We may collect personal information from you in the course of our business, including through your use of our website, when you contact or request information from us, when you engage our legal or other services or as a result of your relationship with one or more of our staff and clients.

The personal information that we process includes:

• Basic information, such as your name (including name prefix or title), the company you work for, your title or position and your relationship to a person
• Contact information, such as your postal address, email address and phone number(s)
• Professional information, including your photograph, from LinkedIn or the website of the organization you work for
• Financial information, such as payment-related information
• Technical information, such as information from your visits to our website or applications or in relation to materials and communications we send to you electronically, collected through cookies and other tracking technologies
• Information you provide to us for the purposes of attending meetings and events, including access and dietary requirements
• Identification, background and financial verification information provided by you or collected as part of our business acceptance and ongoing monitoring processes
• Personal information provided to us by or on behalf of our clients or generated by us in the course of providing services to them, which may include special categories of data
• Any other information relating to you which you may provide to us

The personal information that we process includes:

• We collect information directly from you as part of our business acceptance processes and about you and others as necessary in the course of providing legal services
• We collect your personal information while monitoring and analyzing our technology tools and services, including our website, email and other communications sent to and from S&T.
• Your personal information may be provided to us or collected by us in connection with the procurement or provision of technology, goods or services
• We gather information about you when you provide it to us, or interact with us directly, for instance engaging with our staff or registering on one of our digital platforms, applications or training courses
• We may collect or receive information about you from other sources, such as keeping the contact details and professional information we already hold for you accurate and up to date using publicly available sources, including LinkedIn, or collecting information from third party sources as part of our business acceptance or supplier onboarding procedures

S&T collects and processes personal information about you in a number of ways, including through your use of our website and in the provision or promotion of services by us. We use that information:

• To provide and improve this website, including auditing and monitoring its use, and ensure content is provided in the most effective way for you and the devices you are using.
• To provide and improve our services to you and to our clients, including handling the personal information of others on behalf of our clients, and to monitor compliance with our policies and standards
• To manage access to our premises and for security purposes
• To provide information requested by you
• To promote our services, including sending legal and business updates, publications and details of events
• To manage and administer our business and our relationship with you and our clients
• To better understand our clients' or potential clients' services and marketing requirements and our own business and to develop our services and offerings
• For professional networking purposes
• To fulfill our legal, regulatory and risk management obligations, including establishing, exercising or defending legal claims, complying with the rules of professional bodies of which we are a member, preventing crime or fraud and protecting the rights of third parties
• For the purposes of recruitment (for more detailed information see our Recruitment Privacy Policies available on our website)

We process your personal information on the basis of various legal grounds, including:

• Where necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Where we have a legitimate interest in processing your information, such as for business administration, security, and the improvement of our services
• Where we have obtained your consent to process your information for specific purposes
• Where necessary for compliance with legal obligations to which we are subject

We will retain your personal information for as long as is necessary for the purposes set out in this privacy policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

The retention period may vary depending on the nature of the information and the purposes for which it is processed. Generally, we retain client matter files for a minimum period as required by professional regulations and applicable law.

We may share your personal information with the following categories of recipients:

• Our service providers and professional advisors who provide services to us, including IT, administrative, and professional services
• Regulatory authorities, courts, and other public bodies where required by law or necessary for legal proceedings
• Other law firms, experts, and third parties involved in providing services to our clients, with appropriate confidentiality protections
• Our affiliated entities and network firms where necessary for business administration or client service delivery

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates to our systems
• Access controls and authentication procedures
• Staff training on data protection and information security
• Incident response procedures to address potential security breaches

While we strive to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but are committed to maintaining robust protections.