Select Page

Privacy Policy

 

Introduction

At Gibson & Associates LLP (“we”, “our”, or “us”), we are committed to safeguarding the privacy of all individuals who interact with us and to respecting the privacy choices you make.

This Privacy Policy explains how we, as a data controller, collect, use, and protect personal data about you, and outlines your rights under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Irish Data Protection Acts 1988–2018.

A compliant Privacy Policy must state that no mobile information will be shared with third parties or affiliates for marketing/promotional purposes. Information sharing to sub-contractors in support services, such as customer service, is permitted. All other use case categories excluding text messaging originator opt-in data and consent; this information will NOT be shared with any third parties.

How We Obtain Your Personal Data

We may collect personal data in the course of our relationship with you, including:

  • When you visit our website or social media pages;

  • When you subscribe to or use our online services;

  • When you apply for a job vacancy with us;

  • When you communicate with us in the course of business;

  • When you provide information in connection with the provision of our legal services;

  • When you are an opposing party or representative in a transaction or legal matter we are involved with.

We may also receive your personal data indirectly where it is relevant to the provision of our services.

What Personal Data We Collect

Depending on your relationship with us, the data we collect may include:

  • Basic data: name, address, telephone number, email address, date of birth, employer details, job title.

  • Financial data: payment and billing information.

  • Recruitment data: CVs, employment history, nationality, immigration status, references.

  • Website usage data: usernames, passwords, preferences, survey responses, interests.

  • Marketing data: data you provide to receive updates, newsletters, or event invitations.

  • Sensitive personal data (special category data): where relevant to your legal matter, including health, ethnicity, or other categories as defined under Article 9 GDPR.

  • Technical data: IP address, browser type, device data, access logs, and cookies.

How We Use Your Personal Data

We use your personal data only for the purposes for which it was collected, or for purposes compatible with those, including:

  • Providing and improving our legal services;

  • Conducting anti-money laundering, conflict of interest, and fraud prevention checks;

  • Responding to your enquiries and communications;

  • Managing our relationship with clients, suppliers, and job applicants;

  • Fulfilling contractual and legal obligations;

  • Sending you updates, newsletters, and invitations (with your consent);

  • Complying with applicable legal, regulatory, and professional obligations.

We will never ask for information we do not need and will always store your data securely.

SMS and Email Communications

If you provide your mobile number or email address, we may send you messages related to your matter or our services.

You may opt out of SMS or email communications at any time by following the unsubscribe instructions provided or by contacting us directly.

We do not sell SMS consent or share mobile information with third parties for marketing or promotional purposes.
Information may only be shared with subcontractors providing necessary support services (e.g., client care systems, technical service providers).
All other use categories excluding text messaging originator opt-in data and consent will not be shared with third parties.

Basis for Processing Your Data

We will only process your personal data where we have a lawful basis, including:

  • Performance of a contract with you;

  • Compliance with legal or regulatory obligations;

  • Our legitimate interests in operating and improving our services;

  • Your explicit consent (where applicable);

  • The establishment, exercise, or defence of legal claims.

Sharing Your Personal Data

We do not sell or rent your personal data.
We only share your data where it is required by law, or necessary to progress your case, such as:

  • Professional advisers (e.g., auditors, barristers, experts);
  • Service providers who support our operations (e.g., IT providers, document management, fulfillment);
  • Regulators, courts, or law enforcement where legally required;
  • Opposing parties or their representatives in legal proceedings;

All external processors are bound by confidentiality and data protection obligations under written contracts.

International Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place (e.g., EU Standard Contractual Clauses or adequacy decisions) to protect your information.

Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected or to comply with our legal obligations.
Retention periods vary by category of data and are defined by our internal retention policies.
When data is no longer needed, it will be securely deleted or anonymised.

Data Security

We are committed to ensuring your personal data is kept secure.
We have implemented appropriate technical, physical, and organisational measures to protect against unauthorised access, misuse, alteration, or loss.
However, no data transmission over the internet can be guaranteed as completely secure.

Cookies & Tracking

Our website uses cookies and similar technologies to improve your browsing experience.
Cookies may store preferences and statistical data for analysis purposes.
You can manage or delete cookies via your browser settings.
Full details are available in our [Cookie Policy].

Your Rights

You have the following rights under data protection law:

  • To access the personal data we hold about you;

  • To request correction or deletion of your data;

  • To restrict or object to processing;

  • To request data portability;

  • To withdraw consent at any time (where consent is the lawful basis).

Requests can be made to our Data Protection Officer via the contact details below.
We will respond within one month and will not charge for reasonable requests.

Changes to Your Personal Data

Please keep us informed of any changes to ensure your information remains accurate and current.
If you wish to update your details, contact your solicitor, or email our Data Protection Officer at [email protected].

Changes to This Privacy Policy

We may update this policy from time to time. Any updates will be posted on our website with a revised effective date.

Contact Us

If you have any questions or concerns regarding this Privacy Policy or our data protection practices, please contact:

Data Protection Officer:
Amanda Walsh
Address: Gibson & Associates LLP, Port Road, Letterkenny, Co. Donegal, Ireland
Email: [email protected]
Phone: +353 (0)74 916 8888

Last Updated: 22nd October 2025