Privacy Policy
MDJ Law (“We”) is committed to protecting and respecting your privacy.
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed.
The General Data Protection Regulation ((EU) 2016/679) (GDPR), effective on 25 May 2018, gives data subjects (living individuals in respect of whom personal data is processed) enhanced rights and protections in relation to their personal data.
What information do we collect?
1.1 Information you give us.
Client Data:
Information about you which relates to your instructions with us. This information may include your name, your postal address, your email address and your telephone and/or mobile number, and such other information as we determine is needed to verify the identity of our clients.
We will process this data to verify your identity, maintain your account with us, to provide our services, to communicate with you and to back up our database. The reason we process this data is to ensure the proper administration of the instructing client’s account and our business and, where you have entered into a contract with us, for the purposes of fulfilling our contract with you.
The legal basis we rely on for processing this data is:
Communication Data:
If you communicate with us (through our website contact form, by email, phone, post or any other means of communication), we will process the information contained in your communication. This information may include your name and contact information, the content of your communication and any metadata our website generates where you communicate with us using the contact form available on our website.
We will process that information so we can correspond with you and keep records of such correspondence. The legal basis we rely on for processing this data is:
1.2 Information we collect from other sources.
Transaction Data:
When a client instructs us to provide services, the client will need to provide certain information to us so that we can supply those services.
The personal information which may be communicated to us in the course of supplying services to our clients may include a data subject’s name, contact details, payment card details and other personal information relevant to a transaction.
We will process that data in order to perform our contract with you and our client and to fulfil the transaction. We also need to comply with our regulatory obligations when administering our business.
The legal basis we rely on for processing this data:
Technical Data:
Technical information relating to your use of our websites, including:
(1) the IP address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform. We may obtain this data through our analytics tracking system; and
(2) information about your visit to our website(s), including the URL, clickstream to, through and from our website(s) (including date and time), products and services you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page.
We process this data so we can monitor and analyse how our websites are used so we can improve our websites and our services. The
is helps us to administer our business and improve the services we offer.
The legal basis we rely on for processing this data is:
Third Party Data:
This is information we receive about you if you use any of the websites we operate or the services we provide. We are working closely with third parties (including, for example, consultants, business partners, other solicitors and professionals, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies).
We may receive personal data about you from these organisations. Those organisations will have their own privacy policies detailing how they process personal data.
We process this data so that we can properly administer our business.
The legal basis we rely on for processing this data is:
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.
3.1 We may need to share your personal information with certain selected third parties including:
(a) consultants who are engaged by MDJ Law to deliver services directly to its clients. We may also engage legal secretaries, paralegals and trainee solicitors to provide services to clients on our behalf. We engage these people, and they need to process personal data on our behalf, in order to perform any contract we have with you and also to ensure the proper administration of our business.
(b) our business partners, suppliers and sub-contractors for the purpose of performing any contract we have with you or them. In particular, we use third party companies to process your personal data in order:
(c) analytics and search engine providers that assist us in the improvement and optimisation of our website.
3.2 We will also disclose your personal information to third parties in the following circumstances:
(a) If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce any legal agreement we have with you; or to protect our rights or property, or the safety of us, our clients, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
We will always try to ensure that your personal data is processed within the European Economic Area. In some circumstances this will not be possible. In circumstances where it is necessary for us to transfer your personal outside the European Economic Area, we will only transfer such personal data to third parties where we have carried out due diligence on such third parties to ensure they will protect your personal data using similar standards and safeguards as we have.
We will also have contractual provisions in place with such third parties to ensure your personal data is protected. Such contractual provisions will be based on the standard contractual clauses approved by the European Commission for the transfer of data outside the EEA or such other appropriate standards as are required from time to time by the European Commission or the UK Government. You consent to the transfer of your personal data outside of the EEA, as long as we comply with these requirements.
Unfortunately, the transmission of information via the internet is not always secure. Although we will do our best to protect your personal data, and we will maintain appropriate technical and organisation measures to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
(a) Any personal data that we process will be deleted from our systems once we have completed the purpose for which we were processing the personal data. In some cases, the purpose for which we are processing your personal data will last for a considerable period (for example, if you are a long term client of ours, we will need to store your data until our relationship with you comes to an end).
(b) We will determine the period for which we need to retain your data, acting reasonably, and taking into consideration a number of factors such as your relationship with us, your engagement with us, and the fulfilment of contracts we have with you.
(c) We may need to retain your personal data where this is necessary to comply with our legal or regulatory obligations, or to protect the vital interest or the vital interests of another natural person.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
7.1 Under data protection laws you have the following fundamental rights:
(a) The right to access the personal data we hold about you
(b) The right to have your personal data corrected if there are errors or inaccuracies in it, or your personal data is incomplete
(c) The right to restrict the processing we carry out in relation to your personal data
(d) The right to object to the processing we carry out in relation to your personal data
(e) The right to have the personal data we hold about you provided to you in a useable format
(f) The right to complain to a supervisory authority (in the UK this is the Information Commissioner’s Office) about how and/or why we are processing your personal data
(g) The right to tell us you no longer consent to us processing your personal data. In practice you will usually agree in advance to us using your personal data for marketing purposes and if you no longer wish us to use your personal data for marketing purposes, you can opt out of receiving such marketing messages at any time. You can do this either by unsubscribing from the marketing messages we send you, notifying us in writing at philip@mccabeandco.com
7.2 You can ask us to provide you with details of any personal data we hold about you. You do not have to pay us a fee to access your personal data unless we believe your access request is unfounded, repetitive or excessive. In this case we may charge you a reasonable fee to access your personal data or we may decide not to comply with your request. We will notify you if this is the case. We will require you to provide appropriate evidence of your identity before we respond to your request. Typically this identification evidence will be a photocopy of your passport or photo driving licence, which a solicitor or bank has certified as being a true copy of the original and a copy of a recent utility bill detailing your current address.
7.3 Our website may, from time to time, contain links to and from other websites. If you follow a link to any of these websites, these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
7.4 If you think that any of the data we hold about you is incorrect or inaccurate, you can contact us to correct such data. Please contact us at pa@mdjlaw.co.uk
Any changes we make to our privacy policy in the future will be posted on this page. Please check back frequently to see any updates or changes to our privacy policy.
This privacy policy relates to Morgan Denton Jones Limited of 1a The Old Brewery Quarter, St Mary Street, Cardiff, CF10 1AD
You can contact us by phone 029 2054 7040 or by email at pa@mdjlaw.co.uk or by post at the above address.
Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to Mark Morgan at the address above.
"MDJ Law" is a trading name of Morgan Denton Jones Limited, a company registered in England and Wales under company number 7880270
Home
Our Services
Our Team
How We Work
Legal Thoughts
Legal and Regulatory Statement
Contact Us
Registered Office:
1a The Old Brewery Quarter,
St Mary Street,
Cardiff
CF10 1AD