Table of Processing Activities
Purpose/Activity | Type of data | Lawful basis for processing including basis of legitimate interest | Typical third parties with whom we may share your data to perform the activity or purpose (based within the EEA unless otherwise noted) |
ENQUIRIES | |||
To register an enquiry submitted through the website, by telephone or any other means | (a) Identity (b) Contact | Performance of a contract with you | |
SUPPLIERS | |||
To engage suppliers regarding their services to us | (a) Identity Data (b) Contact Data | Performance of a contract with you | |
CLIENTS & MATTER DATA SUBJECTS | |||
To perform our services | (a) Identity Data (b) Contact Data (c) Technical Data (d) Profile Data Usage Data (e) Marketing and Communications Data (f) Special Categories of Personal Data | Performance of a contract with you (Clients) Legal Obligation (Clients and Data Subjects) | All live and archived matters Quill Pinpoint Limited (cloud-hosted platform)
Egress Software Technologies Limited Third-Party Administrator (Self-Employed) Endorse HR (Exeter) External Lexcel Auditors (unless you opt to withdraw the matter from review) Any other matter specific third-party such as professional advisors, accountants or individuals or organisations related to the matter. Residential Conveyancing and Commercial Property Family Law and Civil Litigation Business |
To manage our relationship with prospects, clients and former clients. | (a) Identity (b) Contact (c) Profile (d) Marketing and Communications | Performance of a contract with you. Necessary to comply with a legal obligation. Necessary for our legitimate interests (to keep our records updated and to study how customers use our services) | |
To archive hard copy documents | (a) Identity Data (b) Contact Data (c) Special Categories of Personal Data | Performance of a contract with you. Legal and regulatory obligation to retain data. | Oasis Storage Limited Crown Records Management UK |
FIRM INFRASTRUCTURE & ADMINISTRATION | |||
To administer and protect our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | (a) Identity (b) Contact (c) Technical | Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security and to prevent fraud). Necessary to comply with a legal obligation. Performance of a contract with you. | East Devon IT Limited Callitech Limited (MoneyPenny) |
To dispose of hard copy confidential waste | (a) Identity Data (b) Contact Data (c) Special Categories of Personal Data | Performance of a contract with you. | Scott Law |
MARKETING | |||
To deliver relevant website content and advertisements and measure or understand the effectiveness of the advertising. | (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical | Necessary for our legitimate interests (to study how customers use our services, to develop them, to grow our business and to inform our marketing strategy). | |
To use data analytics to improve our website, services, marketing, customer relationships and experiences | (a) Technical (b) Usage | Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy). | Retained Marketing Agency: McQueenie Mulholland (Exeter) |
In relation to clients or former clients of Cartridges Law recorded on our system prior to 25th May 2018, who have not opted out of such communication: (to make suggestions and recommendations about services that may be of interest to them) | (a) Identity (b) Contact (c) Technical (d) Usage (e) Profile (f) Marketing and Communications | Necessary for our legitimate interests (to develop our services and grow our business). | Mailchimp (The Rocket Science Group LLC) (based outside of the EU) |
In relation to clients and former clients of Cartridges Law recorded on our system after 25th May 2018: to make suggestions and recommendations about services that may be of interest to them | (a) Identity (b) Contact (c) Technical (d) Usage (e) Profile (f) Marketing and Communications | Consent – obtained via the signed client care letter. | |
To send our newsletter and other marketing materials where you are not, nor ever have been, a client or former client of Cartridges Law. | (a) Identity (b) Contact (c) Technical (d) Usage (e) Profile (f) Marketing and Communications | Consent |