissioner's Office if you have any concerns about how we utilize your personal information. We will try our best to work with you to remedy the issue, and we welcome the chance to address your issues first. Please get in touch with Qamar Rehman, our company's data protection representative, in the first instance. He is our Data Protection Officer (DPO) and can be reached by mail at the address provided in this letter or by email at q.rehman@hextonslaw.com.  

 

Sharing your Personal Information 

​

To provide our legal services, we sometimes must share your personal information with other people or organizations. For instance: 

​

• Medical professionals gather medical reports or serve as expert witnesses. 

 

Additionally, we might give your information to outside parties that help us with administrative and support tasks related to the regular business operations of a legal office. 

​

If after providing us with your personal information it becomes apparent, we are unable to offer our service to you, we may, with your consent, pass your details to another legal services provider who may be able to assist you. 

​

Other Websites 

​

This website may contain links to other websites. This Privacy Policy only applies to this website, so please ensure you also read the privacy policy of the other website provider. We bear no responsibility for the operation, content, or policies of other websites. 

 

Complaints 

​

Reach out to our DPO at q.rehman@hextonslaw.com for any details about this policy or to file a complaint regarding how we handle your personal data. 

If we are unable to satisfy your needs, you can contact the Information Commissioner's Office (ICO) (www.ico.org.uk, Tel: 0303 123 1113). We will make every effort to address any issues as quickly as possible. 

​

Changes to the Privacy Notice 

​

We reserve the right to change this policy at any moment by updating our website or informing you of any changes. 

Your continued use of our services after that date will be interpreted as your acceptance of any changes we make to this policy. 

 

Lawful Basis 

​

Article 6(1)(f) of the General Data Protection Regulation (GDPR) provides us with the legal justification to treat your data to further the legitimate interests that we or a third party may have. We may also occasionally rely on GDPR Article 6(1)(a), which permits us to treat your personal data with your consent if we have it (for instance, when we need your approval for the optional cookies we use). When processing certain types of personal data, we rely on GDPR Article 9(f) if the processing is related to a lawsuit. For processing special category personal data, we occasionally may also rely on other legal bases. At times, we may also depend on alternative legal bases for processing special category personal information. For example, Article 9(b) if you are an employee.  

​

Retention Periods 

​

In compliance with current law, we shall keep your personal information on file. Usually, this complies with the statute of limitations. We may save your personal information for a brief time if you get in touch with us but decide not to file a claim. This will help us distinguish between service and new inquiry calls and ensure that we can efficiently track and monitor attempted fraud.  

​

Automated Decision-Making 

​

Your personal information may be used by us to perform automated decision-making on the authenticity of your identity and to perform additional checks mandated by law and regulation (e.g., a credit history check or the applicability of any sanctions). Any decision on our part to not act on your behalf will not be made solely by automation; a human-led forensic analysis will be conducted if a question comes up regarding any of these checks (for example, if your identity cannot be verified or other checks raise concerns that might prevent us from continuing to provide you with our legal services). 

​

Transferring Personal Information Overseas 

​

In order to provide our services, we may need to transfer your personal information to locations outside the UK for the purposes set out in this privacy policy. This may entail a transfer of your information from a location within the European Economic Area (the “EEA”) to outside the EEA, or from outside the EEA to a location within the EEA. The level of information protection in countries outside the EEA may be less than that offered within the EEA. Where this is the case, we will implement appropriate measures to ensure that your personal information remains protected and secure in accordance with applicable data protection laws. Where our third-party service providers process personal data outside the EEA while providing services to us, our written agreement with them will include appropriate measures, usually standard contractual clauses. 

 

Security 

​

Please be assured that we will keep your personal information confidential and take appropriate measures to protect it against loss, theft, or misuse and to safeguard your privacy. 

​

Where you are provided with any confidential information (including a user ID or password), you must not disclose such information to any third party.