Transparency information for mentoring
Here's some key information about how we process personal data for mentoring:
The data controller is decoded.legal Limited. Here are our contact details.
What data we hold
If you contact us about mentoring, we will hold the following information about you:
- Your name, identity and contact information
- Anything you tell us
Using your information
References to the basis of processing (e.g. "(Basis: Art. 6(f).)") are a reference to the article of the General Data Protection Regulation under which we undertake the processing in question.
If you ask us about mentoring: seeing if we can mentor you, and liaising with you about it. (Basis: Art. 6(1)(f): we have to do this for the legitimate interest of operating this mentoring programme.)
- We will hold your data to handle your enquiry. If we agree to keep your details on file until we have some time available, then we will agree that with you at the time. Otherwise, subject to our professional and legal obligations, we will delete your details promptly after our correspondence concludes.
If we mentor you: engaging in the mentoring which we agree with you.(Basis: Art. 6(1)(f): we have to do this for the legitimate interest of operating this mentoring programme.)
- We will hold your data to engage in mentoring with you. Subject to our professional and legal obligations, we will delete your details promptly after our mentoring relationship end, unless otherwise agreed.
In all cases: complying with our professional and legal obligations. (Basis: Art. 6(1)(c): we have to do this processing to comply with legal and regulatory obligations.)
- We will hold personal data for as long as we need to satisfy our professional and legal obligations. It's hard to say what that might look like in the abstract.
Your data and the UK
We do not transfer or process data outside the UK unless we have your specific consent or where the nature of the processing requires it (for example, if you are based outside the UK, or because you have chosen to use an email or other communications service which routes data outside the UK).
Occasionally, we may process your data when we are outside the UK (for example, when on business or even if we are on holiday) — if this might be a problem for you, please let us know, and we can discuss.
As a general principle, we will not transfer your personal data to third parties without your permission.
There are three exceptions to this:
- As solicitors, we have legal and professional duties, including to to co-operate with our regulator, the Solicitors Regulation Authority, and in favour of our clients. We will do what we can, if we agree to mentor you, to discuss boundaries and "off limits" topics, to minimise the need to share anything with others.
- It is possible, though highly unlikely, that we might be forced to disclose your information in response to a court order or other binding mandate.
- You tell us something which makes us think we need to contact the emergency services, or law enforcement. For example, if we think your life is at risk. Please note that we are offering mentoring, not crisis help.
We also have a small number of companies providing services to us. We use telephony services, which would get to see your phone number if we call you, and a broadband supplier which could see your email address if your own email server does not support opportunistic TLS (but not the content of what you send us, if you encrypt it).
You have lots of rights in respect of our processing of your personal data. The relevant rights are:
- get access to your personal data and information about our processing of it
- asking us to fix errors
- in some circumstances, object to, or restrict our processing of your data, and compel us to erase your personal data
If you want to exercise any of these rights, please just contact us.
You also have the right to lodge a complaint about our processing with a supervisory authority — you probably want the UK's Information Commissioner's Office.