Privacy policy

Penningtons Manches Cooper LLP is committed to protecting and respecting your privacy. This policy, together with our cookie policy and any other documents referred to in it), sets out the basis on which any personal information that we collect about you will be processed. Reference to Penningtons Manches Cooper LLP, or ‘we’ / ‘our’ / ‘us’, should be taken to include reference to all subsidiaries of Penningtons Manches Cooper LLP practising in the UK and overseas.

This policy applies to all personal information we collect when you interact with us including when you engage our legal or other services, when we refer work to you or you refer work to us, when you make an enquiry or request information from us or as a result of your relationship with our clients or staff. This policy also applies to information we collect through your use of this website www.penningtonslaw.com and any other online service created or hosted by us on which the privacy policy appears. If you engage us to carry out work for you, we will have client confidentiality obligations to you, as set out in our Terms of Business and our letter of engagement to you. If you apply for a job or placement with us the provisions of our privacy policy for candidates will apply and can be viewed here. If you have a working relationship with us the provisions of our fair processing notice for partners, employees, workers and contractors will apply.

Please read the following carefully to understand how we will treat your personal information.

  • About us

    Penningtons Manches Cooper LLP (‘we’ / ‘our’ / ‘us’) is a limited liability partnership registered in England and Wales (Registered No. OC311575) and is authorised and regulated by the Solicitors Regulation Authority. References to ‘partner’ include members and employees/consultants of equivalent standing within the LLP and its associated undertakings or businesses operating overseas.  A list of the members is open to inspection at its registered office, 125 Wood Street, London, EC2V 7AW.

    We own and operate the following:

    • Penntrust Limited (a private limited company registered in England and Wales (05710616) whose registered office is at 125 Wood Street, London, EC2V 7AW.
    • Penningtons Insurance Limited (a private limited company registered in Guernsey (1-26685) whose registered address is PO Box 33, Dorey Court, Admiral Park, St. Peter Port, Guernsey, GY1 4AT.
    • Bateson & Partners Law Firm (a Greek partnership trading under the name of Penningtons Manches Cooper Greece which is regulated by the Athens Bar Association under the number 80788) whose registered office is 4 Zalagou Street,153 43 Athens, Greece.
    • Penningtons Manches Cooper (Singapore) LLP (a limited liability partnership registered in England and Wales (OC383589) whose registered office is Ibex House, 42 - 47 Minories, London EC3N 1HA, UK.
    • Thomas Cooper LLP (a limited liability partnership registered in England and Wales (OC383641) whose registered office is Ibex House, 42 - 47 Minories, London EC3N 1HA, UK.

    This privacy notice is issued on behalf of all the entities referred to in the paragraph above. Unless we inform you otherwise the relevant entity processing your data will be Penningtons Manches Cooper LLP and Penningtons Manches Cooper LLP is the data controller in respect of your personal information.

  • What information we collect and how we will use it

    We collect personal information so that we can operate effectively and provide you with the best possible service. The information we collect depends on how you interact with our website and how you use our services. It also depends on the choices you make, for example the website functions you use and your privacy settings. You may choose not to provide certain information but if you do, and that information is necessary to provide a particular feature, then you may not be able to use that feature. We will only use your personal information where we have a lawful basis to do so.

    The tables below summarises what information we collect about you, explains how we intend to use it and what our legal basis is for using it. Click on the links below to take you to the section which is relevant to you:

    In the tables, the following types of information include:

    • Identity information includes name, title, nationality, position, company or organisation and user log-ins.
    • Contact information includes postal addresses, email addresses and telephone numbers.
    • Financial information includes bank account details, payment information, mortgage information, personal financial details and insurance information
    • Employment information includes employment history, National Insurance number, salary and benefits details.
    • Client Due Diligence Information includes name, address, date of birth, nationality, your image and all other details held within identification and address verification documents; records of political exposure, adverse media, sanction designations and all such information obtained by us for the purpose of meeting our Client Due Diligence obligations
    • Special category information includes race or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, biometric data, health and medical records, sex life or sexual orientation.

  • Sharing your information

    We may, in providing our services and operating our businesses, share your personal information with other Penningtons Manches Cooper entities. We may also share your personal information with third parties where:

    • you have consented to us sharing your personal information in this way;
    • we are under a legal, professional or regulatory obligation to do so (such as to comply with money laundering requirements);
    • it is necessary in order to apply or enforce our Terms of Business or where we have another legitimate interest in doing so that is not overridden by your interests and fundamental rights. For example, to protect our clients or to operate and maintain the security of our computer systems.

    We use third party service providers to support us in the performance of the activities set out in the table above including:

    • our professional advisors, professional indemnity insurers, bankers and auditors;
    • third parties engaged in relation to client matters on which we are instructed such as barristers, foreign agents and lawyers (including those within the Multilaw global network of law firms), process servers, translators, transcribers and providers of data rooms and other technical solutions; suppliers of financial services including our bankers, credit card processors, debt collection, insurers, litigation funders, and credit reference agencies;
    • we use a third party service provider to provide services that involve data processing including Williams Lea to whom we outsource our personal assistant, document production, facilities and reception requirements. We also use third party organisations to provide services such as telephony services and archiving;
    • suppliers and consultants to whom we outsource IT services and technical solutions and which host our online job application system.

    Further information on how client information may be shared and processed can be found in our Terms of Business. If you require further information regarding the identity of other third party service providers we use, please e-mail data@penningtonslaw.com or contact our Data Protection Officer at our Basingstoke office.

    We may also share your personal information with other third parties, for example in the context of the possible sale or restructuring of the business. We may also need to share your personal information with a regulator or otherwise to comply with the law.

    We require all our third party service providers to take appropriate and stringent security measures to protect your personal information in line with our policies. We do not allow our third party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes in accordance with our instructions.

    In the course of providing our services and operating our business, it may be necessary for us to share personal information with our overseas offices, some of which are outside the UK and European Economic Area (EEA).

    The level of protection in countries outside the UK and EEA may be less than that offered within the UK or EEA. To ensure that your personal information receives an adequate level of protection, we have put in place appropriate measures to ensure that your personal information is treated by those third parties in a way that is consistent with and which respects the EU and UK laws on data protection. Where our third party service providers process personal data outside the UK or EEA in the course of providing services to us, our contractual arrangements with these will include appropriate measures to meet UK or EU-approved data protection obligations, usually standard contractual clauses. If you require further information about these protective measures, please e-mail data@penningtonslaw.com or contact our Data Protection Officer at our Basingstoke office.

  • Storing your information

    We will only retain your personal information for as long as is necessary to fulfil the purposes we collected it for or for as long as we have a lawful basis to retain it.

    How long do we retain your personal data?

    Your personal information will be retained in accordance with our data retention policy which categorises the information we hold and provides appropriate retention periods each category, based on the purpose for which the information is processed and taking into account legal and regulatory requirements, limitation periods for taking legal action, good practice and business requirements. For example, for legal reasons we may need to retain some of your personal information for 15 years (or 25 years where minors or disabilities are involved) after you engaged our services. In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. If you require further information regarding our data retention policy please e-mail data@penningtonslaw.com

    Client due diligence information will be retained for five years from the conclusion of our business relationship with you, unless there is legitimate reason to retain it for a further five years.

  • Children's information

    If you become aware that your child or any child under your care has provided us with information without your consent please contact us at data@penningtonslaw.com.

  • Keeping your information secure

    All information that you provide to us is stored on secure servers. We have put in place appropriate measures to protect the security of your information.

    The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of the information transmitted to our site and you acknowledge that any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access or inadvertent disclosure.

    You are responsible for keeping confidential any passwords that you have to access our services (such as our extranets). Please do not share your password(s) with anyone else. If you lose control of your password you may lose control over your personal information. If your password has been compromised for any reason please let us know immediately by contacting us at: data@penningtonslaw.com.

    Keeping your information secure

  • Your rights

    You have the right under data protection laws to access information held about you, subject to certain conditions, and to request its rectification or deletion.

    You can see, review and update your marketing preferences via our website. Alternatively, or if you would like to access, update or amend any other information which we hold about you or would like us to stop using your personal information please contact data@penningtonslaw.com.

    Your rights

  • Marketing

    We would like to send you information about legal updates, client seminars and similar events which may be of interest to you (including, for example promotional materials and newsletters). We will do this if we have a lawful basis for doing so in compliance with relevant privacy law (see Marketing and business development above) or if you consented to us doing so (for example, when you registered via our website or instructed us). For a link to the subscription form we use when seeking such consent click here.

    You have the right at any time to stop us from contacting you for marketing purposes or giving your information to other members of our group. If you no longer wish to be contacted for marketing purposes, you can unsubscribe by using the “unsubscribe” link at the bottom of our marketing messages or by emailing data@penningtonslaw.com. You can also update your marketing preferences.

  • Other websites

    We use and provide links to websites which are controlled by third parties and these include the following:

    • Online recruitment portal
    • Facebook where we have a social page
    • Twitter, LinkedIn and Youtube where we have Penningtons Manches Cooper accounts and profiles.

    If you use or follow a link to any of these third party websites you should be aware that these websites have their own privacy policies and we cannot accept responsibility for their use of your information.

  • Changes to this privacy policy

    We keep our privacy policy under regular review and will post any updates on this webpage. This privacy policy was last updated in May 2023.

    To learn more about what’s new see our website or contact our Data Protection Officer at our Basingstoke office.

    In May 2018 we published a new privacy statement to improve usability and increase clarity and transparency.

    In August 2019 we amended this policy to take into account the acquisition of Thomas Cooper LLP and its overseas offices.

    In May 2020 we amended this policy to clarify how we process Client Due Diligence Information. 

    In May 2023 we updated the details of our Greek Partnership and the provisions on international transfers of personal data.

  • How to contact us and complaints

    Penningtons Manches Cooper LLP (registered number OC311575) is the data controller in respect of your personal information. Penningtons Manches Cooper LLP's registered office is at 125 Wood Street, London EC2V 7AW.

    We have appointed a data protection officer to oversee compliance with this privacy policy. If you have any questions about this privacy policy, or how we handle your personal information, please contact our Data Protection Officer at / 01256 407100 / Matrix House, Basing View, Basingstoke, Hampshire, RG21 4DZ or by emailing data@penningtonslaw.com.

    If for any reason you are not happy with the way that we have handled your personal information, please contact us at data@penningtonslaw.com or contact our Data Protection Officer at our Basingstoke office. If you are still not happy, you have the right to make a make a complaint to the Information Commissioner's Office see: https://ico.org.uk/global/contact-us/.

In this section

Provision of legal and other services

Why are we processing personal information about you? What personal information will we collect about you? How will we collect personal information? Legal basis for processing
To enable us to provide legal or other services to you or your organisation

Identity information

Contact information

Financial information

Other personal information you provide to us concerning your business and/or personal interests

We may collect additional categories of personal information (including special category personal information) if relevant to the particular type of legal services we are providing. For further information see the relevant section:

Collected by us through our provision of legal or other services to you or the organisation you represent including:

  • information provided by you when you:
    • contact us (including by email, telephone, post, fax, SMS or other messaging service or in person)
    • complete our online enquiry or publications request form via our website
    • sign up for or attend one of our events or meet us at external events or provide us with your business card; and
    • information received from third parties (including when they refer you to us).
  • information received from third parties including:
    • when they refer you to us
    • other parties to matters on which we are instructed (and such other parties' advisers, experts and witnesses) and
  • information collected by us from:
    • extranets and data rooms either hosted by us or our clients
    • publicly available information about you or your organisation

Necessary for the performance of a contract with you or your organisation
To carry out necessary identity checks before providing legal or other services (to comply with anti-money laundering legislation and to prevent fraud).

Identity information

Contact information

Financial information

ID documentation (including but not limited to passports, driving licences and utility bills)

Signatures

Collected by us through our provision of legal or other services to you or the organisation you represent including:

  • information provided by you when instructing us;
  • information received from third parties (including when they refer you to us); and
  • information collected by us through searches via Equifax, Credit safe UK Limited and Companies House.

Necessary steps prior to entering into a contract with you

Necessary to comply with our legal obligations
To enable us to provide legal or other services to our clients

Identity information

Contact information

Financial information

Other personal information you provide to us concerning your business and/or personal interests

Collected by us through our provision of legal or other services to our clients including:

  • information received from you including:
    • when you refer clients to us
    • when you are the other party to a matter on which we are instructed
    • when you are the adviser, expert or witness to the other party to a matter on which we are instructed and
  • information collected by us from:
    • extranets and data rooms either hosted by us or our clients
    • publicly available information about you or your business interests
 To enable us to pursue our legitimate interest to deliver legal or other services to our clients

Legal services to individuals

(including advice relating to clinical negligence claims, Court of Protection and deputyships, family law, holiday accident claims, immigration law, personal injury claims, residential property and conveyancing, tax law and wills and probate). For employment and pension matters click here.

Why are we processing personal information about you? What personal information will we collect about you? How will we collect personal information? Legal basis for processing

To enable us to provide legal services to individuals

Personal information that is relevant to a matter on which we are instructed including (where relevant):

  • employment information
  • education and qualification information
  • date of birth
  • family information (including information regarding adoption, surrogacy, marriage, divorce, details of family and dependants, and child settlement arrangements)
  • immigration and travel information
  • wills and inheritance information
  • CCTV footage
  • photographs
  • transcripts
  • other personal information you provide to us concerning your business or personal interests

Collected by us through our provision of legal or other services to you including:

  • information provided by you
  • information received from third parties including
    • when they refer you to us
    • other parties to matters on which we are instructed (and such other parties' advisers, experts and witnesses) and
  • information collected by us from
    • extranets and data rooms either hosted by us or our clients
    • publicly available information about you or your business interests

Necessary for the performance of a contract with you

In addition, we may collect the special category information if relevant to a matter on which we are instructed including:

  • race or ethnic origin;
  • religious or philosophical beliefs;
  • biometric data;
  • health and medical records; and
  • sex life or sexual orientation. 
 Provided by you and/or received from third parties in anticipation of, or during the course of, providing legal services (including other professionals when they refer you to us) Necessary for the establishment, exercise or defence of legal claims
Collected by us in the course of providing legal services where information has already been disclosed in court or public documents by you, or at the request of or on behalf of you Processing relates to personal data which are manifestly made public by the data subject
In addition we may process personal information relating to criminal convictions where permitted by law Provided by you and/or third parties in anticipation of, or during the course of, providing legal services (including other professionals when they refer you to us) Necessary for the establishment, exercise or defence of legal claims

Legal services to businesses

(including advice relating to banking and finance, commercial, company secretarial, construction, corporate, corporate tax, data protection and privacy, intellectual property, IT & telecommunications, professional regulation, real estate, regulatory compliance, restructuring and insolvency, and travel. For employment and pension matters click here. For commercial dispute resolution click here).

Why are we processing personal information about you? What personal information will we collect about you? How will we collect personal information? Legal basis for processing
To enable us to provide legal services to your business

Personal information that is relevant to a matter on which we are instructed including:

  • date of birth
  • employment information
  • immigration and travel information
  • information regarding family and dependants
  • other personal information you provide to us concerning your business or personal interests

The following information may be collected specifically for Companies House filings and incorporations:

  • mother’s maiden name
  • father’s first name
  • eye colour

Collected by us through our provision of legal or other services to you or the organisation you represent including:

  • information provided by you
  • information received from third parties including
    • when they refer you to us
    • other parties to matters on which we are instructed (and such other parties' advisers, experts and witnesses) and
  • information collected by us from:
    • extranets and data rooms either hosted by us or our clients
    • publicly available information about you or your business interests

Necessary for the performance of a contract with you or your business

In addition, we may collect the following special categories of information if relevant to a matter on which we are instructed including:

  • health and medical records
  • race/ethnic origin
  • religious or philosophical beliefs
 Provided by you in the course of instructing us

Your consent

Necessary for the establishment, exercise or defence of legal claims
Collected by us in the course of providing legal services where information has already been disclosed in court or public documents by you, or at the request of or on behalf of you Processing relates to personal data which are manifestly made public by the data subject

Legal services relating to commercial dispute resolution

Why are we processing personal information about you? What personal information will we collect about you? How will we collect personal information? Legal basis for processing
To enable us to provide legal services relating to commercial dispute resolution

Personal information that is relevant to a matter on which we are instructed including:

  • date of birth
  • employment information
  • CCTV footage
  • photographs
  • transcripts
  • other personal information you provide to us concerning your business or personal interest

Collected by us through our provision of legal or other services to you or the organisation you represent including:

  • information provided by you
  • information received from third parties including
    • when they refer you to us
    • other parties to matters on which we are instructed (and such other parties' advisers, experts and witnesses) and
  • information collected by us from:
    • extranets and data rooms either hosted by us or our clients
    • publicly available information about you or your business interests

Necessary for the performance of a contract with you or your organisation

In addition, we may collect the following special categories of information if relevant to a litigation matter on which we are instructed including:

  • health and medical records
  • race/ethnic origin
 Provided by you and/or third parties in anticipation of, or during the course of, providing legal services (including other professionals when they refer you to us) Necessary for the establishment, exercise or defence of legal claims

Collected by us in the course of providing legal services where information has already been disclosed in court or public documents by you, or at the request of or on behalf of you

 Processing relates to personal data which are manifestly made public by the data subject
In addition we may process personal information relating to criminal convictions where permitted by law and necessary for the establishment, exercise or defence of a legal claim  Provided by you and/or third parties in circumstances where litigation is contemplated (including other professionals when they refer you to us) Necessary for the establishment, exercise or defence of legal claims

Legal services relevant to charities

Why are we processing personal information about you? What personal information will we collect about you? How will we collect personal information? Legal basis for processing
To enable us to provide legal services on charity matters

Personal information that is relevant to a matter on which we are instructed including:

  • date of birth
  • information regarding family and dependents
  • other personal information you provide to us concerning your business or personal interest

Collected by us through our provision of legal or other services to you or the organisation you represent including:

  • information provided by you; and
  • information received from third parties including
    • when they refer you to us
    • other parties to matters on which we are instructed (and such other parties' advisers, experts and witnesses)
  • information collected by us from:
    • extranets and data rooms either hosted by us or our clients
    • publicly available information about you or your business interests

Necessary for the performance of a contract with you

In addition, we may collect the following special categories of information if relevant to a matter on which we are instructed including:

  • health and medical records
  • trade union membership
  • political opinions
  • race/ethnic origin
  • religious or philosophical beliefs
  • sex life/sexual orientation
 Provided by you in the course of instructing us

Your consent

Necessary for the establishment, exercise or defence of legal claims
Collected by us in the course of providing legal services where information has already been disclosed in court or public documents by you, or at the request of or on behalf of you Processing relates to personal data which are manifestly made public by the data subject
In addition we may process personal information relating to criminal convictions where permitted by law and necessary for the establishment, exercise or defence of a legal claim Provided by you and/or third parties in circumstances where litigation is contemplated (including other professionals when they refer you to us) Necessary for the establishment, exercise or defence of legal claims

Legal services relating to employment and pension matters

Why are we processing personal information about you? What personal information will we collect about you? How will we collect personal information? Legal basis for processing
To enable us to provide legal services on employment or pension matters

Personal information that is relevant to a matter on which we are instructed including:

  • date of birth
  • education and qualifications information
  • employment information
  • pension arrangements
  • insurance information
  • information regarding family and dependants
  • wills and inheritance information
  • CCTV footage
  • photographs
  • transcripts
  • other personal information which you may volunteer

Collected by us through our provision of legal or other services to you or the organisation you represent including:

  • information provided by you;
  • information received from third parties including
    • when they refer you to us
    • other parties to matters on which we are instructed on (and such other parties' advisers, experts and witnesses) and
  • information collected by us from:
    • extranets and data rooms either hosted by us or our clients
    • publicly available information about you or your business interests

Necessary for the performance of a contract with you or your organisation

In addition, we may process the following special categories of information if relevant to an employment or pensions matter on which we are instructed including:

  • health and medical records
  • sex life/sexual orientation
  • race/ethnic origin
  • religious or philosophical beliefs
  • biometric data

Provided by you and/or third parties in anticipation of, or during the course of, providing legal services (including other professionals when they refer you to us)

 Necessary for the establishment, exercise or defence of legal claims
Collected by us in the course of providing legal services where information has already been disclosed in court or public documents by you, or at the request of or on behalf of you Processing relates to personal data which are manifestly made public by the data subject
In addition we may process personal information relating to criminal convictions where permitted by law and necessary for the establishment, exercise or defence of a legal claim 

Provided by you and/or third parties in circumstances where litigation is contemplated (including other legal professionals when they refer you to us)

 Necessary for the establishment, exercise or defence of legal claims

✖ Close

Response to enquiries and requests for information

Why are we processing personal information about you? What personal information will we collect about you? How will we collect personal information? Legal basis for processing
To deal with enquiries, correspondence or complaints

Identity information

Contact information

Any other personal information you provide to us relevant to the enquiry or issue raised

Collected by us in the course of dealing with enquiries or other requests made by you or the organisation you represent including:

  • information provided by you when you:
    • contact us (including by email, telephone, post, fax, SMS or other messaging service or in person)
    • complete our online enquiry or publications request form via our website
    • sign up for or attend one of our events or meet us at external events or provide us with your business card;
  • information received from third parties (including other professionals when they refer you to us)
  • information collected by us in the course of providing our services (including information collected by us from publicly available information about you or your organisation)

To enable us to pursue our legitimate interests to: provide information or services requested; or to deal with complaints
To decide if someone else can assist with your enquiry (including experts, advisers and suppliers)

Identity information

Contact information

Any other personal information you provide to us relevant to the enquiry or issue raised

Collected by us in the course of dealing with enquiries or other requests made by you or the organisation you represent including:

  • information provided by you when you:
    • contact us (including by email, telephone, post, fax, SMS or other messaging service or in person)
    • complete our online enquiry or publications request form via our website
    • sign up for or attend one of our events or meet us at external events or provide us with your business card;
  • information received from third parties (including other professionals when they refer you to us)
  • information collected by us in the course of providing our services (including information collected by us from publicly available information about you or your organisation)
 To enable us to pursue our legitimate interests to: provide information or services requested

✖ Close

Organisation of meetings, seminars and other hosted events

Why are we processing personal information about you? What personal information will we collect about you? How will we collect personal information? Legal basis for processing
To enable us to host a meeting, seminar or other event

Identity information

Contact information

Provided by you when you:

  • contact us (including by email, telephone, post, fax, SMS or other messaging service or in person)
  • complete our online enquiry or publications request form via our website
  • sign up for or attend one of our events or meet us at external events or provide us with your business card;

Received from third parties (including other professionals when they refer you to us)

Necessary for the performance of a contract with you

To enable us to pursue our legitimate interest to deliver legal or other services requested
Where you provide it to us, information about your dietary requirements and allergies Provided by you

Your consent

To enable us to pursue our legitimate interest to provide catering at meetings, seminars or other events
Images captured by our offices’ CCTV Images captured when you visit our offices To enable us to pursue our legitimate interest to maintain the safety and security of our premises

✖ Close

Operation of our business

Why are we processing personal information about you? What personal information will we collect about you? How will we collect personal information? Legal basis for processing

To manage our relationship with you or your organisation and to exercise our contractual rights and meet our contractual obligations

Identity information

Contact information

Other personal information you provide to us concerning your business and personal interests

Details of your attendance at meetings or other events we host

Through our provision of legal services to you or the organisation you represent (for further information see Provision of legal and other services above)

Collected by us in the course of dealing with enquiries or other requests raised by you or the organisation you represent (for further information see Response to enquiries and requests for information above)

Collected by us in the course of arranging a meeting or other event (for further information see Organisation of meetings, seminars and other hosted events above)

To enable us to pursue our legitimate interest to manage our business relationships

Necessary for the performance of a contract with you

To enable us to run our business in an efficient and proper manner including to:

  • carry out data analysis
  • manage our financial position and business capability
  • manage risk
  • meet our professional obligations

Identity information

Contact information

Financial information

Other personal information you provide to us concerning your business and personal interests

Details of your attendance at meetings or other events we host

Through our provision of legal services to you or the organisation you represent (for further information see Provision of legal and other services above)

Collected by us in the course of dealing with enquiries or other requests raised by you or the organisation you represent (for further information see Response to enquiries and requests for information above)

Collected by us in the course of arranging a meeting or other event (for further information see Organisation of meetings, seminars and other hosted events above)

 To enable us to pursue our legitimate interest to run our business in an efficient and proper manner
To comply with our legal and regulatory obligations

Client due diligence information

Identity information

Contact information

Financial information

Other personal information you provide to us concerning your business and personal interests

Provided by you or on your behalf, or obtained by us from third parties and online resources, including online identity verification service providers and credit reference agencies.

Through our provision of legal services to you or the organisation you represent (for further information see Provision of legal and other services above)

Collected by us in the course of dealing with enquiries or other requests raised by you or the organisation you represent (for further information see Response to enquiries and requests for information above)

Collected by us in the course of arranging a meeting or other event (for further information see Organisation of meetings, seminars and other hosted events above)

 To comply with our legal and regulatory obligations

✖ Close

Engagement of experts, advisers, and suppliers

Why are we processing personal information about you? What personal information will we collect about you? How will we collect personal information? Legal basis for processing
To maintain details of preferred partners (including experts, advisers and suppliers)

Identity information

Contact information

Financial information

Other relevant information including:

  • nature of the services provided or area of expertise
  • professional qualifications
  • languages spoken
  • details of previous services provided
  • other information you provide to us regarding your personal or business interests

Provided by you when we instruct you to provide a service

Provided by you when you introduce yourself to us for future work

Provided by other professionals, agencies or other bodies when they recommend you to us

Collected by us in the course of providing our services (including information collected by us from publicly available information about you or your organisation)

Necessary for the performance of a contract with you

To enable us to pursue our legitimate interest to deliver legal or other services requested
To instruct the services of a partner (including experts, advisers and suppliers)

Identity information

Contact information

Financial information

Other relevant information including:

  • nature of the services provided or area of expertise
  • professional qualifications
  • languages spoken
  • details of previous services provided
  • other information you provide to us regarding your personal or business interests

Provided by you when we instruct you to provide a service

Provided by you when you introduce yourself to us for future work

Provided by other professionals, agencies or other bodies when they recommend you to us

Collected by us in the course of providing our services (including information collected by us from publicly available information about you or your organisation)

Necessary for the performance of a contract with you

To enable us to pursue our legitimate interest to deliver legal or other services requested

✖ Close

Marketing and business development

Why are we processing personal information about you? What personal information will we collect about you? How will we collect personal information? Legal basis for processing
Where you have provided consent, to send you marketing communications, newsletters, information about events and legal updates that may be of interest to you (for further information see Marketing below)

Identity information

Contact information

Where provided by you, your areas of interest

Provided by you when you complete our subscription form.

Your consent (for further information see Marketing below)
To send our clients, unless they have opted out, marketing communications, newsletters, information about events and legal updates. Where we are using a personal email address (or our client is a sole trader or a partner in a partnership that is not a limited company or a limited liability partnership (LLP)) we will only send information relating to similar services to those provided to such clients in the past.

Identity information

Contact information

Where provided by you, your areas of interest

 Collected by us in the course of providing or negotiating the provision of services to you (for further information see Provision of legal and other services above) To enable us to pursue our legitimate interest to maintain contact with our clients and to grow our business (for further information see Marketing below).
To keep records and maintain contact with clients and third party contacts in order to grow our business

Identity information

Contact information

Where provided by you, your areas of interest

Provided by you when we instruct you to provide a service

Provided by you when you introduce yourself to us for future work

Provided by other professionals, agencies or other bodies when they recommend you to us

Collected by us in the course of providing our services (including information collected by us from publicly available information about you or your organisation)

 To enable us to pursue our legitimate interest to maintain contact with our clients and third party contacts and to grow our business

✖ Close

Use of our website

You do not need to provide us with any information in order to access most of our website. We collect information you provide to us via our website, for example when you make an online enquiry. How we use it depends on the context. Click on the following links for further information on how we process information obtained via the website in the following circumstances:

We also collect some information automatically when you use our websites. Further information is set out in the table below.

Why are we processing personal information about you? What personal information will we collect about you? How will we collect personal information? Legal basis for processing
To ensure that the content on our website is presented in the most effective manner for you and for your device

Device and usage data (including IP addresses and device identifiers)

Device event information (including crash logs, hardware settings, browser type and browser language)

Location information

Automatically collected and stored in our server logs when you interact with our website

To enable us to pursue our legitimate interest to present our website in the most effective way
Cookies and similar technologies For further information see our use of cookies Your consent
For our internal operations, including analysis of the traffic to our website

Device and usage data (including IP addresses and device identifiers)

Device event information (including crash logs, hardware settings, browser type and browser language)

Location information

 Automatically collected and stored in our server logs when you interact with our website To enable us to pursue our legitimate interest to better understand visitors to our website
Cookies and similar technologies For further information see our use of cookies
Your consent
To protect the security of our website

Device and usage data (including IP addresses and device identifiers)

Device event information (including crash logs, hardware settings, browser type and browser language)

Location information

 Automatically collected and stored in our server logs when you interact with our website To enable us to pursue our legitimate interest to maintain the security of our website
Cookies and similar technologies For further information see our use of cookies
Your consent
More about the information we collect and why

We have a duty to process personal data fairly, lawfully and in a manner that you would expect given the nature of our relationship with you. Where we have a legal basis to use your personal information without consent (as set out in the table above), this policy fulfils that duty by giving you appropriate notice and explanation of the way in which your personal information will be used. Where consent is required for our use of your personal information we will ask you to positively opt-in. Please note that we may process your personal information without your knowledge or consent where this is required or permitted by law.

If you have any questions or require any further information regarding our use of your personal information please contact our Data Protection Officer at data@penningtonslaw.com.

✖ Close

Our security measures

We do not collect or store credit and debit card information. We limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality. If you require further information regarding these measures please e-mail data@penningtonslaw.com.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

✖ Close

Your rights in connection with your personal information

By law you have the right to:

  • Request access to your personal information (commonly known as a "subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it. This right is subject to a number of exemptions which allow information to be withheld in certain circumstances. For example, subject access rights are excluded where compliance would involve disclosing: information relating to another individual; data which consists of information which is subject to legal professional privilege; negotiations or confidential references.
  • Request correction or erasure of your personal information (unless we have the legal right to retain it). You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
  • Object to processing of your personal information where we are relying on a legitimate interest (or that of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
  • Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to check its accuracy or the reason for processing it.
  • Request the transfer of your personal information to another party.
  • Change your data processing preferences at any time. If you have changed your mind you can update your account settings by signing in via our website or by contacting us by email at data@penningtonslaw.com, in respect of marketing messages you can unsubscribe by using the "unsubscribe" link at the bottom of our marketing messages or by emailing data@penningtonslaw.com.

You should be aware that if you ask us to stop processing your personal information in a certain way or erase your personal information, and this type of processing or data is needed to facilitate your use of the website or to provide you with legal services you may not be able to use the website as you did before or we may not be able to continue advising you. This does not include your right to object to direct marketing, which can be exercised at any time without restriction.

If you want to exercise any of the above rights please contact us at / 01256 407100 / Matrix House, Basing View, Basingstoke, Hampshire, RG21 4DZ or by emailing us at data@penningtonslaw.com.

No fee usually required

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly excessive. Alternatively, we may refuse to comply with the request in such circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is an appropriate security measure to ensure that personal information is not disclosed to a person who has no right to receive it.

Right to withdraw consent

In the limited circumstances where we are relying on your consent as the legal basis to process your personal information for a particular purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact data@penningtonslaw.com. Once we know that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

✖ Close

Legal 500 - Top Tier Firm Chambers Leading Firm European Law Group Multilaw

Useful links

Value

Contact an office

Sectors

Services for Business

Services for Individuals

Copyright

© 2024 Penningtons Manches Cooper LLP.
All rights reserved.
Website design by Frontmedia / Dynamic Pear

Penningtons Manches Cooper LLP

Penningtons Manches Cooper LLP is a limited liability partnership registered in England and Wales with registered number OC311575 and is authorised and regulated by the Solicitors Regulation Authority under number 419867.

Penningtons Manches Cooper LLP