Middleton Ross Privacy Notice For Clients
What we need
Middleton Ross will be a "controller" of the personal information that you provide to us when you instruct us to act on your behalf.
When you become a client of Middleton Ross, we will collect, store and use the personal information that you provide to us in your instructions and during the course of our solicitor / client relationship. We may ask you for additional personal information during the course of our client / solicitor relationship, which shall be collected, stored and used in accordance with this privacy notice.
Why we need your personal information – contractual purposes
We need to collect our clients' personal information so that we can perform our agreed legal service with you. We will use our clients' personal information to:
- provide you with legal advice to include communicating with you by email, letter and/or telephone, etc.;
- represent you as your solicitors in connection with the legal service in which you have engaged us; and
- respond to and communicate with clients regarding your questions, comments, support needs or complaints
Why we need your personal information – legitimate purposes
We also process our clients' personal information in pursuit of our legitimate interests to:
- promote our services by sending clients communications with information for upcoming events and legal updates; and
- invite our clients as guests to our events, when they are held.
Why we need your personal information – legal obligations
We are under a legal obligation to process certain personal information relating to our clients for the purposes of complying with our obligations under:
- the Law Society of Scotland requirements for solicitors;
- Anti-Money Laundering Regulations; and
- HM Revenue & Customs purposes.
Who we share your personal information with
We may be required to share personal information with statutory or regulatory authorities and organisations to comply with statutory obligations. Such organisations include the Law Society of Scotland, HM Revenue & Customs, Revenue Scotland, Registers of Scotland and The Crofting Commission
We may also share personal data with our professional advisors for the purposes of taking advice.
Middleton Ross employs third party suppliers to provide services, including IT, payroll and conveyancing searches. These suppliers may process personal data on our behalf as "processors" and are subject to written contractual conditions to only process that personal data under our instructions and protect it.
In the event that we do share personal data with external third parties, we will only share such personal data strictly required for the specific purposes and take reasonable steps to ensure that recipients shall only process the disclosed personal data in accordance with those purposes.
How we protect your personal information
Your personal information is stored on our electronic filing system and our servers based in the UK, and is accessed by our staff for the purposes set out above.
How long we keep your personal information
We keep our clients' personal data for a period of at least five years after you have ceased to be our client. Law Society of Scotland guidelines state that we will hold client files for a period of at least ten years.
We have a data retention policy that sets out the periods for retaining and reviewing all information that we hold. This sets out different retention periods and you can request a copy by contacting us at Middleton Ross, Mansefield House, 7 High Street, Dingwall, Ross-Shire IV15 9HJ.
You can exercise any of the following rights by writing to us at Middleton Ross, Mansefield House, 7 High Street, Dingwall, Ross-Shire IV15 9HJ.
Your rights in relation to your personal information are:
- you have a right to request access to the personal information that we hold about you by making a "subject access request";
- if you believe that any of your personal information is inaccurate or incomplete, you have a right to request that we correct or complete your personal information;
- you have a right to request that we restrict the processing of your personal information for specific purposes; and
- if you wish us to delete your personal information, you may request that we do so.