Pathway Legal Services is committed to protecting the rights and freedoms of individuals in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Pathway Legal Services complies with the following principles:
- Lawfulness, fairness, and transparency - we process personal data lawfully and transparently.
- Purpose limitation - we collect data only for specified, explicit, and legitimate purposes.
- Data minimisation - we process only date necessary for our services.
- Accuracy - we keep data accurate and up to date.
- Storage limitation - we retain data only as long as necessary. After 6 years we are able to destroy and get rid of data.
- Integrity and confidentiality - we ensure security of personal date.
- Accountability - we maintain records and demonstrate compliance.
Lawful Basis for Processing:
Pathway Legal Services processes personal data under the following bases:
- Contractual necessity - to deliver legal services
- Legal obligation - to comply with SRA rules, AML requirements, and statutory duties.
- Legitimate interests - to manage the business effectively.
- Consent - where required, e.g. marketing communications.
Types of Data Processed:
- Contact details (name, address, email, phone).
- identification documents (passport, driving licence, biometric cards).
- Case-related information (immigration history, family details, financial information).
- Special category data (health, ethnicity, political opinions) where necessary for legal services.
Data Retention:
- Client files are retained for six years after case closure unless otherwise required.
- Data is securely deleted or destroyed when no longer required.
We may share data with:
- Courts, Tribunals, and government agencies (e.g. Home Office).
- Opposing parties and their legal representatives.
- Expert witnesses and barristers.
- Regulators (e.g. SRA, ICO).
All sharing is lawful, proportionate, and subject to confidentiality obligations.
Data Security:
Clients and individuals have the right to:
- Access their date.
- Rectify inaccurate date.
- Request erasure (where legally permissible).
- Restrict processing.
- Data portability.
- Object to certain processing.
Requests should be sent to info@pathwaylegalservices.co.uk.