We collect and process personal information relating to our business as a law firm. This will include information on personal identifiers (for example, name, passport details and contact details) and may include background information such as source of wealth along with information more specifically linked to your matter or our business. This information may be provided to us directly by you, and we may also receive this information from third parties.
We may process this information where we have one (or more) of the following:
(a) a person's consent. If that applies, you can remove your consent at any time by contacting us.
(b) a contractual obligation.
(c) a legal obligation.
(d) a vital interest.
(e) a requirement to use it to perform a public task.
(f) a legitimate interest.
We use this information in order to progress matters, including for money-laundering/compliance (ML) checks and other administration, or more generally in our business as a law firm We may share this information with other organisations or individuals as either required (for example, for ML checks) or where we judge that it is in the interest of the matter to do so (and with appropriate safeguards).
This information is securely stored by us. We will keep this information for no more than seven years after sending you our final bill or otherwise completing the matter. We will not destroy documents you ask us to deposit in safe custody.
Under data protection law, you have rights over your personal information including:
(a) to ask us for copies.
(b) to ask us to rectify information you think is inaccurate and to complete information you think is incomplete.
(c) to ask us to erase your information in certain circumstances.
(d) to ask us to restrict the processing of your information in certain circumstances.
(e) to object to the processing of your information in certain circumstances.
(f) to ask that we transfer the information you gave us to another organization, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request or object, we have one month from receipt to respond to you. Where there are exemptions to your rights which we can apply, we will consider these on a case by case basis. Please contact us as above if you wish to make a request or object.
We hope that we can resolve any query or concern you may raise about our use of your personal information. You can also make a complaint to the Gibraltar Regulatory Authority – contact details at www.gra.gi