What is GDPR?

General Data Protection Regulation

New legislation comes into force on 25th May 2018 with the aim of strengthening the rights of individuals and transforming the way personal data is collected, shared and used.

As with all businesses, Nelson Myatt Solicitors are reviewing our compliance as new legislation comes in.  We already take client confidentiality and data processing very seriously and so we are already in line with most of the new rules.

This newsletter is being sent out to inform you of your rights as things change and to check with you whether you want us to use the details we have to stay in contact with you.

One of the changes affects marketing as consent must be given and not assumed.

Data Nelson Myatt Solicitors hold about you

Due to the nature of our work and Solicitors rules we will often have legitimate reasons to securely store data about the work we have done for you – this is to ensure we don’t breach conflict rules in the future and so that we have records of the legal work we have done for you. 

However, that doesn’t mean that we can use that information for whatever we want.


This is why we are contacting you to ask if we can use the contact details we have for you to send occasional newsletters and communications to you about Nelson Myatt Solicitors and things which we think may be of interest to you.


What are the rules for processing my data?

Data can only be processed if there is at least one lawful basis to do so. The lawful bases for processing data are:

  • I have given consent to the processing of my personal data for one or more specific purposes.

  • processing is necessary for the performance of a contract to which I am party or in order to take steps at the request of the data subject prior to entering into a contract.

  • processing is necessary for compliance with a legal obligation to which the controller is subject.

  • processing is necessary in order to protect my vital interests or those of another natural person.

  • processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

  • processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by my interests or fundamental rights and freedoms which require protection of personal data, in particular if a child.



Where consent is used as the lawful basis for processing, the consent must be explicit for data collected and the purposes data is used for. Consent for children must be given by the child’s parent or custodian, and verifiable. Data controllers must be able to prove "consent" (opt-in) and consent may be withdrawn.


What to do if I have concerns

If you believe that a company is sending you material without your consent then you can contact them to opt out of receiving those marketing materials.  If they continue to send communications you don’t want to you then you can get advice on what to do next here -



If you don’t want to receive our newsletters but still want to know what’s going on then remember you can follow us on Facebook or Twitter

I agree to recieve occasional newsletters