Last Updated: January 19, 2019
McGuireWoods respects your privacy and is committed to protecting your personal data. This Privacy Statement describes how we look after your personal data when you visit our website (regardless of where you visit it from), or which we otherwise receive or collect from you in the course of our operations and client services as an international legal practice. It also describes certain privacy rights and data protection laws that may apply to you.
It is important that you read this Privacy Statement together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This Privacy Statement supplements other such notices and is not intended to override them.
McGuireWoods is an international law firm providing legal services to our clients. This Privacy Statement refers to McGuireWoods LLP and McGuireWoods London LLP, referred collectively as “McGuireWoods,” “we” or “us.” For further details concerning the structure and offices of McGuireWoods, please view our Legal Notices on our website.
We are committed to protecting your privacy. If you have questions about this Privacy Statement or other data protection matters concerning McGuireWoods, you can contact us at PrivacyUS@mcguirewoods.com. Additional contact information for McGuireWoods LLP and McGuireWoods London LLP is provided below.
For the purposes of data protection under the General Data Protection Regulation and any applicable national implementing laws, regulations, secondary or other legislation (collectively, the GDPR), the legal entities overseeing the processing of your personal data are McGuireWoods LLP and McGuireWoods London LLP. To clarify the essence of the arrangement by which McGuireWoods collects and processes personal data, both legal entities are considered data controllers in their own right. On occasion, for certain processing activities, one of the entities may act as a data processor for the other. There may also be processing activities for which we would be considered joint data controllers in that we may jointly determine the purposes and means by which your personal data is processed by us.
Data protection officers
McGuireWoods LLP’s privacy officer in the United States is Nathan Kottkamp, who can be contacted at PrivacyUS@mcguirewoods.com, or by mail at McGuireWoods LLP, Gateway Plaza, 800 East Canal Street, Richmond, Virginia 23219-3916. For purposes of the GDPR, McGuireWoods LLP, in its capacity as a controller of processing activities that are subject to the GDPR, has appointed McGuireWoods London LLP to be its representative within the European Union. Their contact details are email: firstname.lastname@example.org, phone: +44 20 7632 1600.
McGuireWoods London LLP appoints the following individual as its data protection officer:
McGuireWoods London LLP
11 Pilgrim Street
London, EC4V 6RN
Clients, prospects, candidates, providers and other individuals in the EU (or whose personal data is otherwise subject to the GDPR) should contact the data protection officer for the controller with whom they have actively engaged. If you have privacy or data protection questions in connection with the website, please contact us.
McGuireWoods will only collect personal data required to serve the purpose for which it was collected. The type of personal data we collect will depend upon the nature of your relationship with us (e.g., whether you are a client, prospect, candidate, provider, or visitor to our website or office), the purpose for which the data is required, and our legal and regulatory obligations.
Please note that we may process your personal information without your knowledge or consent where this is required or permitted by law.
Types of data collected
As a client of ours, the information we collect from you may include the following:
As a prospective client or other business prospect for McGuireWoods, the information we collect from you may include the following:
In connection with the provision of our services, we collect and process different personal data depending on the services being provided, the individuals involved in each of our client matters, and the third parties with whom we communicate, obtain data from or otherwise deal with in connection with the services we provide to our clients.
As a candidate looking to join McGuireWoods, the information we collect from you may include the following:
From providers of goods and services to McGuireWoods, we collect limited information that could be considered personal data. The information we collect from you may include the following:
As a visitor to our main internet site, www.mcguirewoods.com, or any other website or web address operated by or on behalf of McGuireWoods that links to this Privacy Statement (the website), we collect information that you submit to us when you interact with features of the site such as subscribing to news alerts or signing up to attend firm-sponsored events. When you do this we collect:
In addition to collecting information, we collect analytics relating to your time spent on our website. We collect the following information:
More information can be found within our Cookies Policy.
This website is not intended for children and we do not knowingly collect data relating to children via the website.
As a visitor to a McGuireWoods office, we may capture the following information about you:
McGuireWoods collects and processes your personal data in connection with its business as a provider of legal and ancillary services and to pursue our related legitimate interests and rights, including the promotion and marketing of our services. We collect personal data from:
The personal data we collect is processed in compliance with relevant data protection laws and regulations.
Purpose and legal basis for processing
When processing your personal data, the purpose and legal basis include the following, to the extent that they apply to you:
Where the processing of your personal data is based on your consent only, you have the right to withdraw this consent at any time. We will then erase your personal data and stop processing it.
You may receive marketing communications from us if you are an existing client or if you provided us with your consent or where we are pursuing a legitimate interest and have a lawful right to do so and, in each case, you have not opted out of receiving that marketing. You can ask us to stop sending you marketing messages at any time by following the unsubscribe links on any marketing message sent to you or by contacting email@example.com at any time.
Your personal data is kept for the time required to pursue the purposes for which it was collected and processed, including for the purpose of satisfying any applicable legal, professional, contractual, regulatory, accounting or reporting requirements.
If you request that we stop sending you marketing materials, we will continue to keep a record of your contact details and appropriate information to enable us to comply with your request not to be contacted by us.
We will retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, legitimate administrative or operational purposes, and any reporting requirements. In determining data retention periods, we take into consideration local laws, contractual obligations, our professional duties to our clients, our reasonable business requirements, and your expectations and requirements.
When it is no longer necessary to retain your personal data, we will securely delete or, in some circumstances, anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further statement to you.
This website is hosted in the United States. Personal data that is voluntarily provided on or via this website or online, via electronic communication, or otherwise to McGuireWoods, may be maintained or accessed in servers or files located in the United States.
To provide legal services and effectively run our business, we may need to share your personal data. Transfer of personal data may occur internally between McGuireWoods offices, to our providers as necessary to provide our services, or to public and regulatory bodies in the event we are required to do so. These transfers will involve international transfer of your personal data to our McGuireWoods offices (including our offices located outside the European Economic Area (EEA)) and data centers or those of our providers or public and regulatory bodies.
Categories of recipients
Your personal data may be transferred to the following categories of recipients:
International transfer of your personal data
Subject to the terms of any engagement agreement or other agreement that we have with you, we allow McGuireWoods’ offices, branches and associated firms, to access your personal data, and may allow access to your personal data, or parts of it, to our service providers required to obtain the services we need to operate our business or to provide legal services to our clients.
McGuireWoods LLP (based in the United States) and McGuireWoods London LLP share infrastructure, personnel and providers of services in connection with the services we provide and marketing activities that we undertake. McGuireWoods LLP also provides client and support services to McGuireWoods London LLP and other offices located outside the EEA. As a result, McGuireWoods LLP and its offices in the United States will receive and have access to your personal data.
Many of our third-party service providers are based outside the EEA so their processing of your personal data will involve a transfer of your personal data outside the EEA.
Whenever we transfer your personal data out of the EEA, where required by law, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
Please contact us if you want further information on the specific mechanism we use when transferring your relevant personal data out of the EEA.
Depending on the facts and circumstances related to the personal data we collect or obtain about you – including, for example, the nature of the information we process, where you are located or reside, or whether we obtain the information in connection with legal services we provide to our clients – you may have rights regarding the personal data we hold about you afforded under relevant data protection laws. These may include the right to request information about, or access to, the personal data we hold, and rights to complain about how we handle your personal data. McGuireWoods is committed to honoring rights you have been afforded under data protection laws while ensuring that such rights are exercised in accordance with our other legal and ethical obligations.
Right to request
Under certain European data protection laws and certain conditions, you may have the right to request from McGuireWoods, among other things:
For more information on the full extent of your rights or to exercise your rights, please contact your local data protection officer by mail or e-mail at the addresses indicated above with a brief explanation of your request. When exercising any of those rights, please let us:
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask for further information in relation to your request to speed up our response.
If you would like to unsubscribe from any email publication you can also click on the ‘unsubscribe’ button at the bottom of the relevant email publication. It may take up to 10 days for this to take place.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
Right to complain
We hope that we can resolve any query or concern you raise about our use of your personal data. However, if you believe your personal data is unlawfully processed by McGuireWoods under applicable European data protection laws, you may lodge a complaint with the relevant supervisory authority where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns or telephone: 0303 123 1113.
Belgian Commission for Protection of Privacy or Authority for Protection of Personal Data (https://www.privacycommission.be/en)
Information Commissioners Office (ICO) (https://ico.org.uk)
California privacy rights
If you are a resident of the state of California, under the California Civil Code, you have the right to request information on how to exercise your disclosure choice options from companies conducting business in California. To do so, send a request for information indicating your preference as to how you would like us to respond to your request (i.e., email or postal mail). To request such information, either send an email to PrivacyUS@mcguirewoods.com or contact us via postal mail, proper postage pre-paid, at:
800 East Canal Street
Richmond, VA 23219-3916
Attention: General Counsel
All requests sent via postal mail must be labeled “Your California Privacy Rights” on the envelope or post card and clearly stated on the actual request. For all requests, please include your name, street address (if you would like a response via postal mail), city, state, and ZIP code. We will not accept requests via telephone or fax. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.
McGuireWoods employs industry-standard best-practice protection to safeguard the personal data it collects.
McGuireWoods has implemented security-by-design infrastructure utilizing technologies such as firewalls, intrusion detection systems, anti-malware detection, data loss prevention, zero day threat protection, and endpoint encryption. Our security measures include:
For clients of McGuireWoods, prospects, candidates, and providers, it is in your discretion to provide personal data to us. However, for us to enter into a contract with you, or other professional, employment or business relationship with you, we will need to obtain certain information, including personal data that may be necessary or legally required. If you do not provide us with all or some of the personal data we request, we may be prevented from entering into a contract with you, providing you with legal services, or sending you marketing information or other communications that you have requested.
For users of the website, providing your personal data is purely voluntarily. Not providing such data may only prevent you from receiving information from McGuireWoods. Analytical information captured during your visit to our website is described in our Cookies Policy, which you can review here.
McGuireWoods may update this Privacy Statement from time to time, and we reserve the right to do so to comply with applicable data protection laws. The effective date of this Privacy Statement is noted at the top of this page. We encourage you to review this page periodically. If we make material changes to the way that we collect, use or share personal data that you have provided, we will post the revised Privacy Statement on our website.