Table of Processing Activities

Note: We may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.

Purpose/Activity	Type of data	Lawful basis for processing including basis of legitimate interest	Typical third parties with whom we may share your data to perform the activity or purpose (based within the EEA unless otherwise noted)
ENQUIRIES
To register an enquiry submitted through the website, by telephone or any other means	(a) Identity (b) Contact	Performance of a contract with you
SUPPLIERS
To engage suppliers regarding their services to us	(a) Identity Data (b) Contact Data	Performance of a contract with you
CLIENTS & MATTER DATA SUBJECTS
To perform our services	(a) Identity Data (b) Contact Data (c) Technical Data (d) Profile Data Usage Data (e) Marketing and Communications Data (f) Special Categories of Personal Data	Performance of a contract with you (Clients) Legal Obligation (Clients and Data Subjects)	All live and archived matters Quill Pinpoint Limited (cloud-hosted platform) Egress Software Technologies Limited Third-Party Administrator (Self-Employed) Endorse HR (Exeter) External Lexcel Auditors (unless you opt to withdraw the matter from review) Any other matter specific third-party such as professional advisors, accountants or individuals or organisations related to the matter. Residential Conveyancing and Commercial Property · Redbrick Solutions · GCS · First Title · Countrywide · Legal · Lender Exchange · LMS Family Law and Civil Litigation · Legal Aid Agency · Relevant authorities such as HMCTS, Police, NHS, HMRC. · Temple Insurance Business · Bright (South West) LLP (for legal consultancy purposes).
To manage our relationship with prospects, clients and former clients.	(a) Identity (b) Contact (c) Profile (d) Marketing and Communications	Performance of a contract with you. Necessary to comply with a legal obligation. Necessary for our legitimate interests (to keep our records updated and to study how customers use our services)
To archive hard copy documents	(a) Identity Data (b) Contact Data (c) Special Categories of Personal Data	Performance of a contract with you. Legal and regulatory obligation to retain data.	Oasis Storage Limited Crown Records Management UK
FIRM INFRASTRUCTURE & ADMINISTRATION
To administer and protect our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	(a) Identity (b) Contact (c) Technical	Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security and to prevent fraud). Necessary to comply with a legal obligation. Performance of a contract with you.	East Devon IT Limited Callitech Limited (MoneyPenny)
To dispose of hard copy confidential waste	(a) Identity Data (b) Contact Data (c) Special Categories of Personal Data	Performance of a contract with you.	Scott Law
MARKETING
To deliver relevant website content and advertisements and measure or understand the effectiveness of the advertising.	(a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical	Necessary for our legitimate interests (to study how customers use our services, to develop them, to grow our business and to inform our marketing strategy).
To use data analytics to improve our website, services, marketing, customer relationships and experiences	(a) Technical (b) Usage	Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy).	Retained Marketing Agency: McQueenie Mulholland (Exeter)
In relation to clients or former clients of Cartridges Law recorded on our system prior to 25th May 2018, who have not opted out of such communication: (to make suggestions and recommendations about services that may be of interest to them)	(a) Identity (b) Contact (c) Technical (d) Usage (e) Profile (f) Marketing and Communications	Necessary for our legitimate interests (to develop our services and grow our business).	Mailchimp (The Rocket Science Group LLC) (based outside of the EU)
In relation to clients and former clients of Cartridges Law recorded on our system after 25th May 2018: to make suggestions and recommendations about services that may be of interest to them	(a) Identity (b) Contact (c) Technical (d) Usage (e) Profile (f) Marketing and Communications	Consent – obtained via the signed client care letter.
To send our newsletter and other marketing materials where you are not, nor ever have been, a client or former client of Cartridges Law.	(a) Identity (b) Contact (c) Technical (d) Usage (e) Profile (f) Marketing and Communications	Consent