We want you to know that when you use our organisation you can trust us with your
information. We are determined to do nothing that would infringe your rights or undermine
your trust. This Privacy Notice describes the information we collect about you, how it is used
and shared, and your rights regarding it.
We are registered with the Information Commissioner’s Office (ICO) as a Data Controller for
the personal data that we hold and process. Our registered address is No 5 Chambers Ltd,
103 Colmore Row, Birmingham, B3 3AG our registration number is 02727465, and our Data
Protection Manager (DPM) is Jo Pickersgill. Our Data Protection Manager can be contacted
at jop@no5.com
Data Collection
The vast majority of the information that we hold about you is provided to us by yourself
when you seek to use our services. We will tell you why we need the information and how
we will use it.
Our Lawful Basis for processing your information
The General Data Protection Regulation (GDPR) requires all organisations that process
personal data to have a Lawful Basis for doing so. We process data on the following legal
bases:
• Consent of the data subject
• Performance of a contract with the data subject or to take steps to enter into a contract
• Compliance with a legal obligation
• To protect the vital interests of a data subject or another person
• Performance of a task carried out in the public interest or in the exercise of official authority
vested in the controller.
• The legitimate interests of ourselves, or a third party, except where such interests are
overridden by the interests, rights or freedoms of the data subject.
Where we rely on ‘legitimate interests’ as our legal basis, our legitimate interest includes
running an efficient, legal and profitable business.
We use your information to:
▪ Provide goods, services, deliveries, quotations, and information, for example,
catalogues and newsletters;
▪ Process or support payments for goods and services;
▪ Conduct data analysis, testing, and research, and to monitor and analyse usage and
activity trends;
▪ Maintain the safety, security and integrity of our services;
▪ Direct your enquiries to the appropriate customer support staff;
▪ Investigate and address your concerns;
▪ Communicate with you about products, services, promotions, studies, surveys, news,
updates and events;
▪ Process promotions/competitions, including prizes, and send you information about
our services and those of our business partners;
▪ Investigate or address legal proceedings relating to your use of our
services/products, or as otherwise allowed by applicable law;
We do not use automated decision-making in the processing of your personal data.
We process both personal data and special categories of personal data as defined in the
GDPR. This includes:
Common data types we collect:
▪ Name;
▪ Email;
▪ Phone number;
▪ Address;
▪ Payment or bank details;
Specific data is collected for:
Where necessary for the effective implementation of our Respect Policy
▪ Personal details including your name, date of birth and contact details
▪ Family details
▪ Lifestyle and social circumstances
▪ Education, training and employment information
▪ Physical and/or mental health information
▪ Racial or ethnic origin
▪ Political opinions
▪ Religious, philosophical or other beliefs
▪ Sex life or sexual orientation
▪ Rarely, genetic data
▪ Rarely, biometric date
Customer/client data
▪ Location details;
Device IP address;
Employee Data
▪ Date of birth;
▪ Family & next-of-kin details
▪ Medical details
▪ Equality and Diversity Data
Barrister Data
• Date of Birth
• Equality and Diversity data
• Supplier and VAT number
Pupillage and Mini-Pupillage Data
• Date of Birth
• Equality and Diversity Data
We may share your personal data with:
▪ Delivery partners,
▪ Our business partners;
▪ Our subsidiaries;
▪ The general public when you contribute to a public forum;
▪ Our legal advisors in the event of a dispute or other legal matter;
▪ Law enforcement officials, government authorities, or other third parties to meet our
legal obligations;
▪ In connection with, or during negotiations of, any merger, sale of company assets,
consolidation or restructuring, financing, refinancing, or acquisition of some or all of
our business by another company; and
▪ Any other party where we ask you and you consent to the sharing.
Transfers to third countries and international organisations
We do not normally transfer any personal data to third countries or international
organisations.
If we do transfer personal data to third countries or international organisations because we
have barristers working overseas on International matters we have satisfied ourselves that
such transferred data is fully protected and safeguarded as required by the General Data
Protection Regulation.
We retain your personal data while you remain a barrister, client, pupil, mini pupil,
employee or consultant, unless you ask us to delete it. Our Retention and Disposal Policy
(copy available on request) details how long we hold data for and how we dispose of it when
it no longer needs to be held. We will delete or anonymise your information at your request
unless:
• There is an unresolved issue, such as a claim or dispute;
• We are legally required to; or
• There are overriding legitimate business interests, including but not limited to
fraud prevention and protecting customers’ safety and security.
Your RightsUnder the General Data Protection Regulation, you have a number of important rights that
you can exercise free of charge. In summary, these rights are:
▪ Transparency over how we use your personal data and fair processing of your
information;
▪ Access to your personal information and other supplementary information;
▪ Require us to correct any mistakes or complete missing information we hold on you;
▪ Require us to erase your personal information in certain circumstances;
▪ Receive a copy of the personal information you have provided to us or have this
information be sent to a third party, this will be provided to you or the third party in a
structured, commonly used and machine readable format;
▪ Object at any time to processing of your personal information for direct marketing;
▪ Object in certain other situations to the continued processing of your personal
information;
▪ Restrict our processing of your personal information in certain circumstances;
▪ Request not to be subject to automated decision making which produce legal effects
that concern you or affect you in a significantly similar way;
If you want more information about your rights under the GDPR please see the Guidance
from the Information Commissioners Office on Individual’s rights under the GDPR.
If you want to exercise any of these rights, please:
▪ Email, call or write to us. Our data protection Manager is Jo Pickersgill jop@no5.com
▪ Provide other information so that we can identify you (a passport, driving licence or
utility bill). We may need to contact you to request further information to verify your
identity;
▪ Let us have proof of your identity and address;
▪ State the right or rights that you wish to exercise;
We will respond to you within one month from when we receive your request. Please note if
you wish to unsubscribe from any email you can do so by emailing marketing@no5.com. It
may take 5 days for this to become effective.
Accessing and Correcting Your Information
You may request access to, correction of, or a copy of your information by contacting us at
marketing@no5.com.
Marketing Opt-Outs
You may opt out of receiving marketing emails and other messages from our organisation by
following the instructions in those messages. You can unsubscribe at any time by selecting
the ‘unsubscribe’ link that appears in every email.
Cookies
Cookies are small text files that are stored on your browser or device by websites, apps,
online media, and advertisements. We use cookies to:
▪ Validate users;
▪ Remember user preferences and settings;
• Determine frequency of accessing our content;
▪ Measure the effectiveness of advertising campaigns; and
▪ Analyse site visits and trends.
Following a link to another website
If you go to another website from this one, read the privacy policy on that website to find out
what it does with your information.
Following a link to No5.com from another website
If you come to No5.com from another website, we may receive information from the other
website. We do not use this data. You should read the privacy policy of the website you
came from to find out more about this.
We will occasionally update our Privacy Notice. When we make significant changes, we
will notify you of these through either mail or email. We will also publish the updated Notice
on our website.