Data Protection Policy
SP Law are dedicated to protecting the rights of individuals to privacy with regard to the processing of the personal data required to satisfy legal and operational obligations.
Such processing, whether it is held manually, on paper or on the computer, will be conducted fairly and lawfully in accordance with the Data Protection Act 1998.
There are eight principles of the Data Protection Act which must be adhered to. The principles require that personal data shall:
- Be fairly and lawfully processed
- Be processed for limited purposes
- Be adequate, relevant and not excessive
- Be accurate and up to date
- Not kept for longer than is necessary
- Be processed in line with your rights
- Be held securely and protected against accidental loss
- Not transferred to countries outside the European Economic Area without adequate protection.
SP Law is registered as a Data Controller with the ICO (Information Commissioners Office). We will adhere to the above principles and the guidelines set out by the ICO.
In order to meet the requirements of the principles, we at SP Law will:
- Observe the conditions concerning the fair collection and use of personal data
- Collect and process appropriate personal data only to the extent that it is needed to fulfil operational and legal requirements
- Specify the purpose for which personal data is used
- Ensure that the data used is correct and current
- Make certain that personal data is only held in line with audit time frames.
- Ensure that the rights of individuals can be fully exercised under the Act
- Ensure that technical and security processes are in place to safeguard personal data
- Ensure that personal data is not transferred abroad without appropriate safeguards
Hassan Shah is the designated partner of the firm and is responsible for ensuring compliance with the Data Protection Act in respect of the SP Law website. He may also be contacted if there are any questions or concerns about the interpretation or operation of this policy.