Skip to main content
At a glance Applies to: employees, and people applying to work at SAS.
  • SAS holds the personal data it needs to employ you, pay you, keep client data secure and meet its legal and regulatory duties.
  • SAS records calls and meetings and monitors its systems, as described in IT and communications.
  • Health information is used only to support you and manage absence, and is seen only by those who need it.
  • You can ask for a copy of your data, or for it to be corrected or deleted, by emailing Patrick.
  • You can complain to the Information Commissioner’s Office (ICO) if you are unhappy with how SAS uses your data.
Who to ask: Patrick Knight, Data Protection Officer (pk@settlementagreement.com).

​
Who we are

Settlement Agreement Solicitors Ltd (company number 12589585, registered office Thomas House, 84 Eccleston Square, London SW1V 1PX) is the controller of your personal data. Our Data Protection Officer is Patrick Knight, pk@settlementagreement.com.

​
What we hold and why

Health information, and any information about your ethnicity, religion or sexual orientation that you choose to give us, is special category data. We use it only where employment law, health and safety law or your explicit consent allows, and limit access to those who need it. We do not make decisions about you based solely on automated processing. Call quality scores and activity records are reviewed by a person before any action is taken.

​
Where your data comes from

Mostly from you. We also get information from referees, the SRA’s register of solicitors, HMRC, our pension provider, your GP or occupational health (only with your consent), and from SAS systems as you work.

​
Who we share it with

  • Service providers who process data on our instructions: Google (email, Meet, Drive, Gemini), Zoho (People, CRM, WorkDrive, Vault), RingCentral, our IT support provider (NVOY) and its security tools (Addigy, Huntress, Check Point, Dropsuite), ActivTrak, Adobe (signing), Anthropic (Claude), our outsourced payroll and bookkeeping providers, and NEST.
  • Spill, our wellbeing provider. What you tell Spill stays with Spill under its own privacy notice. SAS only receives anonymised usage figures, and approves ADHD assessment requests without being told who made them.
  • Regulators and public bodies where the law requires: HMRC, the SRA, the ICO, the courts.
  • SAS’s insurers and professional advisers, where needed for a claim, complaint or legal advice.
  • A buyer or investor, if SAS is sold or restructured, as far as possible in anonymised form until the deal completes.
Some providers process data outside the UK. Where they do, SAS relies on UK-approved safeguards, such as the UK-US data bridge or the ICO’s international data transfer agreement.

​
How long we keep it

If there is a complaint, claim or investigation, the relevant records are kept until it is resolved.

​
Your rights

You can ask SAS to:
  • give you a copy of your personal data;
  • correct data that is wrong or incomplete;
  • delete data that SAS no longer has a good reason to keep;
  • restrict how your data is used while a concern is checked;
  • stop using your data where SAS relies on legitimate interests, unless SAS has strong grounds to continue;
  • give you your data in a portable form.
Email Patrick to make a request. There is normally no fee, and SAS responds within one month. If you gave consent for something, you can withdraw it at any time. If you are unhappy, please tell Patrick first. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint or 0303 123 1113.

​
Changes to this notice

SAS will tell you when this notice changes. The current version is always on this page.
Version 2.0 · Effective on publication · Owner: Patrick Knight, DPO · Approved by Patrick Knight · Acknowledgement: confirmation of receipt by every employee