This data privacy notice concerns Brown and Wallace LLP (hereafter referred to as "BW+"), Registered in Scotland with Company Number SO305695, registered office 22 James Morrison Street, Glasgow G1 5PE. If you have any queries regarding this policy please contact
1. Your personal data – what is it?
Personal data relates to a living individual (data subject) who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in BW+'s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (the “GDPR”).
2. Who are we?
BW+ is the data controller. This means BW+ decides how your personal data is processed and for what purposes.
3. How do we process your personal data?
BW+ complies with its obligations under the “GDPR” by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We use your personal data for the following purposes: -
- To enable BW+ to provide services to your business to fulfil a contract(s) made between your company and BW+;
- To keep you up to date with BW+ business news and events;
- To send you information about BW+ products and services;
- To track usage of our website through the use of Google Analytics;
- To manage our employees;
- To maintain our own accounts and records;
4. What is the legal basis for processing your personal data?
- Explicit consent of the data subject so that we can keep you informed about BW+ business news and events;
- Explicit consent of the data subject so that we can keep you informed about BW+ products and services;
- Processing is necessary to fulfil a contract(s) made between your company and BW+ where you represent your company;
- Processing is necessary to fulfil a contract made between you and BW+;
- Processing is necessary for carrying out legal obligations in relation to employment, social security or social protection law, or a collective agreement.
5. Sharing your personal data
Your personal data will be treated as strictly confidential.
It may be shared with selected data processors in order to fulfil the legal basis for processing, examples of which are as data processors required to fulfil a contract; data processors who fulfil e-mail marketing activity for BW+; and data processors who provide payroll services.
All data processors are subject to confidentiality and we will not share your data with other third parties which are outside of the scope of the documented legal basis for processing.
6. How long do we keep your personal data?
Where you are representing your company, we will keep your details for the duration of your companies contract with us.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity or the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In the absence of specific legal, regulatory or contractual requirements, our standard retention period for personal data is seven years after conclusion of any relationship between you and us.
After this time, it will be securely destroyed if it is no longer required for the purpose it was obtained.
Retention periods may be changed from time to time based on business or legal and regulatory requirements.
We may on exception retain your information for longer periods, particularly where we need to withhold destruction or disposal based on an order from the courts or an investigation by law enforcement agencies or our regulators. This is intended to make sure that the Firm will be able to produce records as evidence if they're needed.
7. Your rights and your personal data
Unless subject to an exemption under the GDPR or any other corporate compliance or legal requirement, you have the following rights with respect to your personal data: -
- The right to request a copy of your personal data which BW+ holds about you;
- The right to request that BW+ corrects any personal data if it is found to be inaccurate or out of date;
- The right to request your personal data is erased where it is no longer necessary for BW+ to retain such data;
- The right to withdraw your consent at any time;
- The right to request that BW+ provides the data subject with their personal data in a commonly used electronic format;
- The right to lodge a complaint with the Information Commissioners Office.
8. Cookies
Like many other websites, we use "cookies" to help us gather and store information about visitors to our websites. A cookie is a text-only string of information that a website transfers to the cookie file of the browser on your computer's hard disk so that the website can remember who you are. A cookie will typically contain the name of the domain from which the cookie has come, the "lifetime" of the cookie, and a value, usually a randomly generated unique number.
We use the following types of cookies on our site;
- Preference Cookie - At your request we may place a cookie to remember your preferences so that you do not need to re-enter your details (country/age and language preferences) on our gateway page. This is not suitable if you share your computer with someone else.
- Social Sharing - This is a cookie that identifies you with social networking sites such as Facebook and Twitter and allows interaction between your activity on social networking sites and on our website through your direction, and makes your transition between the sites more seamless.
- Content Management cookies - These are cookies required for the content management system that our web site is besed on to work.
- Template preference cookies - These cookies are necessary for mobile sites to enable the site to look and feel the way it is intended to.
- Site Analytics - We use Google Analytics to help analyse use of our website. The information used by Google Analytics is collected in an anonymous form and stored by Google for 26 months, enabling us to perform year on year comparisons. For more information about Google Analytics please visit https://support.google.com/analytics/answer/6004245?hl=en-GB
9. Further processing
We will not use your personal data for any task other than those listed here.
Should a new unforeseen requirement arise in the future then this policy will be updated and where the BW+ basis for processing is based on consent, we will ask you for a new consent which covers the new requirement before processing your details for this new requirement.
10. Contact Details
To exercise all relevant rights, queries or complaints in the first instance please contact Brown and Wallace using