EJ Legal respects your privacy and is committed to protecting your personal data. This privacy notice provides information on how we collect and process your personal data through our website, and when you contact us by phone, email, or by writing to us.

1. Purpose and scope of privacy notice: data controller contact information

EJ Legal is a specialist legal recruitment agency, and our website and services are intended for adults aged 18 and over: we do not knowingly collect data relating to children.

It is important that you read this privacy notice together with any other privacy or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.

EJ Legal Limited is the controller and responsible for your personal data (collectively referred to as “EJ”, "we", "us" or "our" in this privacy notice). EJ Legal Limited is a company incorporated in England under registration number 02636241 and with registered offices at First Floor, 5 Fleet Place, London, EC4M 7RD.

We have appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice or the ways in which EJ processes your personal data, please contact the data privacy manager email on info@ejgroup.co.uk or by writing to EJ Legal Limited, 76 Canon Street, London, EC4N 6AE, marking the letter for the attention of The DPO.

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

2. The data we collect about you

Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you. This includes your full name, marital status, title, date of birth, gender, contact details including personal and business email addresses and phone numbers; your job title and role, current and previous employers, your education, academic record and professional qualifications, your notice period, current salary and other relevant information that you may provide when you send a CV to us or engage us to source candidates for you, roles that you have been put forward for and interviews that you have attended, roles that may be of interest to you based on your profile and what you have told us; information about how you use our website.

3. How is your personal data collected?

We use different methods to collect data from and about you including where you contact us to apply for one of our advertised vacancies or with a speculative application and as you use our website, we may automatically collect data about your browsing actions. We collect this personal data by using cookies and other similar technologies. Please see our cookie policy for more information on our use of cookies. Occasionally we may collect data about you from public sources including law firm websites and articles in the legal press to the extent that this is relevant to our recruitment business (for example, if you are a specialist in a niche area of legal practice).

4. How we use your personal data and the lawful basis for doing so

We will use your personal data as required for the services that we provide as a specialist legal recruitment agency: these uses include presenting roles or candidate profiles that may be of interest to you; managing the recruitment and interview process for clients and candidates; and using data analytics to improve our website. The lawful basis for us doing so is that this is necessary for the performance of a contract with you and/or for our legitimate interests in the efficient running of our recruitment business and to keep our website updated and relevant. If you do not agree to our processing of your personal data as required to manage the recruitment process, then we will not be able to present roles or candidates to you.

5. Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

6. Sharing your personal data

We will only share your personal data with: (a) our third party service providers of our cloud back-up storage system; (b) other third parties, where such disclosure is necessary to comply with applicable laws; (c) the acquirer(s), in a reorganisation or sale of our company or assets, (d) employers or candidates who will need to receive your personal data as required for the recruitment process; (e) we may also share personal data with Dandi Legal Limited, an affiliate company of EJ Legal. We may discuss candidates with our client(s) on a no names basis, but we do not provide a CV or any identifying information without the candidate's express consent.

7. Transferring your data outside of the UK

Do you transfer my personal data outside of the UK?

Normally, we do not transfer your personal data outside the UK.

We know that countries outside of the UK have different laws around protecting your personal data, and that some of these may provide your personal data with lower levels of protection than in the UK.

To make sure this does not happen, we always comply with UK laws designed to ensure the privacy of your personal data overseas, if we ever need to transfer your personal data to countries outside the UK. For example, your personal data may need to be transferred outside of the UK where we use suppliers located, or which store data on our behalf, outside of the UK.

This means we are only allowed to transfer your personal data to a country outside the UK if:

• the UK government has decided the country has laws that mean your personal data is adequately protected (known as an ‘adequacy regulation’). A list of “safe” countries the UK currently has adequacy regulations in relation to is available here or:

• we use specific standard contractual terms approved by the UK government (designed to give personal data the same protection as it has in the UK) in our contract with the supplier or other third party who we are sending the data to.

If you would like further information about data transferred outside the UK, please contact our Data Protection Officer (see Section 1 ‘Purpose and scope of privacy notice: data controller contact information’ above).

8. Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

For more information about the cookies we use, please see our cookie policy.

9. Data security

We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, accessed in an unauthorised way, altered, or disclosed. We have put in place procedures to deal with any suspected personal data breach and will notify the ICO and/or you of a personal data breach where we are legally required to do so.

10. Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements, and in line with our data retention policy.

11. Your legal rights and how to exercise them

You have the following data protection rights in relation to your personal data that apply in certain circumstances:

Right to erasure: You can ask us to erase or delete all or some of your personal data.

Change or correct data: You can also ask us to update the data we hold about you.

Object to, or limit, our use of your data: You can ask us to stop using all or some of your personal data or to limit our use of it.

Subject access requests and portability right: you can ask us for a copy of your personal data and can ask for a copy of personal data you provided in machine readable form.

If you wish to exercise any of the rights set out above, please contact info@ejgroup.co.uk.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.