Christopher Yaffes Divorce & Family Mediation Privacy policy

This privacy policy sets out how Christopher Yaffes Divorce & Family Mediation uses and protects any information you give us in accordance with the General Data Protection Regulations(GDPR).

Any information you provide us will only be used in accordance with this

privacy statement. We will never share your details with anyone else without your

express permission (your consent).

We are committed to ensuring your information is secure. In order to prevent

unauthorised access or disclosure we have put in place suitable physical, electronic and

managerial procedures to safeguard and secure the information we collect.

What information do we collect?

The contact information you provide us with is used to contact you and the other party

or client (and/or their legal representatives) as is necessary to help with the process of

mediation, for example to fulfil a query or arrange a mediation; or to provide

information about mediation. Mediations themselves are confidential and information

acquired during a mediation will be kept confidential except when disclosure is

demanded by the law or by agreement between the parties. An example if this is

an Open Financial Summary (OFS).

Data Protection

Christopher Yaffes Divorce & Family Mediation needs, or is required, to maintain personal data about living individuals in order to conduct its business. This includes data regarding:

• Current, past and prospective employees;
• Our enquirers, clients, or parties to mediation;
• Suppliers and those with whom we need to communicate.

In order to maintain that data FMS complies with the eight Data Protection Principles:

1. Personal data shall be processed fairly and lawfully.
2. Personal data shall be obtained only for one or more specified and lawful

purposes and shall not be further processed in any manner incompatible with

that purpose or those purposes.

3. Personal data shall be adequate, relevant and not excessive in relation to the

purpose or purposes for which they are processed.

4. Personal data shall be accurate and, where necessary, kept up to date.
5. Personal data processed for any purpose or purposes shall not be kept for longer

than is necessary for that purpose or those purposes.

6. Personal data shall be processed in accordance with the rights of data subjects

under this Act.

7. Appropriate technical and organisational measures shall be taken against

unauthorised or unlawful processing of personal data and against accidental loss

or destruction of, or damage to, personal data.

8. Personal data shall not be transferred to a country or territory outside the

European Economic Area unless that country or territory ensures an adequate

level of protection for the rights and freedoms of data subjects in relation to the

processing of personal data.

Reason for keeping Data

Christopher Yaffes Divorce & Family Mediation complies with the six headings for the lawful basis for keeping data:

• Legitimate interest
• Public Task
• Legal Obligation
• Consent
• Contract
• Vital Interest.

The majority of data will be captured, stored and used in compliance with items 1, 2 & 3,

legitimate interest, public task and legal obligation. Internally the data is used in the

process in and action of mediation. It is also used in accounting.

Data is kept for the minimal time necessary, but the time limits can be affected by legal obligation or legal necessity.

Special Category Data

Christopher Yaffes Divorce & Family Mediation only collects special category data when:

 When providing Child Inclusive Mediation the express consent of parent and child

is necessary and is recorded when secured.

Our Commitments

Christopher Yaffes Divorce & Family Mediation commits to ensuring we:

• Comply with the eight data protection principles (listed above)
• Meet our legal obligations as laid down by the Data Protection Act 1998
• Collect data fairly and lawfully
• Process personal data only to meet our operational needs or fulfil legal

requirements

• Work to make sure personal data is up to date and accurate
• Put in place appropriate retention periods for personal data
• Put in place adequate security measures to protect personal data
• Deal with data protection enquiries effectively and promptly.
• Review data protection procedures and guidelines within the organisation on a

             regular basis