Privacy Policy

Expert Commercial Law Privacy Policy

This Privacy Policy explains how Your Compensation Claim Limited (YCC) T/A Expert Commercial Law collects and processes personal data in relation to claimants and prospective claimants.

Your Compensation Claim Limited is the controller of personal data. Your Compensation Claim Limited is registered in England and Wales under the company registration number: 14675908. Any reference to ‘the controller’ within this Privacy Policy shall mean Your Compensation Claim Limited.

As a controller of personal data, Your Compensation Claim Limited is also registered with the Information Commissioner’s Office (ICO), registration details:

This Privacy Policy was last updated on 04/08/2023.

Our contact details

Name: Your Compensation Claim Limited

Address: 4 Bark Street East Bolton

Phone Number: 01204263028

Email: info@expertcommerciallaw.co.uk

Personal data we collect from you

The controller may collect personal data directly from claimants and prospective claimants for various purposes for processing.

Examples of the categories of personal data that the controller may obtain directly from claimants/prospective claimants may include but are not necessarily limited to: identity information, contact information, location information, claims information, special category information (health data), employment information, and financial information.

The controller may obtain personal data directly from claimants and prospective claimants prior to and throughout the provision of claims management services, through the following means:

Direct interactions
Email correspondence
Telephone calls
Verbal interactions

Personal data we collect from other sources

From time to time, the controller may obtain personal data regarding claimants from external sources. This includes:

Lawful bases for processing personal data

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases that the controller relies upon to process personal data are described as follows:

The controller may rely on further conditions for processing that are set out within Article 9 UK GDPR and Schedule 1 Part 1 of the Data Protection Act 2018.

Purposes and lawful bases for processing personal data

As the controller of claimants’ and prospective claimants’ personal data, there are a variety of purposes for which the controller processes personal data. The controller has set out the purposes for processing personal data about any claimants and prospective claimants and the lawful bases for doing so.

Disclosure of your personal data

Throughout the provision of claims management services, the controller may disclose claimants’ and prospective claimants’ personal data to other controllers and processors for the purposes described within this Privacy Policy.

Additional information regarding the disclosure of your personal data

Claimants’ and prospective claimants’ personal data may be shared between any subsidiary, holding company, or any other member of the controller’s group.
If the controller is under a duty to disclose or share personal data to comply with any legal obligation, or to enforce or apply the controller’s terms of use and other agreements; or to protect the rights, property, or safety of the controller, the controller’s clients, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection.
If the controller sells or buys any business or assets, in which case the controller may disclose personal data to the prospective seller or buyer of any such business or assets.
Personal data may be disclosed where it is necessary to protect the controller’s rights, property, or personal safety, or to respond to requests by public, regulatory, or law enforcement authorities, including to meet national security or law enforcement requirements.

Purposes for processing personal data

To contact potential claimants following the submission of an enquiry regarding the provision of claims management services (claims relating to breach of contract, commercial litigation etc.).
To identify whether potential claimants may have a claim.
To refer potential claimants to an appropriate law firm for claims investigations and representation where it has been identified that a potential claimant may have a claimTo share any vulnerability information with law firms to whom claimants are referred to ensure that any such law firm is appropriately aware of and supports vulnerable claimants, having consideration for any needs.
To send direct marketing communications to prospective/current claimants.
To manage/process direct marketing opt-out requests submitted by prospective/current claimants.
To screen against marketing suppression lists to ensure that marketing communications are not sent to prospective/current claimants that have opted out of/objected to receiving direct marketing communications.
To publish feedback provided by prospective/current claimants regarding the satisfaction of claims management services.
To respond to and satisfy (where necessary) any data rights requests submitted by prospective/current claimants.
To respond to any complaints submitted by prospective/current claimants.
Monitoring and oversight e.g., recording and monitoring telephone calls and communications for compliance with regulatory rules, and company processes and for quality and training purposes.
To communicate significant changes to the controller’s Privacy Policy.
Record keeping.
Financial crime matters.

Lawful basis

Depending on the data that is captured within online submission forms, we may rely on Consent, Explicit Consent (health data)
Depending on the data that is captured within online submission forms, we may rely on legitimate interests (necessary for the controller to contact claimants/prospective claimants to provide requested services).
Legitimate interests (necessary for the controller to provide requested services to claimants/prospective claimants)
Explicit consent (health data).
Consent, Explicit Consent (health data)
Consent, Explicit Consent (health data)
Consent
Legal obligation
Legal obligation
Consent
Legal obligation
Legitimate interests (necessary to ensure that the controller can comply with the FCA’s rules and resolve complaints submitted by individuals)
Legitimate interests (necessary to ensure that the controller can comply with the FCA’s rules and resolve complaints submitted by individuals)
Legal obligation
Legitimate interests (necessary to ensure that the controller can comply with the FCA’s rules and various regulatory requirements)
Legal obligation

Data retention

To determine the appropriate retention period for personal data, the controller considers the amount, nature and sensitivity of the personal data, the potential risk, of harm from unauthorised use or disclosure of personal data, and the purposes for which the controller processes personal data and whether the controller can achieve those purposes through other means, including applicable legal requirements.

Details of retention periods for different aspects of personal data are available upon request.

International transfers of personal data

Personal data is not transferred outside of the UK or EEA. Should this change in the future, this Privacy Policy will be updated to reflect the security measures that are in place to ensure that any such transfer is subject to an adequacy decision or appropriate safeguard, where applicable.

Your data protection rights

Under data protection law, any individuals acting for and on behalf of potential or existing clients have rights including:

Your right of access – You have the right to ask the controller for copies of your personal information.

Your right to rectification – You have the right to ask the controller to rectify personal information you think is inaccurate. You also have the right to ask the controller to complete information you think is incomplete.

Your right to erasure – You have the right to ask the controller to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask the controller to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that the controller transfers the personal information you gave the controller to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, the controller has one month to respond to you.

Your right to withdraw consent – If you have provided the controller with consent for the processing of your personal data as may be the case for direct marketing, you have the right to withdraw that consent.

If you wish to make a request and/or would like to withdraw consent to the processing of any personal data, please contact the controller by using the following contact information:

Address: 4 Bark Street East, Bolton

Phone Number: 01204263028

Email: info@expertcommerciallaw.co.uk

How to complain

If you have any concerns about the controller’s use of your personal information, you can make a complaint to the controller by using the contact information provided within this Privacy Policy.

You can also complain to the ICO if you are unhappy with how the controller has used your personal data. The controller would, however, appreciate the opportunity to resolve any complaints directly with you.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

Our ref:

Changes to this Privacy Policy

The controller is entitled to change this Privacy Policy at any time whether or not required by law. The controller will inform claimants/prospective claimants about changes to this Privacy Policy where the controller makes a substantial change. This Privacy Policy was last updated on 04/08/2023