Privacy Policy

Introduction

The use and disclosure of personal data are governed in the United Kingdom by the Data Protection Act 2018 (the Act).

This privacy policy explains;

  • The steps we take to ensure personal data we process is protected properly; and

  • The rights that individuals have in relation to the personal data we process

We treat the personal data that you provide to us as confidential. We will not disclose your data to third parties, except where necessary as explained in this privacy policy and in the Data Retention Policy, and where required by law to do so.

The Data Retention Policy can be found on the Brarista website.

We primarily gather personal data through your usage of the various functions on the website, such as the get started forms and contact us forms, for the purpose of finding relevant legal roles, to answer queries when you engage with us via the contact us form, and in relation to matters of regulation to also engage with the wider public in matters of business and regulation. In addition, we gather information about site usage to help serve you in finding relevant legal roles, and other information in order to protect the integrity of our website from malicious users.

The personal data gathered from you consists of:

  • Information collected when you voluntarily complete the ‘get started’ form on the home page of the website

  • Information collected when you voluntarily complete the ‘contact us’ form located on the contact us page of the website

  • Anonymous statistical information obtained using Google Analytics

  • Website cookies which we record whenever you use our website

  • Your IP address used to identify your location if you use any geo-location features on this website, and which we only use to show you relevant legal jobs in the form of an email sent by us to you, and which we do not store or share with third parties

 

What is personal data?

Personal data is any information we handle that relates to an identified or identifiable natural person. An ‘identifiable natural person is anyone who can be identified, directly or indirectly from information, including by reference to a name, identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

 

Our Contact Details

We take our data protection responsibilities seriously. We take great care to ensure we process your personal data properly to maintain your trust and confidence. But if at any point you have questions or concerns about your personal data, you can contact us using our email address: hello@brarista.co.

 

Why do we process your personal data?

Depending on who you are, we process your personal information for different reasons.

For applicants seeking legal jobs, the reasons primarily include:

  • Searching for legal roles that match your specific criteria provided on the form located in the home page

  • To send emails to you with a list of roles and tips that match the information given by you on the form located in the home page

For businesses seeking applicants to fill legal jobs, the reasons primarily include:

  • Seeking out candidates that match your job requirements

  • To send you emails with the list of candidates that match the job description given by you to us

 

Where do we get the personal data we process?

We collect personal data from two m sources, including:

  • Individuals who visit the website and interact with it (including by filling in and submitting forms)

  • Businesses who visit the website and interact with it (including by filling in and submitting forms)

 

What is our lawful basis for processing personal data?

For applicants, before submitting personal data to us, we will ask for your consent. If you do not give us consent, we will not process your personal data.

However, unless you enable us to process your data, we cannot do our job. For individuals, this means we will not be able to send you relevant job listings and other job recommendations. We have a legitimate purpose for processing your data, and cannot achieve our mission without doing so.

If you are a legal business contacting us via email with a job vacancy, we will ask you for consent. We must be able to process your data in order to find applicants to fill your vacancy, therefore we also have a legitimate purpose to process your data.

When submitting a general enquiry via the ‘contact us’ form or via email, we will ask for you to give consent to process your data. We must be able to process your personal data in order to answer your query, therefore we also have a legitimate purpose for processing your personal data.

As always, you can withdraw consent at any time. Simply send an email to hello@brarista.co.

 

What security measures do we use when processing your personal data?

We ensure that appropriate policy, training, technical and procedural measures are in place, including audit and inspection, to protect our manual and electronic information systems from data loss and misuse. We only permit access when there is a legitimate reason and under strict guidelines on what use may be made of any personal data contained within them. We continuously manage and enhance our compliance with relevant standards and guidance to achieve adequate and up-to-date personal data security.

 

How long do we retain your personal data?

We keep your personal data for as long as necessary for the particular purpose or purposes for which we hold it.

 

What are your rights over your personal data we process, and how can you exercise them?

Under the Data Protection Act 2018, you have a number of rights that you can exercise in relation to personal data we process about you. You do not have to pay to exercise your rights (other than a reasonable fee if a request for access is clearly unfounded or excessive but we agree to fulfil it anyway).

We sometimes need to request specific information from you to help us confirm your identity and ensure your authority to exercise these rights:

Right of Access: You can request access to the personal data we hold about you free of charge. Normally we will provide it within one month of receipt of your request unless an exemption applies. You can request access to the personal data we hold about you using the contact details in this privacy notice.

Right to be Informed: You are entitled to be told how we obtain your personal information and how we use, retain, and store it, and who we share it with. This privacy notice gives you that information, as well as telling you what your rights are under the relevant laws.

Right to Rectification: If we hold personal data about you that is inaccurate or incomplete you have the right to ask us to correct it. You can ask us to correct your personal data using the contact details in this privacy notice. We will reply to you within one month unless the request is complex.

Right to Request Erasure: You have the right to ask us to delete your personal data to prevent its continued processing where there is no justification for us to retain it. The circumstances most likely to apply are:

  • where holding your personal data is no longer necessary in relation to the purpose for which we originally collected and processed it;

  • where you withdraw your consent to us holding your personal data if we are relying on your consent to hold it.

The right of erasure does not apply if we are processing your personal data:

  • to comply with a legal obligation

  • for the performance of a task carried out in the public interest or in the exercise of official authority

  • for the establishment, exercise or defence of legal claims

  • to exercise the right of freedom of expression and information

  • for archiving purposes in the public interest, scientific research, historical research or statistical purposes where erasure is likely to make it impossible to carry out or seriously impair that processing.

  • If you want to ask us to delete your personal data you can do so using the contact details in this privacy notice. We will respond to you within one month unless the request is complex.

Right to Restrict Processing: Under certain circumstances, you have the right to ask us to restrict the processing of your personal data. This may be in cases where:

  • you are contesting the accuracy of your personal data while we are verifying the accuracy

  • your information has been unlawfully processed and you oppose its erasure and have requested a restriction instead

  • where we no longer require your personal data but you need it to establish, exercise or defend a legal claim and do not want us to delete it.

You can ask us to restrict the processing of your personal data using the contact details in this privacy notice.

Right to Data Portability: You have the right to obtain and reuse your personal information for your own purposes, transferring it from one environment to another. This right only applies to personal data provided by an individual, where the processing is based on their consent or for the performance of a contract and when that processing is carried out by automated means. If you wish to discuss this right, you can do so using the contact details in this privacy notice.

Right to Object: You have the right to object to:

  • processing based on legitimate interests or performance of a task in the public interest and or exercise of official authority

  • processing of your information for scientific and historical research and statistics

  • direct marketing.

Any objection must be on grounds relating to your particular situation. If you want to exercise your right to object you can do so using the contact details in this privacy policy.