Leka Solicitors is a trading name of S&P Legal Ltd. We are committed at Leka Solicitors to protecting and respecting your privacy.

Personal data we process

We process your name, contact details, your ID and other information we require to conduct due diligence on you.

When conducting your matter we will also process personal and financial information relating to your matter. We may also process special categories of personal data, where relevant to your matter. This may include sensitive information related to you including health records, information about your sex life, sexual orientation, political opinions, religious or philosophical beliefs, racial or ethnic origin, trade union membership, genetic and biometric data.

Our lawful basis for processing your personal data and special categories of personal data (sensitive information)

We have been instructed by you to give you advice and/or representation. There is a contractual basis to our relationship. In order to perform this contract we will require personal information about you that we will collect, process and store. This is because we have legal and regulatory duties to process certain personal data including ID and other information useful to conduct due dilligence on any client. Any information requested is asked for in order to perform our contractual duty. If we do not receive it we will not be able to provide our service to you.

We have a legitimate interest in contacting you in the future to provide you with relevant professional updates and promote our services to you.

For special categories of personal data, we are permitted to process your data (e.g. health records) with your consent.

How we will use your personal data

We use information you provide to us in the following ways

• Engaging in legal services for you, if you are a client.

• Communicating with you.

• Running our business (e.g. carrying out administrative or operational processes, including recruitment).

• Keeping records of your transactions and the transaction we make on your behalf.

• Sending you marketing or promotional materials.

• Processing and responding to requests, enquiries or complaints received from you.

Where we get your personal data from

We will collect your personal data from you or your representatives primarily. This may also come from public records, or other parties that you instruct us to contact. This could include doctors, employers, accountants, banks, courts, regulatory bodies etc.

Your data rights

You are entitled to the following rights, free of charge:

• The right to be informed – You have the right to be informed about the collection and use of your personal data.

• The right to access – You have the right to request us for copies of your personal data. We may charge you a small fee for this service.

• The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request us to complete the information you believe is incomplete.

• The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

• The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

Retention of personal data

We are required by our insurers and regulators to keep your file and personal data for minimum periods. We are not however permitted to keep your personal data indefinitely or for longer than is necessary. Presently, the minimum period is for six years. We may keep it for longer if it is necessary and in our legitimate interests to do so. All our files and other documents containing personal data are destroyed securely.

Sharing your personal data

We may need to share your personal data with other professionals who we instruct on your behalf, third parties who are vital to a matter (e.g. regulators, insurers), providers of services that are necessary to progress a matter (e.g. to perform our client due diligence checks on you), and people who you ask us to share your personal data with (such as estate agents, family members or other representatives).

Digital Marketing Service Providers

We appoint digital marketing agents to conduct marketing activity on our behalf, such activity may result in the compliant processing of personal information. Please contact us if you would like their details.

Where we hold your personal data

Your data will be stored at our offices and on our IT equipment, or where your information is shared with a third party, at their premises or on their IT equipment.

Transferring your personal data outside of the EEA

Since we do not have offices outside England & Wales, we have no reason to transfer your personal data outside the European Economic Area unless you or a third party with whom we must share your personal data are based outside the EEA.

Where we use third party IT services (e.g. ‘cloud’ based software) we shall ensure that their data centres are either within the EEA or that there are lawful safeguards in place to protect your personal data to the same standard as if it were held within the EEA.

Complaints and Questions

If you have a complaint or question about our use of your personal data, please contact Sashi Pararajasingam (our sole partner) at sashi.para@lekasolicitors.co.uk.

You may also make complaints direct to the Information Commissioner’s Office (web: www.ico.org.uk/concerns tel: 0303 123 1113).