We’re committed to protecting and respecting your privacy.

This section of the website explains how we use any personal information that you provide to us though this website or that we collect from you when providing our services.

We may change our privacy notices from time to time so please check this page occasionally to ensure that you’re happy with any changes. By using our website, you’re agreeing to be bound by the terms of this privacy notice.

Should you have any questions regarding this policy and our privacy practices, please contact us at lawrence@lawrencelupin.co.uk

Lawrence Lupin/Nexa Law as a data controller

We are the data controller for all personal information that we collect and process in providing services to our clients, administrating our business, engaging consultant lawyers and recruitment.

The data controller is Nexa Law Limited (“we, us, our”) of Office 1, The Church Offices, Salop Road, Oswestry, Shropshire, SY11 2NR and we have overall responsibility for all personal information collected via this website.

What sort of information do we process?

We process (collect, store, use) personal information about lots of different people for different reasons. We process personal information about our clients, people who work with us to provide legal services, our staff, our consultant lawyers and other third parties we interact with either directly or through our website.

Personal information means any information relating to a living person that allows for that person to be identified, directly or indirectly. When you interact with us we may collect and process personal information that you supply or that we collect from publicly available sources.

We are a firm of solicitors and therefore we will process a wide variety of personal information but normally we will process: your full name, contact details and information necessary for you to become a client. Depending on our relationship with you we may also process information about your business, identification (cop passport, driving licence copies and utility bills or bank statements), financial circumstances, family members, employment history, your relationship with us and how you use our website or other online services.

Some types of personal information are known as ‘special category’ and we are required to only process these in compliance with strict rules. These special categories of personal information which include factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. We will only process these with your consent or if we have a lawful purpose to do so.

How do we collect personal information about you?

We may collect personal information directly from you or from third parties (including publicly available sources) involved in the matters we advise on. If you are a client we will often collect personal information directly from you and where we do you must ensure the information you provide is accurate and not misleading. If any of the information you provide us with changes then you must tell us so that we can update our records.

What we do with your personal information

We process personal information for the purpose of providing legal services to our clients and for other more general purposes of running a firm of solicitors, including but not limited to:

• Preventing or detecting fraudulent activities or other crimes;
• To comply with anti-money laundering and terrorist financing laws;
• to monitor our premises (including via CCTV) for safety and security;
• disclosure to our insurers, accountants, solicitors or other professional advisers that we engage;
• administrating our client’s accounts including the transfer of funds on behalf of our clients as well as billing for our services and the collection of debts owed to us;
• managing our business by asking you for feedback on the performance of our employees and of the consultant solicitors;
• advertising and marketing our services including sending you email communications about our services where we are permitted to do so.

What legal basis do we have for processing your personal information

UK law requires us to have a lawful basis upon which to process your personal information and we will usually do this using one or more of the following:

• to perform a contract (for example: to provide legal advice) that we have we you or to take steps to enter into a contract (for example: so you can provide us with a service) with you;
• to comply with our legal obligations;
• to pursue our legitimate interests which is mainly to provide legal services to the public but would also include other general business interests; and
• for the establishment, exercise or defence of legal claims.

When and how do we share your personal information?

As a firm of solicitors we are obligated to maintain our clients confidentiality but we need to share your personal information in order to provide legal services and to comply with our legal obligations. We will only do this in compliance with the relevant laws and regulations. We will share your personal information with the following third parties:

• Our officers employees and our consultant solicitors who are each independent practitioners who operate on an arm’s length basis from Nexa;
• the courts, tribunals, counterparties, experts, private investigators and those people who may work for these organisations;
• our suppliers and service providers including those companies that operate and maintain our IT systems where such personal information is stored;
• credit reference agencies, financial service providers debt collection agencies and tracing agencies;
• government agencies, regulators and other authorities including but not limited to the Information Commissioner, HMRC and the Solicitors Regulation Authority.

You should also review our Digital Privacy Policy which details what personal information we share with third parties for the functioning and analytics of this website.

How long do we keep your personal information?

We only keep personal information for as long as we consider it reasonable to do so. Generally this will be for a period of seven years to satisfy our legal obligations however we may keep personal information for longer if we deem it necessary and reasonable to do so.

Where do we hold your personal information?

We hold personal data in the EU but there may be occasions where personal information is stored on computers outside of the European Economic Area (“EEA”). For example if we are working with lawyers outside the EU for the purposes of providing legal services to you. If we do this then we will ensure that similar protections are in place in that jurisdiction are imposed by the General Data Protection Regulation.

Marketing directly to you

We will only send you direct marketing if you have given your explicit consent to receive such materials. You can change your mind and withdraw your consent at any time if you want us to stop marketing to you.

Your information rights

You have the right to lodge a complaint with the Information Commissioner in respect of our processing of your personal information. You can find more details of this process at www.ICO.org.uk. If you would like to raise your complaint with us in the first instance, then please email us with details of your complaint at eliot.hibbert@nexa.law and lawrence@lawrencelupin.co.uk

You have rights under data protection laws including the right to:

• request from us access to, rectification of, or erasure of your personal information.
• request the restriction of any processing or to object to our processing of your personal information; and
• data portability.

Please email us at eliot.hibbert@nexa.law and lawrence@lawrencelupin.co.uk to exercise any of your rights. If you would like more information on your rights and how personal information must be processed then you can find out more at www.ICO.org.uk.

The person responsible for data compliance at Nexa Law Limited is Eliot Hibbert.

The person responsible for data compliance at Lawrence Lupin is Lawrence Lupin.