(A) This Policy

This Policy explains how we may Process your Personal Data. This Policy may be amended or updated from time to time, so please check it regularly for updates

(B) Collection of Personal Data

We may collect or obtain Personal Data about you: (i) directly from you (e.g., where you contact us); (ii) in the course of our relationship with you (e.g., if we provide legal advice to you); (iii) when you make your Personal Data public (e.g., if you make a public post on social media); (iv) when you download, install, or use any of our Apps; (v) when you visit our Sites; (vi) when you register to use any of our services; or (vii) when you interact with any third party content or advertising on a Site or in an App. We may also receive Personal Data about you from third parties (e.g., law enforcement authorities)

(C) Creation of Personal Data

We may create Personal Data about you (e.g., records of your interactions with us)

(D) Categories of Personal Data we may Process

We may Process: (i) your personal details (e.g., your name); (ii) demographic data (e.g., your age); (iii) your contact details (e.g., your address); (iv) matter details (e.g., your instructions to us); (v) records of your consents to our Processing of your Personal Data; (vi) payment details (e.g., your billing address); (vii) information about your use of our Sites and Apps (e.g., the type of device you are using); (viii) details of your current employer; (ix) information about your interactions with our content or advertising; and (x) any views or opinions you provide to us

(E) Sensitive Personal Data

Where we need to Process your Sensitive Personal Data for a legitimate purpose, we do so in accordance with applicable law

(F) Purposes of Processing and legal bases for Processing

We Process Personal Data for the following purposes: providing our Sites, Apps, and services to you; compliance checks; operating our business; communicating with you; managing our IT systems; health and safety; financial management; conducting surveys; ensuring the security of our premises and systems; conducting investigations where necessary; compliance with applicable law; improving our Sites, Apps, and services; fraud prevention; and recruitment and dealing with job applications

(G) Disclosure of Personal Data to third parties

We may disclose your Personal Data to: (i) legal and regulatory authorities; (ii) our external advisors; (iii) our Processors; (iv) any party as needed in connection with legal proceedings; (v) any party necessary for investigating, detecting or preventing criminal offences; (vi) any purchaser of our business; and (vii) any third party providers of advertising, plugins or content used on our Sites or our Apps

(H) International transfer of Personal Data

We may transfer your Personal Data to recipients in other countries. Where we transfer Personal Data from the EEA to a recipient outside the EEA that is not in an Adequate Jurisdiction, we do so on the basis of Standard Contractual Clauses

(I) Data security

We implement appropriate technical and organisational security measures to protect your Personal Data. Please ensure that any Personal Data that you send to us are sent securely

(J) Data accuracy

We take every reasonable step to ensure that your Personal Data are kept accurate and up-to-date and are erased or rectified if we become aware of inaccuracies

(K) Data minimisation

We take every reasonable step to limit the volume of your Personal Data that we Process to what is necessary

(L) Data retention

We take every reasonable step to ensure that your Personal Data are only retained for as long as they are needed

(M) Your legal rights

Under applicable law, you may have a number of rights, including: (i) the right not to provide your Personal Data to us; (ii) the right of access to your Personal Data; (iii) the right to request rectification of inaccuracies; (iv) the right to request the erasure, or restriction of Processing, of your Personal Data; (v) the right to object to the Processing of your Personal Data; (vi) the right to have your Personal Data transferred to another Controller; (vii) the right to withdraw consent; (viii) and the right to lodge complaints with Data Protection Authorities. We may require proof of your identity before we can give effect to these rights.

(N) Cookies and similar technologies

We may Process your Personal Data by our use of Cookies and similar technologies.

(O) Disclaimers and Notices

Our Disclaimers and Notices at https://cmxlaw.com/disclaimer-notices/ govern all use of our Sites and our Apps

(P) Direct marketing

We may Process your Personal Data to contact you with information regarding services that may be of interest to you. You may unsubscribe for free at any time

(Q) Contact details

You may contact us at:

The Data Protection Officer
Crath Miller & Xistris LLP
1177 Avenue of the Americas, 5th Floor
New York, New York 10036

Email: info@cmxlaw.com