We at Ballards LLP understand that your privacy is important to you and that you care about how your personal data is used and shared. We respect and value the privacy and will only collect and use personal data in ways that are described here, and in a manner that is consistent with our obligations and your rights under the law.
This website https://www.ballardsllp.com/ (“Our Site”) and will only collect and use personal data in ways that are described here, and in a manner that is consistent with our obligations and your rights under the law.
Ballards LLP is the controller for the personal information we process, unless otherwise stated. There are many ways you can contact us, including by phone, e-mail and post.
Our postal address:
11c Kingswood Road,
Hampton Lovett Droitwich,
Our phone number:
2. Data Protection Responsible Person
Our Data Protection Responsible Person is Ben Allman. You can contact him at [email protected] or via our postal address. Please mark the envelope “Data Protection Responsible Person”.
3. What personal information we process
Most of the personal information we process is provided to us directly by you for one of the following reasons:
• You have instructed us to act for your business, trust or act for you personally.
• You have made an information request to us.
• You wish to attend, or have attended, an event.
• You subscribe to our e-newsletter.
• You have applied for a job or secondment with us.
• You are representing your organisation.
We also receive personal information indirectly, in the following scenarios:
• We have contacted an organisation about your affairs, after gaining the appropriate consent from you.
• From public authorities, regulators or law enforcement bodies.
• An employee of ours gives your contact details as an emergency contact or a referee.
The information referred to will be necessary in order to fulfil one or more of the above reasons and can include, but is not restricted to:
• Business or personal address
• Associated contacts
• Family members
• Date of birth
• Employment history
• Telephone number
• E-mail address
• National insurance number
• Unique Taxpayer reference
• PAYE reference
• VAT number
• Bank and credit card details and transactions
• Income and expenditure details
• Names of suppliers and customers and transactions therewith
• Pension details
4. Why we process your data
We do so when one of the following applies:
• The data subject has given consent to the processing of their personal data for one or more specific purposes.
• The processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract with them.
• The processing is necessary for compliance with a legal obligation to which the data controller is subject.
• The processing is necessary to protect the vital interests of the data subject or of another natural person.
• The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
• The processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
5. Your Rights
Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.
• Your right of access:
You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
• Your right to rectification:
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
• Your right to erasure:
You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing:
You have the right to ask us to restrict the processing of your information in certain circumstances.
• Your right to object to processing:
You have the right to object to processing if we are able to process your information because the process forms part of our administration tasks or is in our legitimate interests.
• Your right to data portability:
This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.
We use third parties to support us in providing our services and to help provide, run and manage our internal IT systems. For example, providers of information technology, cloud- based software as a service providers, identity management, website hosting and management, data analysis, data back-up, security and storage services. The servers powering and facilitating that cloud infrastructure are located in secure data centres around the world, and personal data may be stored in any one of them. For instance, Xero accounting software may be used, where your permission to subscribe and use this service has been obtained.
If we are processing your information for criminal law enforcement purposes or other government and regulatory agencies or to other third parties as required by, and in accordance with, applicable law or regulation, your rights are slightly different. Occasionally, we may receive requests from third parties with authority to obtain disclosure of personal data, such as to check that we are complying with applicable law and regulation, to investigate an alleged crime, to establish, exercise or defend legal rights. We will only fulfil requests for personal data where we are permitted to do so in accordance with applicable law or regulation.
• Your rights with respect to automated decision-making and profiling:
Ballards LLP do not undertake either of these processes, as defined by Article 22 of Regulation (EU) 2016/679 (General Data Protection Regulation).
You are not required to pay any charge for exercising your rights, under normal circumstances. The Company reserves the right to charge reasonable fees for additional copies of information that has already been supplied to a data subject, and for requests that are manifestly unfounded or excessive, particularly where such requests are repetitive. We have one month to respond to you. Please contact us at [email protected] if you wish to make a request or contact us on 01905 794504.
If we are unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office.
For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens’ Advice Bureau.
6. Storage and retention of data
All personal data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. We will always comply with our obligations and safeguard your rights under the GDPR.
Our use of your personal data will always have a lawful basis, either because it is necessary for our performance of a contract with you, because you have consented to our use of your personal data (e.g. by subscribing to emails), or because it is in our legitimate interests.
We only keep your personal data for as long as we need to in order to use it as described above, and/or for as long as we have your permission to keep it.
Data security is very important to us, and to protect your data we have taken suitable measures to safeguard and secure all data collected.
7. How Can You Access Your Data?
You have the right to ask for a copy of any of your personal data held by us (where such data is held). Please contact us for more details using the contact details below in section 8. The Information Commissioner’s Office can provide further guidance on this at ico.org.uk
8. Contacting Us
If you have any questions about this Privacy Notice, please contact us by email at [email protected], by telephone on 01905 794 504, or by post at Oakmoore Court, 11c Kingswood Road, Hampton Lovett Droitwich, Worcestershire, WR9 0QH. Please ensure that your query is clear, particularly if it is a request for information about the data that we hold about you.
9. Changes to Our Privacy Notice