Privacy Notice
1. When this Privacy Notice applies
This Privacy Notice (“Notice”) applies whenever Digiphile Services Limited (referred to in this Notice as “Digiphile”, “we” or “us”) processes any personal information about you – for example, by collecting it, using it, storing it, or disclosing it to others. It describes how and why we process your personal information, and what rights you can exercise in respect of your personal information.
2. About Us
Digiphile is a company registered in England and Wales (company registration number 14179817). Our registered office is at 86-90 Paul Street, London, EC2A 4NE.
Digiphile is a law firm, and is regulated and authorised by the Solicitors Regulation Authority under SRA number 8001623.
We are also registered as a data controller with the Information Commissioner’s Office, and our registration number is ZB383476.
3. Contact us
If you have any questions concerning Digiphile’s processing of your personal information, wish to exercise any of your data protection rights, or otherwise wish to raise a data protection concern with us, please contact us by:
- sending an email to [email protected], or
- writing to us at Digiphile Services Limited, 86-90 Paul Street, London, EC2A 4NE, United Kingdom
4. What personal information do we collect, why and what is our lawful basis?
Digiphile collect and process the following categories of personal information for the following reasons:
| Which individuals? | What personal information? | Why? | Lawful basis under EU GDPR / UK GDPR |
|---|---|---|---|
| Clients | Name, contact details, financial information (e.g. payment details), identification and verification information (e.g. photo IDs), the nature of advice sought, and any other contextual information the client provides for the purposes of obtaining legal advice (which may include personal data relating to third parties). Clients may need (or choose) to provide us with personal information that is considered “sensitive” or “special category data” under applicable data protection laws for the purpose of obtaining legal advice (such as personal information relating to an individual’s health, race or ethnicity, political opinions, religious or philosophical beliefs, trade union membership, sex life or sexual orientation, genetic data or biometric data). | We use this advice to undertake client verification checks and to provide legal advice to our clients. If clients voluntarily subscribe to marketing communications from Digiphile, we will also use their contact details to send those marketing communications. | When we process this personal information for the purpose of undertaking client verification checks and providing legal advice, legitimate interests. If we need to process “special category data” to provide legal advice, we will do so only where permitted by data protection law – for example, where we have the data subject’s explicit consent, where the data has been manifestly made public by the data subject, or where the processing is necessary for the exercise, establishment or defence of legal claims. When we process this personal information for the purpose of sending marketing communications, consent. |
| Website visitors | Our website servers may automatically receive certain information about your device, including your IP address, browser type, device type and similar technical information. | We use this information to ensure our website is rendered correctly to you. We do not collect website analytics or engage in targeted advertising. | When we process this information for the purpose of rendering our website correctly, legitimate interests. |
| Other third parties | Clients may disclose information about third parties when seeking legal advice from Digiphile. The specific personal information that Digiphile receives is determined solely by the client, and may include personal information that is deemed “sensitive” or “special category data” under applicable data protection laws. | We use this advice to provide legal advice to our clients. | When we process this personal information for the purpose of providing legal advice, legitimate interests. If we need to process “special category data” about third parties to provide legal advice, we will do so only where permitted by data protection law – for example, where we have the data subject’s explicit consent, where the data has been manifestly made public by the data subject, or where the processing is necessary for the exercise, establishment or defence of legal claims. |
5. Disclosures of personal information
We may disclose the personal information we process:
- to third parties who provide services on our behalf, such as IT hosting providers, email providers and data backup providers, subject to strict contractual terms that protect the personal information in accordance with data protection law;
- to any competent law enforcement, judicial or regulatory authority if we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
- to a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Notice; and
- to any other person if the relevant data subject(s) have consented.
6. International transfers of personal information
Although Digiphile is a UK law firm, some of the service providers we use may be based in countries that are outside the United Kingdom and European Economic Area. This means that the personal information Digiphile processes may, in some cases, be transferred to and processed in non-UK and non-EEA countries by our service providers.
Where we can, we will use service providers established in countries that are recognised as having adequate data protection laws (by the competent UK and EU authorities) or who agree to process our data in the UK or European Economic Area. However, where this is not possible, then we implement appropriate safeguards with our service providers in accordance with the requirements of data protection law. These may include using the International Data Transfer Addendum or International Data Transfer Agreement (issued by the UK Information Commissioner) and the EU Standard Contractual Clauses (adopted by the European Commission).
7. Data retention
We will retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), we will securely store your personal information and isolate it from any further processing until deletion is possible.
8. Your data protection rights
You have the following data protection rights:
- If you wish to access, correct, update or request deletion of your personal information, you can do so at any time by sending an email to [email protected];
- You can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. You can exercise these rights by contacting us by email at [email protected];
- You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. Digiphile does not ordinarily undertake any such automated decisions.
- You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. To opt-out of other forms of marketing (such as postal marketing or telemarketing), then please email [email protected];
- Similarly, if we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent; and
- You have the right to lodge a complaint with a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. (Contact details for the ICO, the UK’s data protection authority, are available here. Contact details for data protection authorities in the European Economic Area, are available here.)
We respond to all requests received from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
9. Why don’t you have a cookie notice?
We have instructed our website provider not to serve any cookies or similar tracking technologies through our website unless they are strictly necessary to deliver the site – meaning we don’t use cookies for analytics, advertising or otherwise – and so do not display a cookie notice.
10. Updates to this Notice
We may update this Notice from time to time in response to legal, technical or business developments. When we update our Notice, we will take appropriate measures to inform you, which will be consistent with the significance of the changes we make.
You can see when this Notice was last updated by checking the “last updated” date displayed at the end of this Notice.
Last updated: 1 December 2022
