Effective from 22 May 2018

This is the Data Protection policy (Privacy and Cookie) adopted by Green Legal Agents Limited (“Green Process Serving”)

1. This Policy is to protect the rights and privacy of living individuals and to ensure personal data is not processed by Green Process Serving without the individual’s (data subject’s) knowledge and consent, unless otherwise exempt.

2. This is a live document which is subject to revision from time to time dependant upon changes to legislation and other

3. Green Process Serving is notified with the Information Commissioner’s Office – registration ZA155675

4. Green Process Serving complies with the requirements of the General Data Protection Regulation (GDPR) when processing personal data, including the collection, storage, transfer and disclosure of personal data, also the deletion and destruction of data.

5. Green Process Serving protects the rights and privacy of individuals (subjects of investigations and others) in accordance with GDPR.

6. Green Process Serving needs to process certain information about its sub-contractors and other individuals it has dealings with such as clients for administrative purposes.

7. Green Process Serving’s core business activity is the provision of litigation support services, which involves miscellaneous investigation, locating individuals and process serving (delivery of legal documentation). Such activities are predominantly in connection with current or prospective legal proceedings, mainly in the Civil Law Courts. In consequence Green Process Serving may be instructed to process the personal data of individuals, identified in client instructions or during any investigation arising from The data we process originates from legally compliant, publicly available, open sources and personal data made public by the data subject. In addition, it may be provided by the Client under the lawful basis of Legitimate Interest.

8. Reasons/purposes for processing information: Green Process Serving processes personal information to enable the provision of investigatory and litigation support services, to maintain the company’s own accounts and records, also to

support and manage its employees.

9. Type/classes of information processed: Green Process Serving processes information relating to the above reasons/ purposes. This information may include:

• Personal details
• The investigation brief, results and related information
• Lifestyle and social circumstances
• Family details
• Goods and services
• Financial details
• Education and employment details

Green Process Serving also processes sensitive data/special categories of information that could include:

• Physical or mental health details
• Racial or ethnic origin
• Trade union membership
• Religious or other beliefs

10. Who the information is processed about: Green Process Serving processes personal information about:

• Customers and clients
• Witnesses
• The subjects of investigations
• Business contacts
• Advisers and other professional experts
• Suppliers

• Employees

11. Who the information may be shared with: Green Process Serving sometimes needs to share the personal information it processes with the individual themselves and with other Where this is necessary Green Process Serving will comply with all aspects of the Data Protection Act (DPA) and the GDPR. What follows is a description of the types of organisations Green Process Serving may need to share some of the personal information it processes with for one or more reasons. Where necessary or required Green Process Serving shares information with:

• Financial organisations
• Credit reference, debt collection and tracing agencies
• Police forces
• Professional investigators in the private sector
• Government
• Business associates and other professional bodies and advisers
• Suppliers
• Current, past or prospective employers
• Education and examining bodies
• Family, associates or representatives of the person whose personal data we are processing

12. Transfer of data overseas: It may sometimes be necessary to transfer personal information When this is needed information may be transferred to countries or territories around the world. Any transfers made will be in full compliance with all aspects of the DPA and GDPR.

13. Green Process Serving will not process personal data;

• Without first having completed a Data Privacy Impact Assessment
• Without the consent of the data subject, unless exempt or;
• Unless there is a specific legitimate interest or;
• Where such interests are overridden by the interests or fundamental rights of the data

14. Green Process Serving will adhere to the Principles and Requirements of the GDPR Specifically:

• Data shall be processed fairly and lawfully and shall not be processed unless specific conditions are met;
• Shall be obtained for only one or more specified lawful purposes and shall not be further processed in any manner incompatible with that purpose or those purposes;
• Shall be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed;
• Shall be accurate and where necessary kept up to date;
• Shall not be kept for longer than is necessary for that purpose or purposes;
• Shall be processed in accordance with the rights of data subjects under the GDPR;
• Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data;
• Shall not be transferred to a country or territory outside the participating member countries unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.

15. Green Process Serving will, through appropriate management, strict application of criteria and controls:

• Observe fully conditions regarding the fair collection and use of personal data;
• Meet its legal requirements to specify the purposes for which personal data is used;
• Collect and process appropriate data, and only to the extent that it is needed to fulfil operational needs or to comply with any legal requirements;
• Ensure the quality of data used;
• Apply strict checks to determine the length of time data is held;

• Ensure that the rights of individuals about who information is held, can be exercised. To include the right of the individual to be informed that processing is being undertaken (except where exempt), the right to access one’s personal information, the right to prevent processing in certain circumstances and the right to correct, rectify, block or erase information which is proven inaccurate;
• Take appropriate technical and organisation security measures to safeguard personal information;
• Ensure that personal data is not transferred without suitable safeguards

16. In addition, Green Process Serving will ensure that:
    • Any person managing and handling personal data understands that they are contractually responsible for following good data protection practice;
    • Any person managing and handling personal data is appropriately trained to do so;
    • Any person managing or handling personal data is appropriately supervised;
    • Any query concerning the handling of personal data is dealt with promptly and
    • Methods of handling personal data are clearly described and understood;
    • A regular review and audit is conducted regarding the way personal data is managed and that all personal data is deleted in a timely manner.

17. Green Process Serving is the Data Processor under data protection legislation when dealing with its core business as an Investigation Agency/Litigation Support Services Supplier and the client is the Data Controller.

18. All personal data will only be accessible to those who need to use Personal data will be held securely:

• In a locked room with controlled access, or
• In a locked drawer or filing cabinet, or
• If electronic, password protected, or
• If kept on other digital storage devices in a locked drawer or

19. Individual’s Rights: Under certain circumstances individuals have the right to:

• Request access to their personal This enables them to receive a copy of the personal information that we hold about them and to check it is being lawfully processed.
• Request correction of personal information we hold about
• Request erasure of personal
• Object to our processing of their personal
• Request the restriction of our processing of personal

Any individual who wishes to review, verify, correct, request erasure or object to the processing of personal information must submit a request in writing to: Green Legal Agents Limited, Suite 201, 186 St Albans Road, Watford, Herts, WD24 4AS. Please note that Green Process Serving is required to verify the identity of any person submitting such request. All requests must include the individual’s full name, address and contact telephone number. As an added measure the sender may also be asked to supply paper evidence of their identity. Persons making such application will not have to pay a fee.

20. Green Process Serving will ensure that personal data is not disclosed to unauthorised third parties which includes family members, friends, government bodies and in certain circumstances the Police, unless authorised under the terms of the prevailing data protection legislation or other statute or a Court Order, for the contractual duty of Green Process Serving or if otherwise exempt.

21. Green Process Serving does not use any personal information it secures for marketing

22. Data minimisation and retention: Green Process Serving will retain the minimum data necessary for operational and legal obligations. The company has a policy of retaining data from its investigation and litigation service activities for 18 months, unless a client specifically requests longer retention, or the company is legally compelled to retain data for In any event data specifically originating from Green Process Serving’s investigation and litigation support activities will not be retained for longer than 6 years.

23. Lawful Basis for processing: Green Process Serving processes all personal data, also sensitive/special categories data lawfully, fairly and in a transparent manner. For most of the services it supplies Green Process Serving will be processing data without the consent of the data subject, having first established that there is an applicable exemption in each case which can be justified. The exemptions listed under the GDPR for processing without a data subject’s consent are:

• Necessary for the purposes of legitimate interests pursued by the controller or a third
• Processing is necessary for compliance with a legal
• Processing relates to personal data which are manifestly made public by the
• Processing is necessary for the establishment, exercise or defence of legal claims or wherever courts are acting in their judicial capacity.

In each case an assessment will be conducted to ensure that Green Process Serving has a lawful basis to process data.

24. Use of Cookies

• Unless you have indicated your objection when disclosing your information to us, our system will issue cookies to your computer when you log on to the Website.
• Cookies are small amounts of information regarding your browsing habits which we store on your computer. Cookies make it easier for you to log on to and use the Website during future visits. They also allow us to monitor Website traffic and to personalise the content of the Website for you. You may  have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but if you prefer you may be able to modify your browser settings to decline all cookies, or to notify you each           time a cookie is tendered and permit you to accept or decline cookies on an individual basis. If you choose to decline cookies, however, that may hinder the performance of the web Website. For specific details about how to configure your browser you should refer to its supplier or manufacturer.
• 25          Cookie Policy

Cookies are small text files that are stored on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
There are four main categories that cookies belong to – strictly necessary cookies, performance cookies, functionality cookies and targeting/advertising cookies.
• Strictly necessary cookies are cookies deemed essential to running your site and as such you do not need the                   user’s consent for.
• Performance cookies collect anonymous data that shows how well your website is performing. These can be used to see which pages are visited the most and how users interact with them.

• Functionality cookies are used to increase the usability of your website. These can be used to store information   about the user, such as the user’s language or font size preference.
  All web browsers allow some control of cookies through the browser settings.