Castara Law is committed to keeping your information private. This Privacy Policy explains how we use any personal information we collect about you when you use this website.
The privacy and security of your personal information is very important to us. Any personal information submitted to us will be subject to the provisions of the Data Protection Act 2018 and UK General Data Protection Regulation.
We want to assure you that your information will be properly managed, protected and respected. You can be assured any information you provide us will be used strictly in accordance with the terms laid out in this statement.
This privacy statement explains how we collect and use your personal information, what choices you have and other important information.
When we refer to “you” or “your” in this statement, we are referring to the individual whose personal data may be processed by us (e.g. you may be a client, the insured or other person involved in a claim or transaction).
-
What Personal Data we May Collect about You?
In order to provide legal advice and/or deal with any claims or complaints, we need to collect and process personal data about You. If You do not provide the information we need, we may not be able to provide our services to You. The types of personal data that are processed may include:
|
Category
|
Types of Data collected
|
|
Individual details
|
Name, address (including proof of address), other contact details such as email address and phone number, gender, marital status, date and place of birth, nationality, marketing preferences, IP address, bank account details or payment card details, vehicle details, relevant criminal convictions, penalty points, employer, job title, passenger and family member details, including their relationship to You.
|
|
Identification details
|
Identification numbers issued by government bodies or agencies, including Your driving license number and photographs identifying You.
|
|
Special categories of personal data and criminal convictions data
|
Certain categories of personal data which have additional protection under data protection law. These categories are health and criminal convictions.
|
|
Claims information
|
Information about previous and current claims, (including other unrelated insurances), which may include data relating to Your health (e.g., injuries and relevant pre-existing conditions), relevant criminal convictions, or other special categories of personal data mentioned above.
|
-
The Purposes of, and Legal Basis for, the Processing of Your Personal Data
We hold, disclose and process Your personal data in order to provide you with legal advice in accordance with our engagement to provide you with advice and to take steps at Your request prior to entering into the engagement. This includes using Your personal data for:
- Initial consultation;
- Legal Advice;
- Progression of your legal case;
- Arrangement of any third party consultations or investigations;
- Clarifying the availability of before the event insurance
- Arrangement of after the event insurance
- Settlement of your legal case.
-
We may also use Your personal data where:
- it is necessary to comply with our legal and regulatory obligations (for example, complying with reporting obligations to the Financial Conduct Authority, National Crime Agency, The Law Society, Solicitors Regulation Authority or other applicable regulatory authorities)
- it is necessary to support our legitimate interests in managing our business, including in connection with (i) the administration of Your case, (ii) improving our services (iii) prevention and detection of crime, (iv) transferring books of business, company sales and reorganisations; (v) analytics, provided in each such instance, they are not overridden by Your interests and rights; and (vii) obtaining after the event insurance; and/or
- You have consented to processing Your information in such a way
-
Criminal Convictions
We may hold, use, disclose and process personal data relating to relevant criminal convictions and offences for the purposes identified above, where necessary to comply with our legal and regulatory obligations, or where necessary to support our legitimate interests. We will only carry out such processing where it is authorised by law.
-
Special Categories of Personal Data
We hold, use, disclose and process special categories of personal data (e.g. Your health data) where:
- You have given us Your explicit consent;
- the processing is necessary to protect Your, or another's vital interest;
- You have manifestly made Your personal data publicly available;
- the processing is necessary for the establishment, exercise or defence of legal claims; or
- necessary for reasons of substantial public interest on the basis of law
-
Who We Share Your Information with
In order to provide our services and to comply with legal obligations imposed on us, it may be necessary from time to time for us to disclose Your personal data to third parties, including without limitation to the following:
- With our agents, insurers and third parties who provide services to us, and Your insurer where you have insurance to help us administer our products and services;
- with regulatory bodies and law enforcement bodies (where we are required to do so to comply with a relevant legal and regulatory obligation);
- legal, financial, medical and other professional advisers;
-
Transfer of Personal Data outside the UK
The personal data we collect from You may be transferred to, and stored at a destination outside of the UK for purposes described above. These countries may not provide an adequate level of protection in relation to the processing of Your personal data. Due to the global nature of the company who own the servers that we utilise for our business, Your personal data may be disclosed outside the UK. However, to ensure that Your personal data receives an adequate level of protection we have ensured that the following appropriate safeguards are in place to protect the privacy and integrity of such personal data, such as the use of model clauses to ensure that any personal data leaving the UK will be transferred in compliance with UK data protection law.
-
How Long we Keep Your Personal Data
We are required to ensure that Your personal data, is accurate and maintained in a secure environment for a period of time no longer than necessary for the purposes for which we are processing Your personal data. Information submitted for an initial discussion where you did not proceed with a claim or utilise our legal services may be retained by us for a period of up to 6 years from the date of the initial discussion. Where You proceed with your instruction, information will be held for the duration of your file remaining active and a period of 6 years after the end of our relationship. We keep information after our relationship ends in order to comply with applicable laws and regulations and for use in connection with any subsequent legal claims.
-
Your Data Rights
You have several rights in relation to Your personal data. You have a right to:
- access a copy of Your personal data held by us;
- request rectification of Your personal data if it is inaccurate or incomplete;
- request erasure of Your personal data in certain circumstances;
- restrict our use of Your personal data in certain circumstances;
- move (or port) personal data which You have given us to process on the basis of Your consent or for automated processing;
- object to the processing of Your data where our legal basis for processing Your data is our legitimate interests; and
- not to be subject to a decision based on automated processing, including profiling which has legal or similar significant affects.
However, these rights may not be exercised in certain circumstances, such as when the processing of Your data is necessary to comply with a legal obligation or for the exercise or defence of legal claims. If You wish to exercise any of Your rights in this regard please contact us using the details in this policy. We will respond to Your request in writing, or orally if requested, as soon as practicable and in any event not more than one month after receipt of Your request. In exceptional cases, we may extend this period by two months, and if we do this we will tell you why. We may request proof of identification to verify Your request.
-
Consequences of Failure to Provide Information
If we or any of the parties detailed above cannot collect information requested from You, it may make it difficult, impossible, or unlawful for us to give You advice on, provide You with, and administer our legal services.If we or any of the parties listed above ask for information and You do not wish to give it to us, or if You wish to withdraw consent to the use of Your personal data, we will explain the consequences based on the specific information concerned including whether it is a legal or contractual requirement that we use such data. If You have any queries in respect of the consequences of not providing information or withdrawing Your consent, please contact us using the details in Section 10.
-
Further Information
If You require any further information about how we use Your data or if You want to exercise any of Your rights under this Privacy Policy, please contact us using the details below:
Castara Law Limited, a company registered in England and Wales under company number 05987227. Authorised and Regulated by the SRA under number 448916.
-
Your Right to Complain to the ICO
If You are not satisfied with our use of Your personal data or our response to any request by You to exercise any of Your rights in Section 8, You have the right to lodge a complaint with the Information Commissioner’s Office. Please see below contact details: