Multinational Law Limited ("Multinational Law", "we", "us") respects your privacy. This policy explains how we collect, store and use personal data in accordance with the EU General Data Protection Regulation (EU GDPR), the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018. Multinational Law Limited is the controller of the personal data described in this policy.
How do we collect your personal data
We collect personal data directly from you, for example when you contact us, book a call, instruct us or attend one of our events. We may also receive personal data from the organisation you work for or its representatives, from publicly available sources, from our clients, from regulators and other authorities, and from our service providers.
Providing your personal data is generally optional. However, if you choose not to provide certain information, we may not be able to provide our services to you or respond to your request.
How do we use your personal data
We process personal data where it is necessary for our legitimate interests (such as running our practice, developing client relationships and keeping our systems secure), to comply with our legal and regulatory obligations, or to perform a contract with you or take steps at your request before entering into one.
We do not generally rely on consent to process your personal data, except where we are required to do so, for example for direct marketing on behalf of third parties. We do not sell your personal data, and we do not expect to make decisions about you based solely on automated processing.
Visitors to our website, microsites and users of our client portal
When you visit our website, cookies and similar technologies may collect technical information about your visit, such as your device, browser and the pages you view. Where you use a client portal or other restricted area, we process your login credentials to manage your access to those tools and areas.
Thought leadership, briefings, podcasts and events
If you subscribe to our updates or register for our events, we store your contact details and preferences in our client relationship management system. We use them to send you newsletters and briefings, invite you to events and manage your opt-outs. You can unsubscribe at any time using the link in our emails or by contacting us.
Where you or your organisation are a client, we also process personal data to carry out client due diligence, manage matters, issue invoices and respond to requests from regulators and other authorities.
Applicants, work experience and open days
Applications must be submitted through our recruitment system, which has its own privacy statement explaining how your data is handled. We do not accept applications submitted by other means.
Visitors to our premises
When you visit our premises, we may collect your identity details and keep visitor records, and we may record CCTV images and process data relating to your use of our guest Wi-Fi. We do this for security purposes and to comply with our legal obligations.
People who contact us
When you contact us, or book a call with us through our website, we process your contact details and the information you share with us in order to respond to your enquiry and arrange your call. We do this on the basis of our legitimate interest in responding to enquiries. Our website and booking service is provided by Wix.com, which processes this data on our behalf.
Suppliers and other third parties
We keep the contact, billing and payment details of our suppliers and other third parties in order to manage our relationship with them and to meet our contractual and legal obligations.
Your rights in relation to your personal data
Subject to applicable law, you have the right to:
- access the personal data we hold about you;
- have inaccurate personal data corrected;
- have your personal data deleted in certain circumstances;
- object to, or ask us to restrict, our processing of your personal data;
- withdraw your consent where we rely on consent; and
- receive your personal data in a portable format.
To exercise any of these rights, please contact our Data Protection Officer at DPO@multinationalaw.com.
You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ico.org.uk). In the European Union, you may contact the data protection authority in the country where you live or work.