The privacy notice explains how BFL Global Law (hereafter referred to as “BFL”) collects, uses, discloses, retains and secures your personal data as part of its business practices. The policy clearly articulates the legal justifications for the processing of your personal data and also lists your data subject rights under all applicable General Data Protection Regulations (“GDPR”).
Overview
BFL respects your privacy, and you are entitled to have your personal data processed in accordance with the GDPR. The key principles BFL applies when processing your personal data are as follows:
Lawfulness: BFL will only collect personal data in a fair, lawful and transparent manner.
Data minimisation: BFL will limit the collection of personal data to what is directly relevant and necessary for the services provided.
Purpose limitation: BFL will only collect personal data for specified, explicit and legitimate purposes.
Accuracy: BFL will keep personal data accurate and up to date while there continues to be a client relationship, and in certain circumstances, after that relationship has ended.
Data security and protection: BFL will implement technical and organisational measures to ensure an appropriate level of data security and protection considering the sensitivity of the personal data. Such measures provide for the prevention of any unauthorized or unlawful processing of personal data and against accidental loss or destruction of, or damage to that data.
Access and rectification: BFL will process personal data in line with clients’ legal rights.
Retention limitation: BFL will retain personal data in a manner consistent with the applicable GDPR and GDPR Regulations and no longer than is necessary for the purposes for which it has been collected in accordance with its retention policy.
Protection for international transfers: BFL will ensure that if personal data is transferred, it is adequately protected.
What personal data does BFL collect?
BFL collects various personal data which may include the following (this list is not exhaustive):
name and address
date of birth
telephone number
email address
copy of passport photo/biographical data page
financial information included your method of payment such as check or wire transfer to BFL
How does BFL use the personal data it collects?
BFL may use your personal data to (this list is not exhaustive):
respond to client inquiries
manage the client relationship
send invoices and collect payment for services rendered
conduct promotional activities
market services
handle complaints
manage client’s wallets
prevent fraud or other criminal activity
record health and safety details if there is an incident at the BFL office
When does BFL disclose your personal data?
BFL may disclose your personal data in the following circumstances (this list is not exhaustive):
if BFL uses a third-party service provider for marketing, marketing research or client relationship management
if a data subject requests that personal data be disclosed to a third party
if there is a legal request or criminal investigation
if it is required to seek legal advice from BFL legal counsel
any other circumstance where it may be required by law
International transfer of personal data
Your personal data is stored with BFL unless it is transferred to a third party for contractual purposes. If at any time BFL transfers personal data, it will ensure that there are adequate safeguards for the rights and freedoms of data subjects as required by the GDPR.
The legal basis for processing your personal data
The GDPR protection sets out some different reasons for which a company may process personal data, and BFL does so under the following legal conditions:
Consent
In specific situations, BFL may collect and process personal data with your consent.
Contractual obligations
In certain circumstances, BFL will need to process certain personal data to comply with contractual obligations for which we have been engaged.
Legal compliance
If the law requires, BFL may need to process your personal data.
Legitimate interest
In specific situations, BFL requires your personal data to pursue its legitimate interests in a way which might reasonably be expected as part of running its businesses and which does not materially impact your rights, freedom or interests.For example, BFL may use an email address you have provided to send you information on our services.
How long does BFL retain your personal data?
BFL retains your personal data for as long as a client relationship exists, and the personal data is necessary to manage that relationship. When there is no longer a client relationship, BFL will retain certain types of personal data for varying periods depending on legal requirements and business needs. Personal data that is no longer needed will be destroyed. BFL will always hold your personal data for the least amount of time necessary in accordance with its retention policy.
How does BFL secure your personal data?
BFL employs appropriate technical and organizational measures to protect against unauthorized processing, accidental loss or destruction of, or damage to, your personal data in accordance with its Information Technology policies.
What rights do you have in respect to your personal data?
You have a right to be informed how your personal data is processed and this privacy notice fulfills BFL’s obligation in that respect. If you have further questions or concerns not addressed in this notice, you may contact BFL on info@bfl-law.com. You have a right to request access to your personal data, the right to request rectification/correction of your personal data, the right to request that processing of your personal data be stopped or restricted and the right to require BFL to cease processing your personal data for direct marketing purposes. If you wish to exercise any of these rights, you should contact BFL.
BFL Global Law is a trading name and division of Bureau Fiduciaire Groupe headed by Bureau Fiduciaire LLP, a limited liability partnership registered with number OC421133 at 71-75 Shelton Street, London WC2H 9JQ, UK. Its affiliate firms include a law office (“Etude”) registered in the Grand Duchy of Luxembourg and based at 50a, rue de Mamer, L-8280 Kehlen.