Access
You can request a copy of the personal data we hold about you.
Information
Privacy Notice
How Cedar Wood Law collects, uses, stores and protects personal data
Who we are
Cedar Wood Law is a law firm based in Wales providing employment law advice and representation to individuals. In this notice, "we", "us" and "our" refer to Cedar Wood Law. We are the data controller for the personal data we process about you.
If you have questions about this notice or about how we handle personal data, please contact enquiries@cedarwoodlaw.co.uk.
What this covers
This notice explains what personal data we collect, how we collect it, what we use it for, how long we keep it and the rights you have in relation to that data.
It applies to clients, prospective clients, individuals referred by trade unions or legal expenses insurers, and other individuals whose data we process during the course of our work.
Personal data we collect
- Name, address, telephone number and email address.
- Date of birth and identity information where required for compliance.
- Employment details such as employer, role, salary and length of service.
- Information relevant to your legal matter, including correspondence and documents.
- Funding information, including trade union membership or legal expenses insurance details.
- Information about third parties where relevant to the matter, such as witnesses or employers.
Sensitive personal data
In employment law matters we may process special category data, including information about health, disability, racial or ethnic origin, religion or belief, sexual orientation or trade union membership.
We handle this data with particular care and only where it is necessary for the establishment, exercise or defence of legal claims, or where you have given explicit consent.
How we collect your data
- Directly from you when you contact us or provide documents and instructions.
- From trade unions or legal expenses insurers where you have authorised a referral.
- From third parties involved in your matter such as employers, witnesses or advisers.
- From public sources where relevant, such as tribunal decisions.
How and why we use personal data
Providing legal services
We use personal data to take instructions, advise on legal position, correspond on your behalf, prepare documents and represent you in proceedings. The lawful basis is performance of our contract with you or steps taken before entering into that contract.
Legal and regulatory obligations
We also process data to comply with professional and legal obligations, including data protection law and regulatory requirements.
Legitimate interests
We may process data to maintain records, manage complaints, protect against claims and keep our systems secure, provided those interests are not outweighed by your rights.
Transfers outside the UK
We do not routinely transfer personal data outside the United Kingdom. If that changes, we will ensure appropriate safeguards are in place under UK data protection law.
How long we keep personal data
Personal data is kept no longer than necessary for the purposes for which it was collected. In practice, files and associated data are typically retained for a minimum of six years following the conclusion of a matter.
Security
We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse or disclosure.
Your rights
Correction
You can ask us to correct inaccurate or incomplete personal data.
Restriction
You can ask us to restrict the way we process your data in some circumstances.
Objection
You can object to some forms of processing based on legitimate interests.
Changes to this notice
We may update this notice from time to time. The latest version will always be published on this page.
Contact and complaints
Questions about data protection can be directed to enquiries@cedarwoodlaw.co.uk.
You have the right to complain to the Information Commissioner's Office. We would, however, welcome the opportunity to address concerns directly first.