Privacy Policy (US)

Privacy Notice and Subject/ Access rights

Erbiller takes your privacy seriously and ensures full compliance with the UK General Data Protection Regulation (GDPR).

This Privacy Notice, alongside our website terms of use, outlines the types of personal information we collect, how we process it, who we share it with regarding our services, and your rights and options.

Your personal data will be managed by Erbiller.

What Personal Information Do We Collect?

When you engage our legal services, we collect the necessary personal information to provide those services and to establish you as a client. This information may include:

  • Identity and Contact Data: This can include your name, address, telephone number, date of birth, marital status, passport number, employment history, educational or professional background, tax status, employee number, job title, and other personal preferences relevant to our services.
  • Business Information: This includes information shared during your contractual relationship with Erbiller or other details voluntarily provided by you or your organisation.
  • Information Relevant to Our Legal Advice: This may encompass personal data pertinent to any disputes, grievances, investigations, arbitrations, or other legal matters for which we have been engaged to provide advice.
  • Financial and Payment Data: This may include bank account details and other information needed for payment processing.
  • Physical Access Data: This relates to details about your visits to our offices.
  • Technical Data: This includes information collected during your visits to our website, such as your Internet Protocol (IP) address, login details, browser type, device type, and operating system.
  • Sensitive Personal Data: In the course of our services, we may need to collect sensitive personal information, which may include details about your racial or ethnic origin, political opinions, religious beliefs, health, sexual orientation, or criminal records.

How Do We Obtain Data About You?

We gather information through various means, including:

  • Direct provision by you (e.g., via email or in meetings).
  • Monitoring your interactions with our website.
  • Third-party sources for client acceptance procedures.
  • Publicly available information.

How We Use Your Personal Data

We will only process your personal data when legally permitted, based on the following grounds:

  • To fulfil our contract with you.
  • To comply with legal obligations.
  • To pursue legitimate interests that do not infringe on your data protection rights.
  • To defend or assert legal claims.

Consent: Where applicable, we will seek your consent to process your information. You can withdraw your consent at any time.

Who We Share Your Information With

We may disclose your personal information:

  • To law enforcement, regulators, or government agencies when required by law or to protect legal rights.
  • To individuals or entities with your explicit consent.

Use of Analytics and Cookies

We use aggregate, anonymised information for monitoring website usage and improving our services. This includes Google Analytics cookies. You can adjust your browser settings to manage cookies, but doing so may limit website functionality.

Data Retention

We will retain your personal data only as long as necessary to fulfil the purposes for which it was collected and to meet legal obligations. Details of our file retention policy are available upon request.

Our Data Protection Officer (DPO)

Our DPO is Meryl Erbil, who can be contacted at info@erbiller.com.

Your Legal Rights

You have the following rights regarding your personal data:

  • Right to Rectification: Correct any inaccurate personal data we hold.
  • Right to Erasure: Request deletion of your personal data when it’s no longer necessary or when consent is withdrawn.
  • Right of Access: Request details of the personal data we hold about you, including the purpose of processing and third parties we share it with.
  • Right to Data Portability: Request the transfer of your data to another service provider where applicable.
  • Right to Restriction: Limit the processing of your personal data under certain circumstances.
  • Right to Object: Object to our processing of your data.

If your personal data has been shared with third parties, we must inform them of any rectification or restrictions unless it’s impossible or involves disproportionate effort.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your requests are not handled correctly. Their contact number is 0303 123 1113, and their website is ico.org.uk.