Wayfound 

Introduction and Scope 

At Wayfound, we understand that your privacy is important. This Privacy Notice explains how we collect, use, disclose and protect personal information. 

When we refer to “information” in this Notice, we mean personal data relating to an identifiable individual, either directly or indirectly. 

This Notice applies to: 

• our website and domains 

• communications with Wayfound 

• the legal and professional services we provide 

• interactions with clients, prospective clients and third parties connected with legal matters. 

This Notice explains: 

• what personal data we collect 

• how and why we use it 

• who we share it with 

• how long we retain it 

• the legal basis for processing 

• your rights under data protection law. 

Who Is Responsible For Your Information 

Wayfound is responsible for your personal information. 

Wayfound acts as the data controller for the purposes of Regulation (EU) 2016/679 (GDPR) and the Data Protection Act 2018. 

If you wish to exercise any of your rights or contact us regarding data protection matters, please contact: 

Wayfound 
Ireland 

Email: info@wayfound.ie 

Who This Notice Applies To 

We process personal information relating to a number of categories of individuals, including those who may not have a direct relationship with Wayfound. 

These include: 

Clients and Related Individuals 

We collect and process information relating to: 

• prospective clients 

• current clients 

• former clients. 

We may also process information relating to individuals connected with clients, including: 

• employees 

• directors 

• shareholders 

• beneficial owners 

• partners 

• company secretaries 

• family members 

• beneficiaries and dependants. 

Individuals Relevant to Legal Advice 

In the course of providing legal advice or representation, we may process information relating to individuals involved in legal matters, including: 

• claimants and defendants 

• witnesses 

• expert witnesses 

• opposing parties 

• barristers 

• other solicitors 

• service providers connected with legal proceedings. 

Business and Professional Contacts 

We may also process information relating to: 

• website visitors 

• event attendees 

• professional contacts 

• individuals who subscribe to newsletters or updates. 

Sources of Information 

We obtain personal information from various sources, including: 

• directly from clients 

• from other solicitors or law firms 

• barristers 

• courts and tribunals 

• government departments 

• public registries such as the Companies Registration Office and Land Registry 

• experts and witnesses 

• insurers 

• publicly available sources 

• professional networking platforms 

• internet searches. 

Information We Collect and How We Use It 

In providing services we collect and process various categories of personal information. 

Legal and Professional Services 

If you are a client, we process personal information necessary to provide services. 

This may include: 

• contact details 

• identification documents 

• financial information 

• information relating to legal matters 

• communications and correspondence 

• client relationship management information. 

We process this information on the following legal bases: 

• performance of a contract 

• compliance with legal obligations 

• legitimate interests in providing services. 

Legal Advice Concerning Third Parties 

When providing legal advice to our clients we may process information relating to individuals who are not our clients but whose information is relevant to a legal matter. 

This processing is based on: 

• compliance with legal obligations 

• legitimate interests in providing services. 

Anti-Money Laundering Compliance 

We are required by law to conduct client due diligence under the Criminal Justice (Money Laundering and Terrorist Financing) Acts 2010–2021. 

For this purpose we may collect: 

• identification documents 

• proof of address 

• beneficial ownership information 

• politically exposed person (PEP) information. 

This processing is based on compliance with legal obligations. 

Website Use 

When you visit our website we may collect technical information such as: 

• IP address 

• browser type 

• device information 

• usage data. 

This information is used to: 

• maintain website security 

• analyse website usage 

• improve our services. 

Where marketing communications are sent, this is based on consent or legitimate interests, and you can unsubscribe at any time. 

Events and Communications 

If you attend events organised by Wayfound or register for communications, we may collect: 

• your name 

• contact details 

• employer and role 

• event attendance information. 

We may also capture photographs or videos during events. If you object, you may notify us at the time. 

This processing is based on legitimate interests in marketing and promoting our services. 

Office Visitors 

If you visit our offices, CCTV may capture your image for security purposes. 

This processing is based on: 

• legitimate interests in maintaining safety and security 

• compliance with legal obligations. 

Sensitive Information 

In providing legal services we may process special categories of personal data, including information relating to: 

• health 

• religious beliefs 

• racial or ethnic origin 

• political opinions 

• sexual orientation 

• criminal convictions. 

This processing occurs only where necessary for: 

• providing legal advice 

• establishing or defending legal claims 

• complying with legal obligations. 

We rely on the exemptions provided under Article 9 GDPR and the Data Protection Act 2018. 

Sharing Your Information 

We may share personal information with third parties where necessary to provide services or comply with legal obligations. 

These may include: 

• barristers 

• other solicitors or law firms 

• courts and tribunals 

• mediators and arbitrators 

• experts and witnesses 

• insurers 

• government departments 

• regulators 

• IT service providers 

• document storage providers. 

Where third parties act as processors, they are contractually required to process information only on our instructions. 

International Transfers 

In some circumstances personal data may be transferred outside the European Economic Area (EEA). 

Where this occurs we ensure that appropriate safeguards are in place, including: 

• transfers to countries deemed adequate by the European Commission 

• Standard Contractual Clauses approved by the European Commission 

• transfers necessary for legal claims or legal services. 

Retention of Information 

We retain personal information only for as long as necessary for the purposes for which it was collected. 

In general: 

• legal files may be retained for 6 to 15 years following completion of a matter 

• AML records are retained in accordance with statutory requirements 

• CCTV footage is typically retained for 30 days, unless required for investigation. 

Retention periods are determined having regard to: 

• legal obligations 

• regulatory guidance 

• the sensitivity of the information 

• potential legal claims. 

Your Rights 

Under data protection law you have several rights in relation to your personal data. 

These include the right to: 

Access 

Request access to personal information we hold about you. 

Data Portability 

Request that certain personal information be transferred to you or another organisation. 

Rectification, Restriction and Erasure 

Request correction, restriction or deletion of personal data in certain circumstances. 

Object 

Object to processing based on legitimate interests or for marketing purposes. 

Withdraw Consent 

Where processing is based on consent, you may withdraw consent at any time. 

Complain 

You have the right to lodge a complaint with the Irish supervisory authority: 

Data Protection Commission 

Legal Privilege and Restrictions on Rights 

Certain rights under GDPR may be restricted where the information is subject to legal professional privilege or where processing is necessary for the establishment, exercise or defence of legal claims, as recognised under the Data Protection Act 2018. 

Changes to This Notice 

Wayfound may update this Privacy Notice from time to time. 

Where material changes are made, we will take appropriate steps to notify individuals, including through our website. 

Contact 

If you have any questions about this Notice or wish to exercise your rights, please contact: 

Wayfound 
Ireland 

Email: info@wayfound.ie