1. Introduction
1.1 Please read the following information carefully. This privacy notice contains the privacy policy adopted by Joe Tirado of TiradoADR Limited (the “Data Privacy Notice”). Joe Tirado and TiradoADR Limited (together, “we”, “us”) are committed to respecting your privacy and protecting confidential and privileged information. This Data Privacy Notice sets out how we collect, store and process personal information, as well as the rights and options that you have, and how to contact us if you need further information or have a complaint.
1.2 Your personal information will be kept confidential by us and will not be used or disclosed otherwise than in accordance with this Data Privacy, unless we are required by law or our professional regulatory obligations to disclose it.
2. What is Personal Information and how is it collected?
2.1 Personal information is information from which you may be identified, or which, together with other data which we have or are likely to have access to, may identify you (“Personal Information”).
2.2 Personal Information is collected when:
- You or your organisation make(s) enquiries or appoint(s) us as an advocate, adviser, arbitrator, adjudicator, expert determiner, conciliator, mediator or consultant.
- You or your organisation correspond(s) with us.
2.3 By contacting us, using this website, sharing Personal Information with us and/or engaging our services, you consent to us collecting, processing and sharing your Personal Information in accordance with this Data Privacy Notice.
3. The types of Personal Information which we collect
3.1 The types of Personal Information which we may collect and process include (but are not limited to) the following:
- Personal identifiers, contacts and characteristics (for example, name, address, telephone number, email address or contact details)
- Passport, driving license, identification card, social security number or other identification information
- Bio-metric data
- Medical information
- Genetic data
- Gender and ethnicity information
- Information regarding religious or philosophical beliefs
- Information regarding sexual orientation
- Information regarding criminal convictions
- Workplace information (employment history, job title etc)
- Online identifiers, including IP addresses and cookie identifiers
- Location data
- Financial information (including banking details) and other Personal Information relevant to enable us to invoice for payment of fees and expenses.
3.2 We may also receive Personal Information indirectly, from third parties, including from arbitration and mediation institutions, regulatory agencies, government agencies, online information service providers or from publicly available records and Personal Information that is available publicly, for example on an organizations website or LinkedIn.
4. How the Personal Information is used
4.1 We collect, store, use and process the Personal Information that you provide to us to allow us to provide professional services. Personal Information may be provided to us when inquiries are made to us about Joe Tirado’s services as an International Arbitrator, Adjudicator, Expert Determiner Conciliator, Mediator and ADR Consultant (the “ADR Services”) for the purposes of appointments (or potential appointments) of Joe Tirado as an International Arbitrator, Adjudicator, Expert Determiner Conciliator, Mediator or ADR Consultant.
4.2 Personal Information may relate to:
- Parties involved in litigation, arbitration, adjudication, expert determination, conciliation and mediation
- Arbitrators, adjudicators, expert determiners, conciliators and mediators
- Tribunal secretaries
- Arbitral and mediation institution employees
- Legal representatives
- Witnesses, experts and suppliers.
4.3 We may also use and process the Personal Information to:
- Conduct conflict checks in relation to future potential appointments as International Arbitrator, Adjudicator, Expert Determiner Conciliator, Mediator and ADR Consultant;
- Comply with legal obligations, including maintaining records, or conducting any necessary checks (for example, anti-money laundering, fraud and crime prevention and detection, or in relation to international or trade sanctions);
- Hold sufficient information relevant for administrative and billing purposes;
- Monitor compliance with existing policies and standards;
- Protect the security of communications and other systems and to prevent and detect security threats, frauds or other criminal or malicious activities;
- Exercise or defend our legal rights, or to comply with the order of any court or other judicial authority or arbitral body; and,
- For other purposes ancillary to any of the above or any other specific purposes for which your Personal Information was provided.
4.4 If you provide Personal Information to us which relates to a third party, by submitting it to us you represent to us and must ensure that that you have notified the third party of the terms of this Data Privacy Notice and obtained the third party’s consent to you sharing their Personal Information with us.
4.5 Please bear in mind that if you choose not to provide personal data requested by us, or do not provide the personal data requested by us within a timely manner, or if you object to our processing your personal data, we may not be able to provide you with the information and /or services you have requested or otherwise fulfil the purpose(s) for which we have asked for the personal data.
5. The legal basis for processing your Personal Information
5.1 Under the UK General Data Protection Regulation (the “UK GDPR”), the lawful basis we rely upon for processing Personal Information is your consent. You have the right to withdraw this consent at any time, but this will not affect the lawfulness of any processing activity carried out prior to you withdrawing your consent.
5.2 It is also necessary to process Process Information:
- To provide the services for which we are approached or engaged relating to the case in question, you, and/or your organization;
- To comply with our professional and legal obligations as well as to keep records of compliance processes or other records; and,
- Because our legitimate interests, or those of a third-party recipient of your personal data, make the processing necessary, provided that those interests are not overridden by your interests or fundamental rights and freedoms.
5.3 Please note that some of the processing of personal data, in particular where we are engaged as advocate or adviser, may be covered by legal professional privilege.
6. Sharing your Personal Information with others
6.1 It may be necessary for professional reasons or because we are legally required to do so, for us to share Personal Information with third parties, including courts, arbitration and mediation institutions, arbitrators, adjudicators, expert determiners, conciliators and mediators professional transcribers, other arbitration and mediation service providers, the Information Commissioner’s Office (the “ICO”), regulators, the police or intelligence services where required or permitted by law.
6.2 We may also need to share Personal Information with third parties for the purposes of business administration, including, but not limited to, suppliers who provide support services in relation to IT and email marketing, third parties involved in hosting our website, insurers and in connection with bank transfers and accountancy requirements.
6.3 Please note that our practice is international so that it may be necessary in the course of our work or the administration of our business to transfer Personal Information in or out of the UK and the European Economic Area. Where this occurs, we shall take appropriate measures to safeguard the security of any Personal Information transferred and to protect your privacy rights.
7. How we store your Personal Information
7.1 Your information is securely stored and access will be limited to us and those third parties who assist us to provide our services or administer our practice.
7.2 We are committed to ensuring that your information is secure. We use a variety of physical, technical and organisational measures to help protect your personal information from unauthorised access, use, disclosure, alteration or destruction. Unfortunately the transmission of information via the internet is not completely secure and although we do our best to protect your data, we cannot absolutely guarantee its security.
7.3 We will monitor any emails sent to me, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.
7.4 We will only keep your Personal Information for as long as is reasonably necessary in the circumstances to fulfil the purposes for which it was collected. Personal Information in relation to any specific engagement, legal case or legal service provided will be retained for a period long enough to satisfying any legal, accounting, or reporting requirements or to provide protection for me in relation to any complaint or legal claim, or as necessary in relation to any past, ongoing or potential dispute which is the subject of the engagement.
7.5 In relation to the limited information necessary to conduct conflict checks, such Personal Information is generally required to be retained indefinitely while we maintain a professional practice to comply with professional, regulatory, and legal obligations. Such data is limited to your name (only if you were an individual client) or the name of your organisation (which is not Personal Information).
7.6 The policy for retention of Personal Information may be reviewed from time to time. In relation to specific cases, any departure from this general policy will be considered on a case-by-case basis.
7.7 In order to decide on the appropriate period to retain any Personal Information, the nature, extent and sensitivity of the Personal Information will be taken into account as well as the potential risk of harm from unauthorised use or disclosure, the purposes for which it was collected and will be processed, and whether there is an appropriate way of achieving my legitimate purpose through other means.
7.8 At the end of the retention period Personal Information will be destroyed in accordance with our obligations under applicable laws and in accordance with any relevant guidance.
8. Your data protection rights
8.1 Under data protection law, you have rights including:
- Access – You have the right to ask us for copies of your Personal Information.
- Rectification – You have the right to ask us to rectify Personal Information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Erasure – You have the right to ask us to erase your Personal Information in certain circumstances.
- Restriction of processing – You have the right to ask us to restrict the processing of your Personal Information in certain circumstances.
- Object to processing – You have the right to object to the processing of your Personal Information in certain circumstances.
- Data portability – You have the right to ask that we transfer the Personal Information you gave us to another organisation, or to you, in certain circumstances.
8.2 You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
8.3 Please contact us in writing by email to joetirado@tiradoadr.com if you wish to exercise any of your data subject rights.
9. How to request information or make a complaint
9.1 We aim to be as open as we can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a “Subject Access Request” under the Data Protection Act 1998. If we do hold information about you, we shall:
- Give you a description of it;
- Give you a description of it;
- Tell you why we are holding it;
- Tell you who it could be disclosed to; and
- Let you have a copy of the information.
9.2 To make a subject access request to us, you need to put the request in writing to the address provided below. We shall respond to your subject access request within 30 days. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, particularly if your request is complex, more time may be required. You will be kept fully informed of our progress. If we do hold information about you, you can ask us to correct any mistakes by contacting us again.
9.3 We endeavour to meet the highest standards when collecting and using personal information. Should you have any concerns about the way we collect, store or use your Personal Information, we encourage you to raise this direct with us as soon as possible by contacting us at joetirado@tiradoadr.com, so that they we may address these concerns without delay.
9.4 You can also complain to the ICO, the statutory body which oversees data protection law, if you are unhappy with how we have used your data or our response to any complaint. Please see: https://ico.org.uk/make-a-complaint/. The ICO’s address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline number: +44 (0)303 123 1113
ICO website: https://www.ico.org.uk
10. Changes to this Data Privacy Policy
10.1 This Data Privacy Notice is in effect as of the date indicated below.
10.2 We keep our data privacy policy under regular review. We may change it from time to time if, for example, the law changes or if we change our business in a way that affects personal data protection.
10.3 If we make changes to this Data Privacy Notice, we will change the date and update this Data Privacy Notice on our website (www.tiradoadr.com).
11. Contact details
If you want to request information about anything to do with your personal data and data protection, including to make a subject access request, you can email us at joetirado@tiradoadr.com or write to us at: TiradoADR Limited, C/o JAMS London Mediation, Arbitration and ADR Services, International Dispute Resolution Centre, 1 Paternoster Lane, London EC4M 7BQ, United Kingdom.
1 January 2026
