Privacy Policy
At Parry Field Lawyers Limited we take privacy very seriously and we comply with all applicable privacy and data protection laws when dealing with personal information.
We encourage you to read this Privacy Policy carefully. It will help you make informed decisions about sharing your personal information with us. The defined terms in this Privacy Policy have the same meaning as in our Terms of Engagement, which you should read together with this Privacy Policy. By accessing our Website and/or engaging us to provide legal services under our Terms of Engagement (“Services”), you consent to the terms of this Privacy Policy and agree to be bound by it and our Terms of Engagement. If there is any conflict between this Privacy Policy and the Terms of Engagement then the Terms of Engagement prevail.
If you are based in the European Union and use our Website and/or Services, the additional terms in the addendum to this Policy (“GDPR Addendum”) apply to you.
This Policy does not limit or exclude any of your rights under applicable privacy and data protection laws.
1.0 Parry Field Lawyers Limited may collect your personal information
Parry Field Lawyers Limited is a provider of legal services to its clients who have agreed to the Terms of Engagement. The Services involve the collection and storage of personal information on our clients and other visitors to our website or offices which may include information about an identifiable individual, and may include information such as an individual’s name, date of birth, location of birth, country of residence, asset ownership history, employment history, family status, IRD number, bank account information and contact details for individuals and companies (physical address, email address, fax number and landline and/or mobile telephone number or other contact information you provide us) as well as information on companies, trusts or other entities associated with the individual. We also collect information about how you use our Website (for example, traffic volumes, time spent on pages), your IP address and/or other device identifying data, information contained in your correspondence with us or survey responses and other information required to provide a service or information you have requested from us.
Parry Field Lawyers Limited collects and holds personal information directly from you when you
- become a client and we provide you with the Services;
- make a request for provision of legal services; or
- visit our Website or offices.
You can always choose not to provide your personal information to Parry Field Lawyers Limited, but it may mean that we are unable to provide you with the Services.
2.0 Parry Field Lawyers Limited may receive personal information from you about others
Through your use of the Services, Parry Field Lawyers Limited may also collect information from you about someone else where you have authorised us to do so (for example, by choosing a feature of the Website that contemplates the interaction with a third party website or feature) or where the information is publicly available. If you provide Parry Field Lawyers Limited with personal information about someone else, you must ensure that you are authorised to disclose that information to Parry Field Lawyers Limited and that, without Parry Field Lawyers Limited taking any further steps required by applicable data protection or privacy laws, Parry Field Lawyers Limited may collect, use and disclose such information for the purposes described in this Privacy Policy.
This means that you must take reasonable steps to ensure the individual concerned is aware of and/or consents to the various matters detailed in this Policy, including the fact that their personal information is being collected, the purposes for which that information is being collected, the intended recipients of that information, the individual’s right to obtain access to that information, Parry Field Lawyers Limited’s identity, and how to contact Parry Field Lawyers Limited.
3.0 Parry Field Lawyers Limited collects, holds, and uses your personal information for limited purposes
Parry Field Lawyers Limited collects personal information so that we can provide you with the Services and any related services you may request as well as providing you with access to our website. In doing so, Parry Field Lawyers Limited may use the personal information collected for purposes related to the Services including to:
- verify your identity and undertake credit checks of you (if necessary),
- provide the Services to you,
- market our services and products relating to the Services to you and send you newsletters and up to date information on legal changes, including contacting you via text, email or other electronic means for this purpose (you can opt out of this by contacting us at any time),
- carry out training of our personnel in relation to the Services,
- comply with laws and regulations in applicable jurisdictions,
- communicate with you, including in response to a complaint,
- bill you and to collect money that you owe us, including authorising the processing of credit card transactions,
- monitor your compliance with the Terms of Engagement, and
- for any other purpose authorised by you or any applicable privacy laws.
We may transfer your information in the case of a sale, merger, consolidation, liquidation, reorganisation or acquisition.
By using our website or asking us to provide you with the Services, you consent to your personal information being collected, held and used in this way and for any other use you authorise. Parry Field Lawyers Limited will only use your personal information for the purposes described in this Privacy Policy or with your express permission.
4.0 Parry Field Lawyers Limited can aggregate your non-personally identifiable data
By using the Services, you agree that Parry Field Lawyers Limited can access, aggregate and use non-personally identifiable data collected from you. This data will in no way identify you or any other individual.
Parry Field Lawyers Limited may use this aggregated non-personally identifiable data to:
- assist us to better understand how our clients are using the Services and our Website, for example, frequency, busiest days of the month, quantity of payments made, and most popular web pages;
- provide our clients with further information regarding the uses and benefits of the Services,
- enhance business productivity, including by creating useful business insights from that aggregated data, and
- otherwise improve the Website and the Services.
5.0 Transfers and storage of personal information
All data, including personal and non-personal information, that is provided to us or entered into the Website by you, or automatically imported on your instruction, is transferred to Parry Field Lawyers Limited’s servers as a function of transmission across the Internet. By using the Services, you consent to your personal information being transferred to our servers as set out in this Privacy Policy.
Businesses that support the Website or the Services may be located outside of the country in which you are located, including outside the European Economic Area (EEA). Please see the GDPR Addendum for further information about personal data transfers from the EEA.
As at the date of this Policy, our servers are located in New Zealand (hosted by Commarc) with on-site backups in our Riccarton office that are copied to the CommArc Cloud. This is hosted in a Christchurch datacentre. Off-site monthly copies are permanently stored with Iron Mountain in Christchurch. In Australia, servers are hosted by Microsoft Azure Services (through Vigilance) and Amazon Web Services (through RealAML). Your personal information will be routed through, and stored on, those servers as part of the Services. The website is hosted by WP Engine. All the certificates related to the website are from Comodo. Any agreements with Microsoft we or our providers have include the standard contractual clauses approved by the European Union’s Article 29 Working Party under the EU Data Protection Directive 95/46/EC. If the location of our servers changes in the future, we will update this Policy. You should review our Privacy Policy regularly to keep informed of any updates.
Parry Field Lawyers Limited is located in, and may access your personal information from, New Zealand. New Zealand is recognised by the European Commission as a country that ensures an adequate level of data protection and we rely on this decision in transferring personal information to New Zealand.
By providing your personal information to Parry Field Lawyers Limited, you consent to Parry Field Lawyers Limited storing your personal information on servers hosted by Microsoft and accessing your personal information from New Zealand. While your personal information will be stored on servers located in Australia and New Zealand, it will remain within Parry Field Lawyers Limited’s effective control at all times. The server host’s role is limited to providing a hosting and storage service to Parry Field Lawyers Limited, and we’ve taken steps to ensure that our server hosts do not have access to, and use the necessary level of protection for, your personal information.
If you do not want your personal information to be transferred to a server located in the above named locations, you should not provide Parry Field Lawyers Limited with your personal information or engage us to provide the Services.
6.0 Parry Field Lawyers Limited takes steps to protect your personal information
Parry Field Lawyers Limited is committed to protecting the security of your personal information and will at all times act carefully, to a high standard and in accordance with best industry practice. We take all reasonable steps to protect that information from unauthorised access, modification or disclosure. Your personal information is stored on secure servers that have SSL Certificates issued by leading certificate authorities. Email is sent using TLS (secured) where both the sending and receiving email support that, the protocol is decided at handshake and our system supports (and enforces where available) the secure send/receive.
However, the Internet is not in itself a secure environment and we cannot give an absolute assurance that your information will be secure at all times. Transmission of personal information over the Internet is at your own risk and you should only provide personal information to us for the provision of the Services within a secure environment.
We will advise you at the first possible opportunity upon discovering or being advised of a security breach where your personal information is lost, stolen, accessed, used, disclosed, copied, modified, or disposed of by any unauthorised persons or in any unauthorised manner.
7.0 Parry Field Lawyers Limited only discloses your Personal Information in limited circumstances
Parry Field Lawyers Limited will only disclose the personal information provided to us by you to entities outside of Parry Field Lawyers Limited if it is necessary and appropriate to facilitate the purpose for which your personal information was collected pursuant to this Policy, including the provision of the Services, and as outlined in our Terms of Engagement in clause 4.
The third parties who host our servers do not control, and are not permitted to access or use your personal information except for the limited purpose of storing the information.
We share information about your use of the Website with our advertising and analytics partners through the use of cookies, web beacons and similar storage technologies. Please refer to the Cookies section of this Policy for further information.
8.0 Parry Field Lawyers Limited does not store your credit card details
If you choose to pay for the Services by credit card, your credit card details are not stored by us and cannot be accessed by Parry Field Lawyers Limited staff.
9.0 You may request access to your personal information
It is your responsibility to ensure that the personal information you provide to us is accurate, complete and up-to-date. Subject to certain grounds for refusal set out at law, you may request access to the readily retrievable personal information we hold about you, or request that we update or correct any personal information we hold about you, by setting out your request in writing and sending it to us at legalease@parryfield.com.
Parry Field Lawyers Limited will process your request as soon as reasonably practicable, provided we are not otherwise prevented from doing so on legal grounds and provided that you first provide us with evidence to confirm that you are the individual to whom the personal information relates. If we are unable to meet your request, we will let you know why. For example, it may be necessary for us to deny your request if it would have an unreasonable impact on the privacy or affairs of other individuals, or if it is not reasonable and practicable for us to process your request in the manner you have requested. If you request a correction and we do not make that correction, we will take reasonable steps to note on the personal information that you requested the correction.
We may charge you our reasonable costs of providing to you copies of your personal information or correcting that information.
We’ll only keep your personal information for as long as we require it for the purposes of fulfilling the purposes for which we have collected that information. However, we may also be required to keep some of your personal information for specified periods of time, for example under certain laws relating to law firms, money laundering, and financial reporting legislation.
10.0 Parry Field Lawyers Limited uses cookies
In providing the Website and our Services, Parry Field Lawyers Limited utilises “cookies”. A cookie is a small text file that is stored on your computer for record-keeping purposes. A cookie does not identify you personally or contain any other information about you but it does identify your computer.
Parry Field Lawyers Limited may use a combination of “persistent cookies” (cookies that remain on your hard drive for an extended period of time) and “session ID cookies” (cookies that expire when you close your browser) on the Website and our Services, to for example, track overall website usage, and track and report on your use and interaction with ad impressions and ad services.
You can set your browser to notify you when you receive a cookie so that you will have an opportunity to either accept or reject it in each instance. However, you should note that refusing cookies may have a negative impact on the functionality and usability of the Website. Note, Parry Field Lawyers Limited does not respond to or honour “Do Not Track” requests at this time.
When you visit the Website, Parry Field Lawyers Limited may use performance cookies.
Performance cookies collect information about how you use the Website e.g. which pages are the most visited and if you receive any error messages from any pages. These cookies do not gather information that identifies you. All information these cookies collect is anonymous and only used to improve how the Website works. Parry Field Lawyers Limited may receive reports from third party analytics partners as aggregate numbers and trends.
11.0 You can opt-out of any email communications
Parry Field Lawyers Limited sends billing information, Parry Field Lawyers Limited updates, newsletters and information, Services updates and notifications to you via email. Our emails will contain clear and obvious instructions describing how you can choose to be removed from any mailing list not essential to the Services. Parry Field Lawyers Limited will remove you from our mailing list at your request. Opting out of email communications will not remove you from receiving emails about breaches (where applicable) or changes to the Privacy Policy or Terms of Engagement.
12.0 Parry Field Lawyers Limited has a privacy complaints process
If you wish to complain about how we have handled your personal information, please provide our Privacy Officer with full details of your complaint and any supporting documentation:
- by e-mail at legalease@parryfield.com, or
- by letter to The Privacy Officer, Parry Field Lawyers Limited, PO Box 8020, Christchurch 8440
Our Privacy Officer will endeavour to:
- provide an initial response to your query or complaint within ten (10) business days, and
- investigate and attempt to resolve your query or complaint within thirty (30) business days or such longer period as is necessary and notified to you by our Privacy Officer.
13.0 This policy may be updated from time to time
Parry Field Lawyers Limited reserves the right to change this Policy at any time, and any amended Policy is effective upon posting to this Website. Your continued access to or use of the Website or the Services will be deemed to be your acceptance of any amended Policy.
This Policy was last updated on 1 June 2021
GDPR addendum
If you are based in the European Union (“EU”) and use the Website and/or engage us to provide the Services, these additional terms (“GDPR Addendum”) form part of the Parry Field Lawyers Limited Privacy Policy.
The EU General Data Protection Regulation (“GDPR”) regulates the collection, processing and transfer of EU individuals’ personal data (as defined in the GDPR). The personal information described in the Parry Field Lawyers Limited Privacy Policy is personal data under the GDPR. We are committed to complying with the GDPR when dealing with personal data of visitors to the Website and users of the Services based in the EU.
This GDPR Addendum was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of our collection and use of personal data. However, we are happy to provide any additional information or explanation needed. Any requests for further information should be sent to legalease@parryfield.com.
For the purposes of the GDPR Parry Field Lawyers Limited is the data controller (as defined in the GDPR) when processing personal information and Commarc, Vigilance and Happy Monday Ltd are data processors.
1.0 Processing personal data
The personal data we may process consists of the personal information described in the Privacy Policy. We may process the personal information for the purposes outlined in the Privacy Policy.
The legal basis for our processing of personal information is your consent or that processing is necessary for the performance of a contract to which you are a party or that processing is necessary for compliance with a legal obligation to which we are subject under applicable laws.
Despite the above, we may process any of your personal data where such processing is necessary for compliance with applicable laws.
You do not have to provide us with any data to access and use the website. However, you must provide us with your name and email address when using some of our services, such as signing up for our newsletter. The consequence of not providing your name and email address is that we will not be able to provide all of our services to you.
2.0 Your rights
Your rights in relation to your personal data under the GDPR include:
- right of access – if you ask us, we will confirm whether we are processing your personal data and provide you with a copy of that personal data.
- right to rectification – if the personal data we hold about you is inaccurate or incomplete, you have the right to have it rectified or completed. We will take every reasonable step to ensure personal data which is inaccurate is rectified. If we have shared your personal data with any third parties, we will tell them about the rectification where possible.
- right to erasure – we delete your personal data when it is no longer needed for the purposes for which you provided it. You may request that we delete your personal data and we will do so if deletion does not contravene any applicable laws. If we have shared your personal data with any third parties, we will take reasonable steps to inform those third parties to delete such personal data.
- right to withdraw consent – if the basis of our processing of your personal data is consent, you can withdraw that consent at any time.
- right to restrict processing – you may request that we restrict or block the processing of your personal data in certain circumstances. If we have shared your personal data with third parties, we will tell them about this request where possible.
- right to object to processing – you may request that we stop processing your personal data at any time and we will do so to the extent required by the GDPR.
- rights related to automated decision making, including profiling – you have a right to not be subject to a decision based solely on automated processing including profiling, which produces legal effects concerning you or similarly significantly affects you, except where such automated decision making is necessary for entering into, or the performance of, a contract with you, is authorised by applicable laws or is based on your explicit consent. As at the date of this GDPR Addendum, Parry Field Lawyers Limited does not undertake any automated decision making or profiling using the personal information.
- right to data portability – you may obtain your personal data from us that you have consented to give us or that is necessary to perform a contract with you. We will provide this personal data in a commonly used, machine-readable and interoperable format to enable data portability to another data controller. Where technically feasible, and at your request, we will transmit your personal data directly to another data controller.
- the right to complain to a supervisory authority – you can report any concerns you have about our privacy practices to the relevant data protection supervisory authority.
Where personal data is processed for the purposes of direct marketing, you have the right to object to such processing, including profiling related to direct marketing.
If you would like to exercise any of your above rights, please contact us at legalease@parryfield.com. If you are not satisfied by the way your query is dealt with by our data protection officer, you may refer your query to your local data protection supervisory authority e.g. in the United Kingdom, this is the Information Commissioner’s Office.
3.0 Children
We do not intend to collect personal data from children aged under 16. If you have reason to believe that a child under the age of 16 has provided personal data to us through our website and/or by using our services, please contact our Privacy Officer.
4.0 International transfer of data
The personal information we collect through the Website and/or the provision of the Services may be transferred to, and stored in, a country operating outside the European Economic Area (EEA). Under the GDPR, the transfer of personal data to a country outside the EEA may take place where the European Commission has decided that the country ensures an adequate level of protection. In the absence of an adequacy decision, we may transfer personal data provided appropriate safeguards are in place.
As set out in the Parry Field Lawyers Limited privacy policy, some of the personal information we collect is processed by third party data processors in other countries, including Australia. Where personal information is transferred outside the EEA, it will only be transferred to countries or specified sectors within a country that have been identified as providing adequate protection for EEA data (e.g. to New Zealand or to organisations in the United States under the EU-U.S. Privacy Shield framework), or to a third party where we have approved transfer mechanisms in place to protect your personal data (e.g. by entering into the European Commission’s Standard Contractual Clauses). For further information, please contact us using the details set out in set out in our Privacy Policy.
5.0 Data Retention policy
Personal information that we collect and process will not be kept longer than necessary for the purposes for which it is collected, or for the duration required for compliance with applicable law, whichever is longer.
6.0 Contacting us
You can contact us as set out in our Privacy Policy.
