What data I hold

If you contact me, Martin Hoskins, I will hold the following information about you:

  • Your name, identity and contact information
  • Information about your business activities
  • Information and documents about your matters or enquiries, including communications with you

Using your information

References to the basis of processing (e.g. "(Basis: Art. 6(1)(f).)") are a reference to the article of the General Data Protection Regulation under which I undertake the processing in question.

Dealing with enquiries

If you phone me or make contact by email, I will follow up on your enquiry and see if there is a way in which I can help you. I keep a record of enquiries received to help check that I am offering what potential clients want.

(Basis: Art. 6(1)(b): I need to use your details to follow up with you. Art. 6(1)(f): business planning is a legitimate thing for me to do and keeps me relevant and hopefully more in tune with your needs.)

Technical data

I may use the information derived from my website provider’s servers, if it is available, to determine visitor behaviour and help plan my strategy (e.g. such as working out which pages on the site are most popular, or whether particular events have caused an increase in traffic).

(Basis: Art. 6(1)(f): strategy planning is a legitimate, indeed sensible, thing for me to do.)

Your data and the UK

I do not transfer or process data outside the UK unless I have your specific consent or where the nature of the processing requires it (for example, where I am emailing a party to your matter who is based outside the UK, or because you have chosen to use an email or other communications service which routes data outside the UK).

Occasionally, to provide a high quality of service, I may work on your matters when I am outside the UK (for example, when on business or even if I am on holiday) — if this might be a problem for you, please let us know, and we can discuss.

Your rights

You have lots of rights in respect of our processing of your personal data. The relevant rights are:

  • get access to your personal data and information about my processing of it
  • in some circumstances, restrict my processing of your data for strategy planning purposes
  • object to my processing for strategy planning purposes and other "legitimate interests" purposes

If you want to exercise any of these rights, please just contact me.

You also have the right to lodge a complaint about my processing with a supervisory authority — such as the UK's Information Commissioner's Office.

Third parties

As a general principle, I will not transfer your personal data to third parties without your permission. However, it is possible, though extremely unlikely, that I might be forced to disclose your information in response to a court order or other binding mandate.

Technical security

My computers are full-disk encrypted, as are my phones and tablets.

Call recording

I do not record our calls.

Retention periods

Data about clients: duration of your relationship with me, then seven years.

Enquiry data: duration of enquiry, then one year.