Privacy Notice for Temple Tax Chambers

This Privacy Notice is on behalf of Temple Tax Chambers. Chambers and individual Members of Chambers are generally separate Data Controllers for the personal data they process. This Privacy Notice explains how Chambers processes personal data. Individual barristers have their own Privacy Notices explaining how they process personal data in connection with their legal practice.This Privacy Notice is intended for Professional and Lay Clients of Chambers. This notice describes the information we collect, store and process about you and how it is used, shared and your rights regarding it. A Lay Client is the client of a Solicitor or other Instructing professional for whose benefit or on behalf of whom we are instructed by a Solicitor or other instructing Professional.

Data Controller

Temple Tax Chambers is registered with the Information Commissioner’s Office (ICO) as a Data Controller for the personal data that we hold and process. Our registered address is Temple Tax Chambers, 4 King's Bench Walk, London EC4Y 7DL, our registration number is ZA352016, and our Data Protection Lead can be contacted at clerks@templetax.com or on 020 7353 7884.

Data Collection

We may collect personal data directly from you, from your solicitors or other professional representatives, from courts and tribunals, from regulatory bodies, from publicly available sources and from other third parties involved in legal proceedings or the provision of our services.

Our Lawful Basis for processing your information

The UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, requires all organisations that process personal data to have a Lawful Basis for doing so. The Lawful Bases identified in the UK GDPR are:

- Consent of the data subject
- Performance of a contract with the data subject or to take steps to enter into a contract
- Compliance with a legal obligation
- To protect the vital interests of a data subject or another person
- Performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- The legitimate interests of ourselves, or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject

Examples of legitimate interests include:
• Where the data subject is a client or in the service of the controller;
• Transmission within a group of undertakings for internal administrative purposes;
• Processing necessary to ensure network and information security, including preventing unauthorised access;
• Processing for direct marketing purposes, or to prevent fraud; and
• Reporting possible criminal acts or threats to public security.

Our Lawful Basis is compliance with a legal obligation and our Legitimate Interest is where the data subject is a client or in the service of the controller.

We may use your information to:

• Provide legal services, deliveries, quotations, and information, for example, newsletters;
• Process payments for goods and services;
• Communicate with you about our services, news, updates and events;
• Investigate or address legal proceedings, regulatory or complaints relating to your use of our services or as otherwise allowed by applicable law;
• to recruit staff and pupils;
• to process and assess applications for tenancy, pupillage, mini-pupillage and work-shadowing opportunities;
• to fulfil equality and diversity and other regulatory requirements;
• to manage matters relating to employment, including payroll;
• to respond to requests for references;
• to publish legal judgments and decisions of courts and tribunals;
• to carry out anti-money laundering and terrorist financing checks;
• as otherwise required or permitted by law.

We do not use automated decision-making in the processing of your personal data.
We collect and process both personal data and special categories of personal data as defined in the UK GDPR. This includes:

Customer/client data

• Name;
• Email;
• Phone number;
• Address;

Employee Data

• Name;
• Email;
• Phone number;
• Address;
• Payment or bank details;
• Date of birth;
• Family & next-of-kin details

Marketing and promotion

In relation to personal information collected for marketing purposes, the personal information consists of:
• names, contact details, and name of organisation
• the nature of your interest in our marketing
• your attendance at our events
• information about our business relationship
This will be processed so that you can be provided with information about us and to invite you to events.
You may opt out of receiving emails and other messages from us by following the instructions in those messages or by contacting Chambers directly if you no longer wish to receive such invitations or information.

We may share your personal data with:

• Delivery partners (couriers/royal mail) in the process of sending papers/advice to you,
• Our legal advisors in the event of a dispute or other legal matter;
• Law enforcement officials, government authorities, or other third parties to meet our legal obligations;
• Any other party where we ask you and you consent to the sharing;
• With companies to provide typographical services or reprographic services for purposes of providing legal advice;
• Pupils, mini-pupils and work experience students where necessary for training purposes and subject to appropriate confidentiality obligations.;
• Marketing service providers, including email marketing platforms with opt out option.. Legal directories where you have been asked to provide a reference.
• Third party conferencing providers such as Zoom and Microsoft Teams. Use of some of these platforms may result in the transfer of data outside the UK, to the USA (see para. 6 below).

Transfers to third countries and international organisations

If you reside outside the United Kingdom (UK) or your case involves persons or organisations or courts and tribunals outside the UK then it may be necessary to transfer some of your information to that country outside of the EEA for that purpose. If you are in a country outside the UKor if the instructions you provide come from outside the UK then it is inevitable that information will be transferred to those countries. If this applies to you and you wish additional precautions to be taken in respect of your information please indicate this when providing initial instructions.

We may transfer personal data to the following third countries or international organisations using the identified safeguards:

1. Canada – Adequacy Rating from EC.
2. Switzerland - Adequacy Rating from EC.
3. Guernsey - Adequacy Rating from EC.
4. Isle of Man - Adequacy Rating from EC.
5. Jersey - Adequacy Rating from EC.
6. USA:

7. UK Extension to the EU-US Data Privacy Framework; or

8. UK International Data Transfer Agreement (IDTA); or

9. UK Addendum to the EU Standard Contractual Clauses.

We have satisfied ourselves that such transferred data is fully protected and safeguarded as required by the UK General Data Protection Regulation.

We retain your personal data while you remain a client, pupil, student, employee, unless you ask us to delete it. Our Retention and Disposal Policy (copy available on request) details how long we hold data for and how we dispose of it when it no longer needs to be held. Requests for erasure will be considered in accordance with UK GDPR. The right to erasure is not absolute and may not apply where we are required to retain information for legal, regulatory or legitimate business purposes. :

Your Rights

The UK General Data Protection Regulation gives you specific rights around your personal data such as:
• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Rights relating to automated decision-making
For example, you have to be informed about the information we hold and what we use it for, you can ask for a copy of the personal information we hold about you, you can ask us to correct any inaccuracies with the personal data we hold, you can ask us to stop sending you direct mail, or emails, or in some circumstances ask us to stop processing your details. Finally, if we do something irregular or improper with your personal data you can seek compensation for any distress you are caused or loss you have incurred. You can find out more information from the ICO’s website https://ico.org.uk/ and this is the organisation that you can complain to if you are unhappy with how we deal with you.

Accessing and Correcting Your Information

You may request access to, correction of, or a copy of your information by the Data Protection Lead at clerks@templetax.com or via post at Temple Tax Chambers, 4 King's Bench Walk, Ground Floor North, London EC4Y 7DL.

Cookies

Cookies are small text files that are stored on your browser or device by websites, apps, online media, and advertisements. We use cookies to:

• Validate users;
• Remember user preferences and settings;
• Determine frequency of accessing our content;
• Measure the effectiveness of advertising campaigns; and
• Analyse site visits and trends.

Complaints

Individuals who believe that Chambers has not complied with its obligations under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, or related data protection legislation may make a complaint.

A data protection complaint may relate to any aspect of Chambers' processing of personal data, including the accuracy, use, disclosure, retention, security or handling of personal information, or the exercise of an individual's data protection rights.

Data protection complaints may be made through any of the channels set out in this Complaints Policy (https://www.templetax.com/instructing-us/chambers-complaints-procedure) and should be referred promptly to the Data Protection Lead.

Chambers will acknowledge data protection complaints within 30 days, investigate promptly and keep the complainant informed throughout the process. Following the investigation, Chambers will provide a written response setting out the outcome and any remedial action to be taken.

Where a complaint is upheld, Chambers may take appropriate corrective action, including correcting or deleting personal data, restricting processing, improving procedures, providing additional training, or taking other steps necessary to address the issue.

A record of all data protection complaints will be maintained and handled confidentially. Information relating to a complaint will only be used for the purpose of investigating and resolving the matter.

If a complainant remains dissatisfied, they may complain to the Information Commissioner's Office (ICO). Further information is available at www.ico.org.uk.

We will occasionally update our Privacy Notice. When we make significant changes, we will publish the updated Notice on our website.