Under the General Data Protection Regulations we must have a ‘legal basis’ for any processing of personal information.

We may process your personal information without your knowledge or consent where this is required or permitted by law.