Data Protection Policy

1. Who We Are

Farrington Legal Services is a partnership. The firm is the data controller responsible for your personal data. Our registered address is 23 Goodlass Road, Speke, Liverpool, Merseyside, L24 9HJ.

The firm has notified the Information Commissioner's Office (ICO) and our register entry is ZA313918.

If you have any questions about this policy or how we handle your personal data, please contact us at [email protected] or by telephone on 0151 954 0854.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Client information — name, date of birth, address, contact details, and identification documents where required
• Billing information — invoicing details, bank account or payment information where relevant to our services
• Subjects of enquiry — information about third parties provided to us in connection with an instruction, including details necessary to carry out the work
• Technical data — IP address, browser type, and usage data collected when you visit our website
• Communications data — records of correspondence between you and FLS

3. How We Collect Personal Data

We collect personal data directly from you when you contact us by email, telephone or post, when you instruct us to carry out work on your behalf, or when you visit our website. We may also receive personal data from third parties in the course of carrying out an instruction, for example from courts, public records, or other lawful sources.

4. How We Use Your Personal Data

We use personal data only for the purposes for which it was collected or for compatible purposes. Our lawful bases for processing are:

• Contract — to perform services you have instructed us to carry out
• Legal obligation — to comply with our legal and regulatory obligations
• Legitimate interests — to manage our business, maintain records, and prevent fraud
• Consent — where you have given us explicit consent to process your data for a specific purpose

5. Sharing Your Personal Data

We do not sell, rent or trade personal data. We may share personal data with:

• Our network of process servers and investigators, where necessary to carry out an instruction
• Courts, solicitors, or other parties as required by the nature of the instruction
• Regulatory bodies or law enforcement agencies where we are legally required to do so
• Professional advisers such as accountants or insurers, subject to confidentiality obligations

6. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Case files are generally retained for a period of six years following completion of an instruction, in line with standard limitation periods. Financial records are retained for seven years in accordance with HMRC requirements. Data that is no longer required is securely deleted or destroyed.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or alteration. These measures include secure email communications, password-protected systems, and restricted access to case files. Where data is shared with our network of investigators, we require them to maintain equivalent standards of security and confidentiality.

8. Your Rights

Under UK GDPR you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data where there is no lawful basis for continued processing
• Right to restriction — to request that we limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making — we do not carry out automated decision-making or profiling

9. How to Exercise Your Rights

To exercise any of your rights, please contact us in writing at [email protected] or by post to Farrington Legal Services, 23 Goodlass Road, Speke, Liverpool, Merseyside, L24 9HJ. We will respond within one calendar month. We may need to verify your identity before processing your request.

10. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). You can contact the ICO at www.ico.org.uk or by telephone on 0303 123 1113. We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in law or our practices. The current version will always be available on this page. We encourage you to review this policy periodically.