Privacy Notice

Lighthouse Law takes data privacy seriously and we are committed to safeguarding the privacy of personal information. This Privacy notice explains how we may collect and use information that we obtain about you, and your rights in relation to that information. By providing your personal data to us (whether via our website, by email, in person or over the phone), you agree to the processing set out in this Privacy notice.

THE SCOPE OF THIS PRIVACY NOTICE

This Privacy notice applies in the following circumstances:

  • When you visit our website

  • When we provide legal services to you or the organisation you work for

  • When you request information from us or provide information to us

  • When you apply for a role or work experience opportunity

  • When we conduct open source searches on you in connection with our business development or business acceptance processes

COOKIES

We use cookies on our website. This Privacy notice should be read alongside our Cookies notice.

HOW WE COLLECT INFORMATION

We may collect and process different types of personal data in the course of operating our business and providing our services. These include:

  • Where you provide it to us directly, for example by corresponding with us by email

  • Through website usage, including technical data such as the details of your visits and logs (including, the internet protocol (IP) address and location of the device connecting to the online services and other identifiers about the device and the nature of the visit) and the resources accessed

  • Personal data provided to us by or on behalf of our clients or generated by us in the course of providing our services

  • Personal data provided by third parties such as: regulatory authorities, your employer, other organisations with whom you have dealings, government agencies, credit reporting agencies, and publicly available records

  • Recruitment related data such as your curriculum vitae, your education and employment history, details of professional memberships and other information relevant to potential recruitment to Lighthouse Law

  • Identification and other background verification data such as a copy of identity documents, passports or utility bills or evidence as part of our client acceptance and ongoing monitoring procedures

  • Publicly available sources - we may, for example, use such sources to help us keep the contact details we already hold for you accurate and up to date or for professional networking purposes, e.g. LinkedIn

 TYPES OF INFORMATION COLLECTED

  • Basic personal details such as your name, job title and contact details (such as your postal address, email address and phone number)

  • Financial data such as payment related information or bank account details

  • Employment history and business interests

  • Any other personal data relating to you that you may provide.

USE OF YOUR INFORMATION

We will only use your personal data where we are permitted to do so by applicable law. The principal legal grounds that justify our use of your personal data are:

  • Contract performance: where your information is necessary to enter into or perform our contract with you or the organisation you work for.

  • Consent: where you have consented to our use of your information (where necessary) to such use or the organisation that you work for has obtained your consent (where necessary)

  • Legal obligation: where we need to use your information to comply with our legal obligations.

  • Legal claims: where your information is necessary for us to defend, prosecute or make a claim against you, us or a third party.

  • Legitimate interests: where we use your information to achieve a legitimate interest which is not overridden by your interests or your rights and freedoms

Examples of how we may use your information include the following:

  • To provide our legal and other services and products to you or the organisation you work for (including auditing and monitoring use of those services and products)

  • To facilitate use of our website and to ensure content is relevant, respond to requests for information or enquiries from visitors. To ensure that content from our website is presented in the most effective manner for you and for your device

  • For marketing and business development purposes, including providing you with details of new services, legal updates and invites to seminars and events where you have chosen to receive these. We will provide an option to unsubscribe or opt-out of further communication on any electronic marketing communication sent to you

  • For recruitment purposes, enabling us to process applications for employment submitted to us, and assess your suitability for any position for which you may apply

  • To fulfil our legal, regulatory, or risk management or professional obligations

  • To facilitate our internal business operations

We will only retain your personal information for as long as is necessary for the purpose for which it was collected, including for the purposes of complying with any legal, regulatory, accounting or reporting requirements.

DISCLOSURE OF YOUR INFORMATION

We may share your personal information with third parties where:

  • you have consented to us doing so (where necessary) or the organisation that you work for has obtained your consent for us to do so (where necessary);

  • we are under a legal, regulatory or professional obligation to do so (for example, to comply with anti-money laundering or sanctions requirements);

  • it is necessary for the purpose of, or in connection with, legal proceedings or in order to exercise or defend legal rights;

  • it is in our or a third party’s legitimate interest to share the information, and that legitimate interest is not overridden by your rights or freedoms; or

Some of your personal information may be stored with, and managed by, a cloud service provider located in a different country to the Lighthouse Law office.

SECURITY

We recognise that information security is an integral element of data privacy. We use up to date data storage and security to hold your personal information securely in electronic and physical form and to prevent unauthorised access, modification or disclosure. Our information security policy is supported by a number of security standards, processes and procedures and we store information in access controlled premises or in electronic databases requiring logins and passwords. We require our third party data storage providers to comply with appropriate information security industry standards. All partners and staff and third party providers with access to confidential information are subject to confidentiality obligations.

The transmission of information via the internet is not completely secure. Although we take appropriate and proportionate steps to manage the risks posed, we cannot guarantee the security of your information transmitted to our online services.

THIRD PARTY SITES

Our Website may contain links to other sites which are controlled by third parties. Visitors should consult these other sites' privacy policies and please be aware that we do not accept responsibility for their use of information about you.

YOUR RIGHTS

You have certain rights that you can exercise under certain circumstances in relation to the personal information that we hold, subject to the privacy laws of your jurisdiction. These rights may include:

·        requesting access to your personal information

·        requesting rectification or erasure of your personal information;

·        objecting to the processing of your personal information.

In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.  Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

PROMOTION OF ACCESS TO INFORMATION ACT 2 OF 2000 (“PAIA”)

PAIA gives you the right to access information that is required to exercise or protect your rights. In terms of PAIA, before access to the information requested by persons is granted, specific requirements have to be met. PAIA also requires private bodies such as GSA to compile a manual designed to assist persons who want to exercise their right to access information. You or third parties may also request access to your personal information held by GSA. PAIA regulates and sets out the procedure for such a request and under what circumstances such access may be refused. Please contact us should you require our PAIA manual. You can access the PAIA forms here:

STATUS OF THIS POLICY

We review this Privacy notice regularly and may revise it from time to time. We therefore encourage you to review the notice when you visit the website to stay informed of how we are using personal data.

CONTACT AND FURTHER INFORMATION

If you have any questions about this Privacy notice please email us at: hello@lighthouse.law

Last updated: Oct 2023