Data Responsibility

Data Protection and GDPR Compliance

Pareto Law is committed to ensuring all personal data collected during business operations is processed confidentially, securely and responsibly, operating in full compliance to Data Protection and GDPR regulations.

We are dedicated to providing clarity of how we perform these tasks. This page explains our responsibilities to you, details how and why we process your data, and how you can amend / remove the personal data we hold.

How Do I Update My Details?

To update or amend your personal data held by Pareto Law please complete our form or send an email to detailing the changes to the data you would like to make. Please allow up to 28 days for updates of personal data to be made.

How Do I Unsubscribe from Marketing Communications?

To unsubscribe from receiving marketing emails from Pareto Law, please visit our unsubscribe page or alternatively email using the email address you wish to unsubscribe.

Please allow up to 28 days for updates to be made. Your personal data will remain securely held on file by Pareto.

I Want to Remove My Personal Data from Your Database.

If you wish to have your personal data permanently removed from Pareto Law’s database, please visit our page or send an email to stating you wish for Pareto Law to remove your data.

Please allow up to 28 days for your details to be removed.

Please note your email address will become permanently reserved and securely kept on file for two years to ensure suppression.

As a Candidate, What Personal Data Will You Process?

As part of the assessment and recruitment process it is necessary for Pareto Law to collect and process personal data. Data collected will include details reasonable and necessary to assess a candidate’s suitability for a role including education history, qualifications, employment history and current employment status.

This data may be collected from:

  • CVs submitted directly to Pareto Law via our website
  • Job applications submitted via the Pareto Law website
  • Job applications submitted for a Pareto Law role on a third party job board
  • Candidate profiles stored on third party job boards who consent to communications from prospective employers, as per job board terms and conditions
  • Telephone / email communications directly with the candidate, subject to consent

Pareto Law is a committed Equal Opportunities Employer. In order to ensure we are attracting a diverse range of talent and to confirm eligibility to work in the UK, we collect data on assessment day attendees’ nationality and work eligibility. This data is confidential and will not be shared with clients or third parties.

Other personal data collected which is reasonable and necessary to assess a candidate’s suitability for a role may include living arrangements / flexibility to relocate, criminal conviction history and salary expectations.

Who Will You Share My Data With?

Pareto Law is committed to the secure storage and protection of personal data. As such, we will not share personal data with any third party without express consent.

Pareto Law’s candidate placement process requires us to share personal data with clients when putting a candidate forward for interview. This personal data can include name, contact details, qualifications, work history and other reasonable details you would expect to appear on a candidate’s CV. Pareto will seek consent from candidates before we will share personal data with a client.

Pareto Law may use your personal data to build look-a-like profiles in Google's 'Similar Audience Targeting' feature, in which the data is temporarily used to build an anonymised profile and then instantly deleted. This is covered in Pareto's Privacy Policy.

Pareto Law will not share sensitive personal data, including race, religion, nationality and political affiliations. However, nationality may be shared if a role requires nationals or native language speakers. This will be clearly stated within the job description.

During Pareto Law assessment days attending clients will receive a copy of each candidates’ CV.

Can I Request Access to My Personal Data?

Persons can request access to all data Pareto Law holds regarding them. This includes personal details, history and notes. To request a copy of this data, please email

There is no charge for this service. Please allow up to 28 days for details to be provided. Before processing, Pareto may contact you by telephone to verify your identity and the legitimacy of this request.

I Have a Complaint About How You Have Used My Personal Data

Pareto Law is dedicated to ensuring personal data is processed securely, responsibly and only where absolutely necessary.

If you have a question or complaint regarding Pareto’s use of your personal data please contact Trevor Yoxall

What Happens if There is a Data Protection Breach?

In the unlikely event of a major data breach, Pareto Law will notify any persons whose data could be compromised detailing the nature of the breach, recommended steps for the persons to take (if any) and our plan of action as an organisation to remedy the situation.