Table of Processing Activities

Introduction

Note: We may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.

Purpose/Activity Type of data Lawful basis for processing including basis of legitimate interest Typical third parties with whom we may share your data to perform the activity or purpose (based within the EEA unless otherwise noted)
Enquiries  
To register an enquiry submitted through the website, by telephone or any other means (a)         Identity

(b)         Contact

Performance of a contract with you
Suppliers  
To engage suppliers regarding their services to us (a)         Identity Data

(b)         Contact Data

Performance of a contract with you
Clients and Matter Data Subjects  
To perform our services

 

(a)         Identity Data

(b)         Contact Data

(c)         Technical Data

(d)         Profile Data Usage Data

(e)         Marketing and Communications Data

(f)          Special Categories of Personal Data

Performance of a contract with you (Clients)

 

Legal Obligation (Clients and Data Subjects)

All live and archived matters

Quill Pinpoint Limited (cloud-hosted platform)

 

Egress Software Technologies Limited

 

Third-Party Administrator (Self-Employed)

 

Endorse HR (Exeter)

 

Any other matter specific third-party such as professional advisors, accountants or individuals or organisations related to the matter.

 

Residential Conveyancing and Commercial Property

·        Redbrick Solutions

·        GCS

·        First Title

·        Countrywide

·        Legal

·        Lender Exchange

·        LMS

 

Family Law and Civil Litigation 

·      Legal Aid Agency

·      Relevant authorities such as HMCTS, Police, NHS, HMRC.

·      Temple Insurance

 

Business

·      Bright (South West) LLP (for legal consultancy purposes).

To manage our relationship with prospects, clients and former clients.

 

(a)         Identity

(b)         Contact

(c)         Profile

(d)         Marketing and Communications

Performance of a contract with you.

 

Necessary to comply with a legal obligation.

 

Necessary for our legitimate interests (to keep our records updated and to study how customers use our services)

To archive hard copy documents (a)          Identity Data

(b)         Contact Data

(c)         Special Categories of Personal Data

Performance of a contract with you.

 

Legal and regulatory obligation to retain data.

Oasis Storage Limited

Crown Records Management UK

Firm Infrastructure and Administration  
To administer and protect our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) (a) Identity

(b) Contact

(c) Technical

Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security and to prevent fraud).

 

Necessary to comply with a legal obligation.

 

Performance of a contract with you.

East Devon IT Limited

Callitech Limited (MoneyPenny)

To dispose of hard copy confidential waste (a)   Identity Data

(b)    Contact Data

(c)    Special Categories of Personal Data

Performance of a contract with you.

 

Scott Law
Marketing
To deliver relevant website content and advertisements and measure or understand the effectiveness of the advertising. (a) Identity

(b) Contact

(c) Profile

(d) Usage

(e) Marketing and Communications

(f) Technical

Necessary for our legitimate interests (to study how customers use our services, to develop them, to grow our business and to inform our marketing strategy).
To use data analytics to improve our website, services, marketing, customer relationships and experiences (a) Technical

(b) Usage

Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy). Retained Marketing Agency: McQueenie Mulholland (Exeter)
In relation to clients or former clients of Cartridges Law recorded on our system prior to 25th May 2018, who have not opted out of such communication:

 

to make suggestions and recommendations about services that may be of interest to them

(a) Identity

(b) Contact

(c) Technical

(d) Usage

(e) Profile

(f) Marketing and Communications

Necessary for our legitimate interests (to develop our services and grow our business). Mailchimp (The Rocket Science Group LLC) (based outside of the EU)

 

In relation to clients and former clients of Cartridges Law recorded on our system after 25th May 2018:

to make suggestions and recommendations about services that may be of interest to them

(a) Identity

(b) Contact

(c) Technical

(d) Usage

(e) Profile

(f) Marketing and Communications

Consent – obtained via the signed client care letter.
To send our newsletter and other marketing materials where you are not, nor ever have been, a client or former client of Cartridges Law. (a) Identity

(b) Contact

(c) Technical

(d) Usage

(e) Profile

(f) Marketing and Communications

Consent