This privacy notice describes the information Khadija collect's about you, how it is used and shared and your rights regarding it. When you instruct Khadija, you can trust her with your information. Khadija is determined to do nothing that would infringe your rights or undermine your trust.
Khadija is registered with the Information Commissioner’s Officer (ICO) as a Data Controller for the personal data that she holds and processes. Her registration number is Z2218080.
All the information that Khadija holds about you is provided to her either by yourself when you seek to use her services or by your solicitor or an educational establishment/training company that you have engaged to provide you with services and they employ Khadija to assist them with the delivery of that service. Khadija will tell you why she needs the information and how she will use it.
Lawful Basis for processing your information
The General Data Protection Regulation (GDPR) requires all organisation that process personal data to have a Lawful basis for doing so. The Lawful Bases in the GDPR are:
Examples of legitimate interests include:
Khadija's Lawful Basis is:
And Khadija's Legitimate Interests are:
Khadija may use your information to:
Khadija does not use automated decision-making in the processing of your personal data. She collects and processes both personal data and special categories of person data as defined in the GDPR. This includes:
Client Data (Name, Date of Birth, Location Details, Contact details, Economic, social and cultural background, Racial or ethnic origin, Political opinion, religious or philosophical beliefs, Biometric data, Physical, psychological and mental health, and Sex life or sexual orientation)
Student/Trainee Data (Name, Email address, Location details, and Physical, psychological and mental health)
Khadija may share your personal data with:
Transfers to third countries and international organisations.
Khadija does not transfer any personal data to third countries or international organisations.
Khadija will retain your personal data while you remain her client, unless you ask her to delete it. Khadija's Retention and Disposal Policy (copy available on request) details how long she holds data for and how she will dispose of it when it no longer needs to be held. She will delete or anonymise your information at your request unless there is an unresolved issue, such as a claim or dispute;she is legally required to; or there are overriding legitimate business interests, including but not limited to fraud prevention and protecting a client’s safety and security.
The General Data Protection Regulation gives you specific rights around your personal data. For example, you have to be informed about the information she holds and what she uses it for, you can ask for a copy of the personal information she holds about you, you can ask her to correct any inaccuracies with personal data she holds, you can ask her to sending you emails or in some circumstances ask her to stop processing your details. Finally if Khadija does something irregular or improper with your personal data you can seek compensation for any distress caused or loss you have incurred.
You can find out more information from the ICO’s website http://ico.org.uk/forthepublic/personalinformation and this is the organisation that you can complain to if you are unhappy with how Khadija deals with you.
Accessing and Correcting Your Information.
You may request access to, correcting of, or a copy of your information by contact Khadija at firstname.lastname@example.org.
You may opt out of receiving emails and other messages from Khadija by following the instructions in those messages.
remember user preferences and settings, determine frequency of accessing her website content, and to analyse site visits and trends.
Khadija will occasionally update this Privacy Notice.
When she makes significant changes, she will notify you of these through email. She will also publish the updated Notice on her website.
Updated: 4 October 2019