When we say 'Brodies', 'we' or 'us' in this statement, it means Brodies LLP. Brodies LLP is the 'controller' of your personal information.
We collect, use and store different types of personal information about you, which we have grouped together as follows:
| Types of personal information | Description |
| Publicly Available Data | Details about you that are publicly available, such as on Companies House or elsewhere on the internet |
| Marketing Data | Details about your preferences in receiving marketing communications from us and our third parties |
| Consents Data | Any permissions, consents or preferences that you give us |
| Usage Data | Information about how you use our website, products and services |
How we use your information
Cookies
Our website www.brodies.com uses cookies. For more information on our cookies use, please read our cookies statement.
Generally
The table below outlines how we use your personal information and our reasons. Where these reasons include legitimate interests, we explain what these legitimate interests are.
| What we use your information for | Our reasons | Our legitimate interests |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Where we collect your personal information from
We may collect personal information about you from the following sources:
- Directly from you
- Cookies – see our cookie statement
- Analytics providers, such as Google Analytics
- Advertising networks
Who we share your information with
We may share your personal information with the following third parties:
- Our agents and service providers who we use to help us with marketing and providing legal services, such as Workshare Limited (trading as Litera), Peppermint Technology, Microsoft, Aderant and Google Analytics
- Event organisers (if we are organising an external event which you are attending)
- The police and other law enforcement agencies
- Relevant regulators, including the Information Commissioner's Office in the event of a personal data breach
- (a) Subsidiaries or affiliates of Brodies LLP and/or (b) Brodies & Co (Trustees) Limited and any of its subsidiaries or affiliates
- Potential or actual purchasers of any part of our business or assets, or other third parties in the context of a possible transfer or restructuring of our business
How long we keep your personal information
Where we use your personal information for marketing purposes we will retain your personal information for so long as we have your consent to do so (where we use your personal information with your consent in order to send you marketing messages) or, in other cases, for so long as we have a legitimate business or commercial reason to do so (unless you ask us to stop).
Where you withdraw your consent to receiving marketing materials or otherwise ask us to stop marketing we will add your details to a suppression list which ensures that we remember not to contact you again.
For further information as to how to withdraw your consent or to ask us to stop other marketing activities see Withdrawing consent using your information and Objecting to how we may use your information in our privacy statement.
If you withdraw your consent to receiving marketing materials or ask us to stop our marketing activities, we will still communicate with you for other purposes in the normal course of any other relationship we may have with you.
International transfers
Some of the IT systems or services that we use are hosted or provided from outside the United Kingdom or may be supported by teams located outside the United Kingdom.
Where this is the case, we will usually use IT systems or services where personal information is hosted in or accessed only from countries or territories that are recognised under data protection law as providing an adequate level of protection for personal information (an approved destination) but we may process personal information in other countries or territories as well.
In all cases where we process personal information outside the United Kingdom or an approved destination then we will use appropriate safeguards in accordance with the requirements of data protection law, such as a contract with the recipient that requires them to protect that information to the same standards as if the information were being processed within the United Kingdom.
The safeguards we use will depend on the location of the recipient, the function they are performing and the personal information being transferred.
Complaints
We seek to resolve directly all complaints about how we handle personal information. If you have a complaint about how your personal information has been handled, please follow our complaints process outlined here.
In your complaint, please include your name and contact details, whether you are a client or not, the nature of the complaint and any relevant documents and background information to help us make appropriate enquiries. Please also tell us the outcome you are seeking. Please note that in appropriate cases, we may need to ask you to verify your identity as part of this process, especially if you are not an existing client.
If you submitted a complaint, we will acknowledge receipt of your complaint within 2 working days and provide you with a unique customer number to quote in future correspondence.
We aim to provide you with a substantive response to your complaint within 28 days of receiving all of the information we need to understand and investigate with your complaint. If we are unable to respond within 28 days we will advise you of this as soon as possible and explain why it has not been possible to respond within that timescale.
If you remain dissatisfied, you also have the right to lodge a complaint with the UK's Information Commissioner's Office:
- Online: https://ico.org.uk/make-a-complaint/
- By phone: 0303 123 1113
- By post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF