Privacy Notice
Greenwoods Legal LLP (referred to as “Greenwoods”) respects your privacy and is committed to protecting your personal information. Client confidentiality and protection of information is a fundamental feature of our relationship with our clients. As a professional services firm (regulated by the Solicitors Regulation Authority), Greenwoods has specific statutory, common law and regulatory obligations regarding the maintenance of client confidentiality and the protection of personal information.
You may be receiving this notice because we act for trustees or executors and you are a settlor or beneficiary of a trust or estate. You may be reading this notice as a job applicant.
This Privacy Notice (“Notice”) explains how and why we use your personal information, and your related rights and options.
Please read this Notice carefully as it contains important information on who we are and how and why we collect, store, use and share your personal information.
1. Who does this notice apply to?
As a legal services firm, this Notice applies to the personal information we obtain which identifies and relates to:
- people who use or enquire about using our services;
- visitors to our website;
- job applicants and potential job applicants;
- complainants;
- people whose services we use; and
- third parties whose personal information we need to process while providing our services.
2. People who use or enquire about using our services
We ask for your personal information as it enables us to provide our services to you. To use a basic example, it would not be possible for us to communicate with you in relation to our services without knowing your contact details, which contain your personal information.
Personal information we will collect:
The types of personal information we collect while advising and/or acting for you may include:
- your name and contact details (postal address, email address and telephone/mobile number);
- information to enable us to check and verify your identity, e.g. your date of birth or passport details;
- during a remote online call, your voice may be recorded if recording is enabled, your image may be captured if video is enabled, and your name may be visible;
- information relating to the matter on which you are seeking our advice or representation;
- your financial details so far as they are relevant to the nature of our services which you request, e.g. the relevant source of funds if you are asking for us to help with a purchase transaction;
- your use of our IT, communication and other systems; and
- other monitoring information, e.g. if using our secure online client portal or if receiving our email updates.
Personal information we may collect depending on why you have instructed us:
- your national insurance number and tax details;
- your bank and/or building society details;
- details of your professional online presence, such as your company website profile or LinkedIn profile;
- your employment status and details including salary and benefits;
- your nationality, immigration status and information from related documents, such as copies of your passport, BRP cards, driving licence or other identification documents;
- details of your marital status/civil partnership, spouse/partner and dependents or other family members including children;
- information about your health, including any medical condition, health and sickness records;
- details of your pension arrangements; and
- your employment records including, where relevant, records relating to sickness and attendance, performance, disciplinary, conduct and grievances.
3. Visitors to our website
Our website uses cookies or other tracking technologies to record visits and allow engagement with our content and communications. This is useful for us because it can help us to improve how we operate our website, communications and services and, in turn, provide you with a better experience when using our website.
In particular, we use Google Analytics to collect details of visitor behaviour patterns. We do this to find out information that might be useful, such as the number of visitors to the various parts of the site. We also track how effective our email marketing is by using tracking pixels.
We do not use this information to identify anyone. The information is collected anonymously and in aggregate and we make no attempt to find out the identities of those visiting our website. Please see our Cookie Notice for more information.
In general, the personal information we collect from website visitors (as well as those who subscribe to our email updates, attend our seminars/webinars or view our other publications) includes:
- your name, email address and internet service provider address;
- name of your organisation, your job title and details of your job;
- information relating to the matter which you contact us about;
- technical data including internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- payment details; and
- dietary or access requirements.
4. Complainants
We are committed to providing a high-quality service to all of our clients. However, when you do want to raise a concern with us we may need to collect personal information in order to administer and respond to that complaint, such as:
- your name, home address, email address and mobile phone number;
- information relating to the matter about which you sought our assistance or which are/were the subject of our services/relationship; and
- details of your complaint.
5. People whose services we use
Where we engage individuals or organisations to provide services for us (for example, outsourcing functions such as benefits administration), we may be required to collect and use personal information related to the staff of the service provider in order to facilitate the provision of the service (for example, for the purposes of administrative communication). We may also collect and retain personal information to enable us to evaluate that service.
Any such use of personal information will be governed by contractual terms between us the service provider as well as the relevant provisions of this Notice
6. “Special category” personal information
Applicable law recognises certain categories of personal information as sensitive and therefore requiring more protection and careful handling, e.g. information about your health, race, ethnicity, sexual orientation, sex life, genetic data, biometric data, religious or philosophical beliefs and political opinions.
In certain situations, we may need to collect and/or use these “special categories” of personal information (for example if we were providing you with employment law advice in relation to a discrimination claim; for our own equality of opportunity monitoring purposes or so that we can administer our employment relationship in an effective manner or where it is necessary prior to entering into an employment contract with you or to comply with a legal obligation or where it is necessary for the firms or a third party’s legitimate interest).
We will only collect and use these special categories of personal information if there is a valid reason for doing so, and where applicable law allows us to do so.
7. How we obtain your personal information
We collect the majority of the personal information to which this Notice applies directly from you. However, we may also collect personal information from other sources, such as:
Directly from a third party (consent will be sought where required):
For example:
- from clients requesting our services (i.e. when your personal information is relevant to the matter about which they seek our assistance);
- your bank or building society, or other financial institution (for example, to pay our invoices);
- consultants and other professionals we may engage in relation to your matter (for example, an expert witness in litigation);
- your employer and/or trade union, professional body or pension administrators;
- your doctors, medical and occupational health professionals (for example, so that we can put in place appropriate workplace adjustments to ensure equality of access and opportunity); and
- recruitment agencies.
Via our own or our landlord’s information technology systems:
For example:
- case management, document management and financial management systems;
- door entry systems and reception logs;
- recording and transcription of meetings and calls via our computer systems; and
- automated monitoring of our websites and other technical systems, such as our computer networks and connections, CCTV and access control systems, communications systems, email and instant messaging systems.
Publicly accessible sources:
For example:
- Companies House;
- HM Land Registry;
- Charity Commission; and
- through social media platforms. Depending on your privacy settings for social media services, we may access information from relevant accounts or profiles – for example when you interact with us on Facebook, X or LinkedIn.
8. How and why we use your personal information
We can only use your personal information where we have a legally recognised justification for doing so, such as:
- in order to comply with our legal and regulatory obligations;
- for or in the performance of our contract to provide you with our services, or to take steps at your request before entering into a contract;
- for our legitimate interests or those of a third party (explained in more detail below); or
- where you have provided your consent.
We do not share your personal information with any organisations for marketing, market research or commercial purposes other than providing our services.
A “legitimate interest” is when we have a valid operational or commercial reason to use your personal information, so long as this does not pose an excessive impact on your rights to privacy.
We summarise how and why we use your personal information (and the applicable legal justifications) below:
9. How we use personal information relating to other individuals collected from you
For other individuals:
Due to the nature of our business, we frequently need to collect and use personal information of third parties as part of the service we provide to our clients.
We will not usually inform you that we are processing your personal information in this way and for these purposes, because our use of your personal information will be subject to the “legal professional privilege” exemption from the transparency obligations of applicable law. For the sake of clarity, and in accordance with the same applicable provisions, we are not required to provide disclosure further to a data subject access request (in part or in full) where the relevant personal information which has been requested is held subject to legal professional privilege or where we have an overriding duty of confidentiality to a third party.
For you:
In the course of providing our services to you, you may provide us with personal information which relates to and identifies individuals who are not aware of our involvement or of our use of their personal information at all. Examples include:
- Personal information relating to employees in the course of a corporate acquisition.
- Personal information relating to key individuals of parties to a dispute.
- Personal information contained in allegations made about former colleagues by a claimant ex-employee.
- Personal information relating to beneficiaries, trust/estate persons in the course of preparing Wills, creating trusts and estate and trust administration.
In such situations (which, by the nature of our business, are relatively common), it will not usually be appropriate for us to have any direct contact with individuals whose personal information we are using (for example, because we communicate instead with their solicitors). Alternately, it may not be appropriate for us to provide such individuals with this Notice (for example, because it may prejudice the purpose of the services we are providing or to maintain confidentiality).
Before you pass any such personal information to us, please ensure that the relevant individual has received any requisite privacy notices in connection with the performance of our services.
Additionally, please direct any individuals who interact with us on your behalf to this Notice, a link to which is also contained in the footer of all our emails.
10. Marketing and promotional communications
We may collect and use your personal information to send you email updates about industry or legal developments that might be of interest to you, and/or other information about our services, including offers, promotions or new services/products.
As set out in section 8 above, we have a legitimate interest in using your personal information for these purposes. This means we do not always need to obtain your consent to send you marketing and promotional communications. However, we acknowledge that there are situations where consent is needed: in such situations we will ask for consent separately and clearly, and put you under no pressure to provide your consent. If you do provide your consent, you can change your mind and withdraw your consent at any time either by contacting mailinglists@greenwoods.co.uk or clicking the unsubscribe link in our emails.
We may ask you to confirm or update your marketing preferences if you instruct us to provide further services in the future, or if there are changes in applicable law, regulation or the structure/operation of our business.
12. Where do we hold your personal information?
All electronic information is stored on cloud servers located within the UK and the EEA.
To provide our services our administer our relationship, we may also need to transfer your personal information to recipients outside the UK, such as when we work on multijurisdictional matters, when you are located outside UK or our service providers use facilities located outside the UK.
Countries in the European Economic Area (“EEA”) provide the same level of protection to your data as is provided across UK. The applicable law of many non-EEA countries does not offer the same protection to you in respect of your personal information in comparison to the UK. We will, however, take reasonable steps from time to time to ensure that any such recipients have in place appropriate and legally binding measures to protect your personal information.
Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
- Where we use certain service providers, we may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.
13. How long will we keep your personal information?
We will keep your personal information after our relationship comes to an end. We will do this for one of the following reasons:
- to respond to questions, complaints or claims;
- to show that we treated you fairly and in accordance with applicable law;
- to keep records required by regulatory bodies who govern our work and services (or otherwise as required by applicable law or regulation); or
- for business management purposes.
We are required to maintain records as per the SRA’s record retention schedule. We do not keep personal information longer than necessary for the relevant purpose(s) set out in this Notice. We apply different retention periods to different types of personal information, depending on the purpose for which it was collected (usually the nature of the matter about which you seek our assistance). Further details are available on request.
14. Your rights explained
Applicable law gives you certain rights to control how we use your personal information. There are as follows:
We may ask you for additional information to confirm your identity for security purposes before actioning any attempt to exercise these rights. Please note that some of these rights only apply in limited circumstances. For further information on these rights and how to exercise them, please contact us using the details in section 17 below.
15. Keeping your personal information secure
We have implemented appropriate security measures to prevent personal information from being accidentally lost or used or accessed unlawfully. We limit access to your personal information to those who have a genuine business need to access it (i.e. as part of their job). Those who access and handle your personal information will do so only when authorised by us to do so and are subject to binding duties of confidentiality.
We have also implemented procedures to deal with any data security incident (or suspected data security incident). We will notify you, the ICO of any data security incidents where we are legally required to do so. For further information, please contact us using the details in section 17 below.
16. Changes to the terms of this Notice
This Notice was published on 20 March 2025.
We may change this Notice from time to time (for example because there is an update in applicable law). Where we make any significant changes, we will inform you via a notice on our website and within our email footers. Where it is practical and not intrusive, we will notify you directly of any material changes to this Notice.
Nonetheless, we recommend that you review this Notice periodically to remain informed about how we may use your personal information.
We will only notify individuals who are directly engaging with us about these changes. In particular, we will not notify any third parties whose personal information you give us.
17. How to contact us
If you have any questions or concerns, please contact us via the following channels:
Post:
Data Protection
Greenwoods Legal LLP
Queens House
55-56 Lincoln’s Inn Fields
London
WC2A 3LJ
Email: dataprotection@greenwoods.co.uk