Please read the information in this policy carefully. This Privacy Notice contains information about the information collected, stored and otherwise processed about you and the reasons for the processing. It also tells you who Chambers shares this information with, the security mechanisms we have in place to protect your information and how to contact Chambers in the event you need further information.

About us

St Albans Chambers collects, uses and is responsible for personal information about you. When Chambers does this, it is the ‘data controller’ of this information for the purposes of the GDPR and the Data Protection Act 2018. The Chambers also acts as a ‘data processor’ on behalf of our members who provide legal services.

Our address is 2-4 St. Peters Street, St Albans, Hertfordshire AL1 3LF. Our data protection registration number is: ZA047489. Full details of our notified purposes can be viewed at the website of the Information Commissioner’s Office www.ico.gov.uk

If you need to contact Chambers about your information or the processing carried out, you can use the contact details at the end of this document.

What does Chambers do with your information?

Chambers collects some or all of the following personal information that you provide:

1. Full name
2. Email address
3. Telephone number
4. Details of your enquiry
5. Other personal information relevant to instructions to provide legal services, including information specific to the instructions in question.
6. Name of your organisation
7. Curriculum vitae details (for those enquiring about jobs)
8. financial details
9. education, training and employment details
10. physical or mental health details
11. racial or ethnic origin
12. sex life or sexual orientation
13. criminal proceedings, outcomes and sentences, or related security measures

Information collected from other sources.

The same categories of information may also be obtained from third parties, such as members of Chambers, experts, members of the public, your family and friends, witnesses, courts and other tribunals, suppliers of goods and services, investigators, government departments, regulators, public records and registers.

How Chambers uses your personal information: Purposes

To provide a service: We may contact you for reasons relating to the service you have made a request for. We would use your contact details to manage this and may retain them for marketing purposes. Please refer to the marketing section below on how we may use your personal data for marketing purposes.

If you are interested in working for us, we will only use your personal data to process your application, monitor recruitment and provide statistics. Personal data about unsuccessful candidates will be retained for six months after the recruitment process is completed, at which point it will be disposed of securely.

Further personal information maybe recorded for the following purposes:

1. to promote and market the services of the Barristers
2. to train barristers

• to recruit staff and pupils

1. to assess applications for tenancy, pupillage, mini-pupillage and work-shadowing opportunities
2. to fulfil equality and diversity and other regulatory requirements,
3. to procure goods and services,

• to manage matters relating to employment, including payroll [and pensions]
• to respond to requests for references

1. to publish legal judgments and decisions of courts and tribunals
2. to respond to potential complaints or make complaints
3. to carry out anti-money laundering and terrorist financing checks

• As otherwise required or permitted by law.

When you interact with any of our digital platforms, we may also automatically collect the following information about your visit:

1. how you have reached our digital platform and the internet protocol (IP) address you have used;
2. your browser type, versions and plug-ins and your operating system;

• your journey through our digital platform, including which links you click on and any searches you made, how long you stayed on a page and other page interaction information;

1. information collected in any forms you complete such as online enquiry forms; and
2. news, offers and opportunities from us.

The processing of personal data is necessary for the purposes of legitimate interests pursued by the Chambers, such as, for the purpose of providing products and services including notifications about upcoming events or seminars and to tailor our communications to you in line with your preferences.

We do not process special categories of personal data for marketing purposes.

Website, Digital Platforms & Cookies

Please note that our website, www.stalbanschambers.co.uk and other digital platforms may contain links to third party websites/digital platforms which are provided for your convenience. We are only responsible for the privacy practices and security of our own digital platforms and therefore we recommend that you check the privacy and security policies of each and every other website/digital platform that you visit.

In common with many other website operators, we use standard technology called ‘cookies’on our website. Cookies are small pieces of information that are stored by the browser on your computer’s hard drive and they are used to record how you navigate websites on each visit.

Marketing and promotion

We would like to contact our clients for marketing purposes and to promote new services to you. This may be by post, telephone, fax or email. If you do not wish to receive direct marketing from us please contact us with your request. Under no circumstances will your personal information be sold or used by any other organisation.

In relation to personal information collected for marketing purposes, the personal information consists of

• Names, contact details, and name of organisation
• The nature of your interest in Chambers’ marketing
• Your attendance at Chambers events.

This will be processed so that you can be provided with information about Chambers and the Barristers/Mediators/Arbitrators associated with it and to invite you to events.

Whether information has to be provided by you, and why

If you apply to Chambers for a position or are seeking a reference or are a member of staff your personal information has to be provided to Chambers, so that your application/reference can be properly assessed/your employment records, pay and pensions can be administered and to enable Chambers to comply with its regulatory obligations, and to keep accounting records.

If you are offering or providing Chambers with goods or services, your information may be processed in relation to such offers or contracts.

The legal basis for processing your personal information

Chambers relies on the following as the lawful bases to collect and use your personal information:

• If you have consented to the processing of your personal information, then Chambers may process your information for the Purposes set out above to the extent to which you have consented to Chambers doing so.
• In relation to information in categories (j) to (l) above (these being categories which are considered to include particularly sensitive information and which include information about criminal convictions or proceedings), Chambers is entitled by law to process the information where the processing is necessary for legal proceedings, legal advice, or otherwise for the establishment, exercise or defence of legal rights.
• In relation to information which is not in categories (j) to (l) above, Chambers relies on its legitimate interests and/or the legitimate interests of a third party in carrying out the processing for the Purposes set out above.
• In relation to information which is in categories (j) to (l) above (these being categories which include particularly sensitive information and which include information about criminal convictions or proceedings), Chambers relies on your consent for any processing for the purposes set out in purposes (i), (ii), (vi) and (viii) above. However, if you do not consent to processing for the purpose of providing a reference Chambers will be unable to take or provide a reference. This is because Chambers needs to be able to retain all information about you to provide an informed and complete reference.
• The processing is necessary for the purposes of performing or exercising obligations or rights which are imposed or conferred by law on Chambers or you in connection with employment, social security or social protection.
• The processing is necessary for the assessment of your working capacity or health or social care purposes.
• The processing of information in categories (j),(k) and (l), is necessary for the purposes of identifying or keeping under review the existence or absence of equality of opportunity or treatment between members of staff, tenants, pupils and mini-pupils with a view to enabling such equality to be promoted or maintained
• The processing is necessary to prevent or detect unlawful acts where it is in the substantial public interest and it must be carried out without consent so as not to prejudice those purposes.
• In certain circumstances, processing may be necessary in order that Chambers can comply with a legal obligation to which it is subject (including carrying out anti-money laundering or terrorist financing checks).

Who will Chambers share your personal information with?

It may be necessary to share your information with the following:

• information processors, such as IT support staff, email providers, information storage providers
• in the event of complaints, the Head of Chambers and members of Chambers who deal with complaints, the Bar Standards Board and the Legal Ombudsman
• other regulatory authorities
• current, past or prospective employers or employees
• in the case of recruitment of barristers to or from other chambers, your current, past and prospective chambers
• education and examining bodies
• legal professionals
• experts and other witnesses
• prosecution authorities
• courts and tribunals
• Chambers’ staff
• trainee barristers
• lay and professional clients of Members of Chambers
• family and associates of the person whose personal information Chambers is processing
• current, past or prospective employers
• education and examining bodies
• business associates, professional advisers and trade bodies, e.g. the Bar Council
• the intended recipient, where you have asked Chambers to provide a reference
• the general public in relation to the publication of legal judgments and decisions of courts and tribunals

Chambers may be required to provide your information to regulators, such as the Bar Standards Board, the Financial Conduct Authority or the Information Commissioner’s Office. In the case of the Information Commissioner’s Office, there is a risk that your information may lawfully be disclosed by them for the purpose of any other civil or criminal proceedings, without Chambers’ consent or your consent, which includes privileged information.

Chambers may also be required to disclose your information to the police or intelligence services, where required or permitted by law.

Sources of information

The personal information Chambers obtains may include information obtained from:

• legal professionals
• experts and other witnesses
• prosecution authorities
• courts and tribunals
• trainee barristers
• lay and professional clients of members of Chambers
• family and associates of the person whose personal information Chambers is processing
• in the event of complaints, the Head of Chambers, other members of Chambers who deal with complaints, the Bar Standards Board, and the Legal Ombudsman
• other regulatory authorities
• current, past or prospective employers
• education and examining bodies
• business associates, professional advisers and trade bodies, e.g. the Bar Council
• The intended recipient, where you have asked Chambers to provide a reference.
• the general public in relation to the publication of legal judgments and decisions of courts and tribunals
• data processors, such as IT support staff, email providers, data storage providers
• Public sources, such as the press, public registers and law reports.

Transfer of your information outside the European Economic Area (EEA)

This privacy notice is of general application and as such, it is not possible to state whether it will be necessary to transfer your information out of the EEA in any particular case or for a reference. However, if you reside outside the EEA or your case or the role for which you require a reference involves persons or organisations or courts and tribunals outside the EEA then it may be necessary to transfer some of your information to that country outside of the EEA for that purpose. If you are in a country outside the EEA or if the instructions you provide come from outside the EEA then it is inevitable that information will be transferred to those countries. If this applies to you and you wish additional precautions to be taken in respect of your information please indicate this when providing initial instructions.

Some countries and organisations outside the EEA have been assessed by the European Commission and their information protection laws and procedures found to show adequate protection. The list can be found here. Most do not. If your information has to be transferred outside the EEA, then it may not have the same protections and you may not have the same rights as you would within the EEA.

Chambers may transfer your personal information to the following which are located outside the European Economic Area (EEA):

• Cloud information storage services based in the USA who have agreed to comply with the EU-U.S. Privacy Shield, in order to enable me to store your information and/or backup copies of your information so that Chambers may access your information when they need to. The USA does not have the same information protection laws as the EU but the EU-U.S. Privacy Shield has been recognised by the European Commission as providing adequate protection. To obtain further details of that protection see https://ec.europa.eu/info/law/law-topic/information-protection/information-transfers-outside-eu/eu-us-privacy-shield_en.
• Cloud information storage services based in Switzerland, in order to enable me to store your information and/or backup copies of your information so that Chambers may access your information when it needs to. Switzerland does not have the same information protection laws as the EU but has been recognised by the European Commission as providing adequate protection; see https://ec.europa.eu/info/law/law-topic/information-protection/information-transfers-outside-eu/adequacy-protection-personal-information-non-eu-countries_en.

If Chambers decides to publish a judgment or other decision of a Court or Tribunal containing your information then may be published to the world.

Chambers will not otherwise transfer personal information outside the EEA except as necessary for the conduct of any legal proceedings.

If you would like any further information, please use the contact details at the end of this document.

How long will Chambers store your personal information?

Chambers will normally store all your information:

• until at least 1 year after the expiry of any relevant limitation period, from for example the date on which your employment terminates, the date of the last provision of service or goods, the date of the last payment made or received or the date on which all outstanding payments are written off, whichever is the latest/whatever other end point is chosen. This is because it may be needed for potential legal proceedings/ other period. At this point, any further retention will be reviewed and the information will be marked for deletion or marked for retention for a further period. The latter retention period is likely to occur only where the information is needed for legal proceedings, regulatory matters or active complaints. Deletion will be carried out as soon as reasonably practicable after the information is marked for deletion.
• Equality and diversity data may be retained for 3 months in pseudonymised form for the purpose of research and statistics and complying with regulatory obligations in relation to the reporting of equality and diversity data.
• Names and contact details held for marketing purposes will be stored indefinitely or until Chambers becomes aware or is informed that the individual has ceased to be a potential client.
• Personal information held for recruitment purposes or in relation to pupillage or mini-pupillage will be stored for 3 months.

All retained personal data will be securely disposed of when it is considered to be of no further use.

Where will my personal data be kept?

Once we have received your personal data we will, use recognised industry standard procedures and security features to try to prevent unauthorised access.

Your personal data will be under the control of St Albans Chambers. It will be held on our computer system. Our computer system is a secure hosted system. When we print, your personal data this will be in the possession and control of our employees and Barristers at all times and will be securely disposed of when it is considered to be of no further use.

Consent

As explained above, Chambers is relying on your explicit consent to process your information in categories (g) to (o) above. You provided this consent when you applied to become a member of staff, tenant, pupil or mini-pupil or you asked Chambers to provide a reference.

You have the right to withdraw this consent at any time, but this will not affect the lawfulness of any processing activity carried out prior to you withdrawing your consent. However, where Chambers also relies on other bases for processing your information, you may not be able to prevent processing of your information.

If there is an issue with the processing of your information, please contact Chambers using the contact details below.

Your Rights

Under the GDPR, you have a number of rights that you can exercise in certain circumstances. These are free of charge. In summary, you may have the right to:

• Ask for access to your personal information and other supplementary information;
• Ask for correction of mistakes in your information or to complete missing information Chambers holds on you;
• Ask for your personal information to be erased, in certain circumstances;
• Receive a copy of the personal information you have provided to me or have this information sent to a third party. This will be provided to you or the third party in a structured, commonly used and machine-readable format, e.g. a Word file;
• Object at any time to processing of your personal information for direct marketing;
• Object in certain other situations to the continued processing of your personal information;
• Restrict the processing of your personal information in certain circumstances;
• Request not to be the subject to automated decision-making, which produces legal effects that concern you or affects you in a significant way.

If you want more information about your rights under the GDPR please see the Guidance from the Information Commissioners Office on Individual’s rights under the GDPR.

If you want to exercise any of these rights, please:

• Use the contact details at the end of this document;
• Chambers may need to ask you to provide other information so that you can be identified;
• Please provide a contact address so that you can be contacted to request further information to verify your identity;
• Provide proof of your identity and address;
• State the right or rights that you wish to exercise.

Chambers will respond to you within one month from when it receives your request.

Marketing Emails

If you would like to unsubscribe from any email newsletter you can also click on the ‘unsubscribe’ button at the bottom of the email newsletter, or by contacting us at clerks@stalbanschambers.com. It may take up to 1 month for this to be effective.

How to make a complaint?

The GDPR also gives you the right to lodge a complaint with the Information Commissioners’ Office if you are in the UK or with the supervisory authority of the Member State where you work, normally live or where the alleged infringement of information protection laws occurred. The Information Commissioner’s Office can be contacted at http://ico.org.uk/concerns/.

Future Processing

Chambers does not intend to process your personal information except for the reasons stated within this privacy notice. If this changes, this privacy notice will be amended and placed on the Chambers’ website at www.stalbanschambers.co.uk.

Changes to this privacy notice

Chambers continually reviews its privacy practices and may change this policy from time to time. When it does an amended privacy notice will be placed on the Chambers’ website at www.stalbanschambers.co.uk.

Contact Details

If you have any questions about this privacy notice or the information Chambers holds about you, please contact Chambers at:

Post: Practice Manager at St Albans Chambers, 2-4 St. Peters Street, St Albans, Hertfordshire AL1 3LF

Email:clerks@stalbanschambers.com

Telephone:01727 843383