Privacy
General Data Protection Regulation (“GDPR”) – The Firm takes all aspects of privacy and data protection very seriously and is aware of its obligations under data protection regulation, including the requirements of the GDPR (from 25th May 2018). We collect and use personal information to conduct matters under engagements with our clients, to run, improve and develop our business and services and to maintain contact with clients and others who are interested in our work or with whom we have made connections.
With regard to the GDPR, we rely on the following legal grounds:
- Performance of a contract
- Consent
- Legitimate interests
How we Collect Information
Most of the personal information we collect is provided to us by the individuals themselves, for example when making enquiries, requesting information or fee quotes from us, entering into client engagements with us, interacting with our team members at events, providing/exchanging business cards or attending events (including technical, networking and social events). We may also gather and update information from public / semi-public sources, such as entries on websites and social media platforms.
How we Store Information
Databases holding personal / contact information are held on our server and our “cloud” service, with data stored only in the EU and the United States of America, which is a country determined by the EU Commission to have an “adequate level of protection” under the EU-US Privacy Shield.
How We Use the Information We Collect and Hold
- To provide our services
- To improve and develop our services and business
- To respond to enquiries
- To manage our client engagements and the conduct of matters
- To manage our relationship with clients, suppliers and other contacts
- To provide news and technical information that may be of interest
- To send invitations to firm events and/or to send firm marketing information
- To comply with our legal obligations
- For any other legitimate business purpose
How We Share the Information We Collect and Hold
Data collected and held by Brill Immigration may be disclosed to third parties where required in order to provide our services (for example, courier services, external agents and service providers, outsourced services, and lawyers / other professionals working alongside our own team) in the conduct of matters. It may also be disclosed where we are required to do so by law. We have never and will never sell the data we hold and nor have we ever bought lists/data.
Rights Under GDPR
EU residents have certain rights under GDPR, including the right to see the data we are holding, to request corrections of data held and to be removed from our database (subject to certain exceptions). Should you wish to exercise any of these rights or to be removed from our database completely, please contact us at info@brillimmigration.com. Please note that there are certain circumstances in which removal will not be possible (for example where we are required to keep data relating to matters conducted under engagements with our clients) and that additional correspondence may be required before removal can be completed.