This privacy notice explains how we collect, use, and protect personal information. Regulation Resolution Solicitors Limited is committed to processing personal data in accordance with the Data Protection Act 2018 and the UK GDPR. As the ‘controller’ of personal data, we are responsible for the lawful collection and handling of personal information.
If you have any questions or concerns regarding our privacy practices, or if you would like further details about this notice, please contact us at:

Regulation Resolution Solicitors Limited
85 Livingstone Road, Walthamstow, E17 9AU
Email: info@regulationres.wpenginepowered.com

Overview of this Privacy Notice:

1. The personal information we collect
2. How we obtain personal information
3. How we use personal information
4. The legal basis for processing personal information
5. How long we keep personal information
6. Who we share personal information with
7. Countries to which we transfer personal data
8. How we protect personal information
9. Your legal rights concerning personal data

1. The Personal Information We Collect

Personal data refers to any information that can be used to identify a living individual. Given the varied nature of our work, the personal data we process can include:

• Identity and contact details: Name, date of birth, contact information (email, postal address, telephone numbers), passport details, and information collected through our client onboarding and recruitment processes.
• Financial and transactional information: Bank account details, payment card data, and records of payments made to or received from individuals.
• Technical and usage data: Information about how individuals interact with our website.
• Marketing preferences: Details of individuals’ preferences for marketing communications or information provided for event participation (e.g., dietary requirements).
• Client-specific data: Information provided by or on behalf of our clients during the provision of services.
• Sensitive data: Special category data such as racial or ethnic origin, health data, sexual orientation, and data about criminal convictions, as required for certain services.

2. How We Obtain Personal Information

We collect personal information in various ways, such as:

• Direct interactions: When individuals contact us by email, phone, post, or through other channels.
• Clients: Clients may provide us with personal information on behalf of individuals, such as employees, to enable us to deliver our services.
• Third parties and publicly available sources: We may obtain personal data from third-party sources such as law enforcement, regulatory bodies, or publicly accessible databases like Companies House or HM Land Registry, in order to fulfil our due diligence obligations.
• Website use: We collect information through cookies to improve user experience on our website. For more details, please refer to our Cookie Policy.

3. How We Use Personal Information

We process personal data for various purposes, including:

• To provide our services to clients.
• To recruit and manage our staff and partners.
• To maintain client and business relationships.
• To comply with our legal and regulatory obligations.
• To meet our audit and insurance requirements.

4. The Legal Basis for Using Personal Information

We only process personal data in accordance with the law. The primary legal bases for processing personal data are as follows:

• Legal obligations: To comply with laws or regulations.
• Contractual necessity: To perform or enter into a contract, such as an employment contract.
• Legitimate interests: To fulfil our business interests, provided these interests do not override the rights and freedoms of individuals.
• Consent: We may seek consent in certain cases, such as when sending direct marketing. Consent can be withdrawn at any time.

In cases of special category data or criminal convictions, we process this information for legal claims, or to fulfil our employment-related obligations.

5. How Long We Retain Personal Information

We will only retain personal data for as long as necessary to fulfil the purpose for which it was collected, subject to any legal, regulatory, or contractual obligations. If you would like more details about our retention periods for your personal data, please contact us.

6. Who We Share Personal Information With

We may disclose personal data to the following parties:

• Third-party service providers for compliance with legal and regulatory obligations (e.g., identity verification for anti-money laundering).
• External professionals, such as medical experts or legal counsel, where required for the provision of services.
• External contractors or service providers (e.g., administrative or IT support).
• Professional advisers such as auditors, bankers, and insurers.
• Regulatory bodies, courts, and law enforcement authorities.

All third parties are required to handle personal data securely and in compliance with the law.

7. Countries to Which We Transfer Personal Data

If we transfer personal information outside the UK, we ensure that the transfer complies with data protection regulations. We may rely on:

• Adequacy regulations: If the destination country has been approved as providing adequate protection.
• Appropriate safeguards: Such as standard contractual clauses, ensuring compliance with the UK GDPR.

8. How We Protect Personal Information

We implement appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. We regularly review these measures and ensure that our staff are trained in handling personal data securely.

In the event of a data breach, we will notify affected individuals and the Information Commissioner’s Office (ICO) when required by law.

9. Your Legal Rights Concerning Personal Data

Under the UK GDPR, individuals have the following rights:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can ask us to correct any inaccurate or incomplete information.
• Erasure: You can request that we delete your personal data if there is no valid reason for us to continue processing it.
• Objection: You can object to the processing of your data based on legitimate interests or for direct marketing purposes.
• Restriction: You can request that we restrict the processing of your data in certain circumstances.
• Data portability: You can request that we transfer your data to another organisation if applicable.
• Withdraw consent: If we are processing your data based on consent, you can withdraw it at any time.

To exercise these rights, please contact us at the details provided above.

10. Complaints

If you are dissatisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). The ICO is the UK’s supervisory authority for data protection matters. You can contact them at:

Website: www.ico.org.uk
Phone: 0303 123 1113

However, we encourage you to contact us first, so we can address your concerns before the ICO becomes involved.