Very concerning, after making an Artice 17 request to delete my personal data, the firm ensured it was deleted immediately, yet several days later they were found to be still processing it. They have tried to claim that even though they confirmed it was deleted under my Article 17 request, that they had some sort of right, based on ICO guidance, that they can keep processing it for up to 30 days. Seriously... this is supposed to be a law firm!

SINCE THEIR RESPONSE 3/10/2024
Stowe Family Law have now tried to have my review removed, asking for 'more details' to 'help find my case'. KNowing that if I do not reply, the review gets deleted.

For the record, I asked them to remove my personal data after they kept texting me. I had initially sent a message for some advice and seeking a call back.When they messed that simply process up, I told them I no longer wanted their services and to remove my details from their system. They promises they would.

Days later, I got more unsolicited messages, I told them in no uncertail terms they were now breaching GDPR.

They appologised and said, "I WILL ENSURE YOUR DETAILS ARE REMOVED FROM OUR SYSTEM IMMEDIATELY.”.

Unbelievably, days later, they contacted me again and even called me, referring to information in my previous emails and mesaages, proving they had not been deleted.

When I made a formal complaint, they said, "We have 30 days to remove the data".

NO, you don't!

30 days is ICO guidance for the max time you should respond to an Article 17 request. That 'response window' is to acknowledge and confirm if and "WHEN" the Article 17 is complined with, i.e. when the data will be removed

By saying it is removed immediately, you have formally notified me you HAVE complied with it. You do not have any lawful right to continue processing any personal data AFTER confirming it is deleted. You are a law firm, this is pretty simple stuff, if you cannot follow basich GDPR laws and ICO guidance, god help anyone providing sensitve data to you.

You did not take GDPR seriously, your response is nothing more that lip service, to mitigate negative reviews. You breached my personal data, you are trying to now justify the breach rather than admitting to it. You are a law firm and should know better.