Legal
Data Protection and Information Security Policy
Last updated
This policy describes the technical and organisational measures Standing Lawyers applies to personal data, whether it belongs to a client, to someone a client's matter concerns, to an applicant for a position, or to a visitor to this website. The privacy policy explains what this website collects; this explains how it is looked after.
What we hold
- Client and matter records, for as long as professional obligations require
- Enquiries and job applications, in our mailbox only — this website stores no copy of either, and the CV attached to an application is never uploaded to any file store
- Cookieless, aggregated website usage data
Measures we apply
- Access is limited to the people who need it for the work in hand
- Administrative access to this website requires an individual account and is logged
- Data is encrypted in transit, and at rest by the hosting platform
- Enquiries and applications are delivered to us by email and not retained by the website, so there is no store of submissions for anyone to reach
- Third-party processors are named in the privacy policy and bound to use data only as instructed
Retention
We keep personal data only as long as the purpose requires or the law obliges. Applications that do not proceed are deleted from the mailbox; anti-abuse records expire automatically within hours; matter records are retained for the period professional record-keeping requires.
A single retention period for each category has not yet been fixed for this practice, because the right period depends on professional obligations that a qualified person should confirm. That is one of the items marked for review above.
If something goes wrong
If personal data in our care is lost or exposed, we establish what happened, contain it, and notify the people affected and any regulator to whom notification is owed, within the time the law allows.
Your requests
You may ask what personal data we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Write to us using the contact details on this website.