Privacy Notice.

This privacy notice describes the information Khadija collect's about you, how it is used and shared and your rights regarding it. When you instruct Khadija, you can trust her with your information. Khadija is determined to do nothing that would infringe your rights or undermine your trust.

Data Controller

Khadija is registered with the Information Commissioner’s Officer (ICO) as a Data Controller for the personal data that she holds and processes. Her registration number is Z2218080.

Data Collection

All the information that Khadija holds about you is provided to her either by yourself when you seek to use her services or by your solicitor or an educational establishment/training company that you have engaged to provide you with services and they employ Khadija to assist them with the delivery of that service. Khadija will tell you why she needs the information and how she will use it.

Lawful Basis for processing your information

The General Data Protection Regulation (GDPR) requires all organisation that process personal data to have a Lawful basis for doing so. The Lawful Bases in the GDPR are:

• Consent of the data subject
• Performance of a contract with the data subject or to take steps to enter into a contract with another data controller to offer services to the data subject;
• Compliance with a legal obligation
• To protect the vital interests of a data or another person
• Performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
• The legitimate interests of ourselves, or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject.

Examples of legitimate interests include:

• Where the data subject is a client or in the service of the controller or another data controller;
• Transmission to other data controllers and data processors under a contract for internal administrative purposes;
• Processing necessary to ensure network and information security, including preventing unauthorised access;
• Processing to prevent fraud, and
• Reporting possible criminal acts or threats to public security.

Khadija's Lawful Basis is:

• Consent of the data subject.
• Compliance with legal and regulatory obligations.
• The administration of justice and for reasons of substantial public interest.
• The legitimate interests of herself, or a third party, except where such interests are overriden by the interests, rights or freedoms of the data subject.

And Khadija's Legitimate Interests are:

• Where the data subject is a client or in the service of the controller.
• The provision of legal services.
• Conflict-checking purposes.
• For use in defence of potential complaints, legal proceedings or fees disputes.
• Processing necessary to ensure network and information security, including preventing unauthorised access.
• Keeping anti-money laundering records.
• Exercising a right to a lien.
• Processing to prevent fraud.
• Reporting possible criminal acts or threats to public security.

​

Khadija may use your information to:

• Provide you with legal services when she is instructed by your solicitor and you.
• Provide legal training when she is employed by the educational establishment or legal training company to deliver that service to you.
• Process or support payment for her legal or legal training services.
• Investigate and address your concerns.
• Maintain the safety, security and integrity of my services.

Khadija does not use automated decision-making in the processing of your personal data. She collects and processes both personal data and special categories of person data as defined in the GDPR. This includes:

Client Data (Name, Date of Birth, Location Details, Contact details, Economic, social and cultural background, Racial or ethnic origin, Political opinion, religious or philosophical beliefs, Biometric data, Physical, psychological and mental health, and Sex life or sexual orientation)

Student/Trainee Data (Name, Email address, Location details, and Physical, psychological and mental health)

Khadija may share your personal data with:

• The judicial authorities and with the other party during the course of legal proceedings when required to and subject to her regulatory obligations.
• Law enforcement officials, government authorities or other third parties to meet legal obligations.
• Any other data controller where you have agreed to the sharing.
• Any other party or legal advisor where she asks you and you consent to her sharing.
• Administrative staff for corresponding with your solicitors on her behalf and for the processing of the payment and collection of her professional fees.
• Her legal advisor in the event of a dispute or other legal matter.

Transfers to third countries and international organisations.

Khadija does not transfer any personal data to third countries or international organisations.

Khadija will retain your personal data while you remain her client, unless you ask her to delete it. Khadija's Retention and Disposal Policy (copy available on request) details how long she holds data for and how she will dispose of it when it no longer needs to be held. She will delete or anonymise your information at your request unless there is an unresolved issue, such as a claim or dispute;she is legally required to; or there are overriding legitimate business interests, including but not limited to fraud prevention and protecting a client’s safety and security.

Your Rights.

The General Data Protection Regulation gives you specific rights around your personal data. For example, you have to be informed about the information she holds and what she uses it for, you can ask for a copy of the personal information she holds about you, you can ask her to correct any inaccuracies with personal data she holds, you can ask her to sending you emails or in some circumstances ask her to stop processing your details. Finally if Khadija does something irregular or improper with your personal data you can seek compensation for any distress caused or loss you have incurred.

You can find out more information from the ICO’s website http://ico.org.uk/forthepublic/personalinformation and this is the organisation that you can complain to if you are unhappy with how Khadija deals with you.

Accessing and Correcting Your Information.

You may request access to, correcting of, or a copy of your information by contact Khadija at k.rahman@iusbarristers.com.

Marketing Opt-Outs.

You may opt out of receiving emails and other messages from Khadija by following the instructions in those messages.

Cookies.

Cookies are small text files that are stored on your browser or device by websites, apps, online media, and advertisements. The IUS Barrister website uses cookies to:

remember user preferences and settings, determine frequency of accessing her website content, and to analyse site visits and trends.

Khadija will occasionally update this Privacy Notice. 

When she makes significant changes, she will notify you of these through email. She will also publish the updated Notice on her website.