HT Legal Ltd (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy, together with our Terms and Conditions, explains how we collect, use, and share your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Personal Information We Collect
When you interact with us (via our website, social media, telephone, or otherwise), we may collect and process the following information:
• Information you provide when you contact us, submit an enquiry, or instruct us, including your name, contact details, and details of your claim.
• Information relating to your matter, including documents you supply and information obtained from third parties such as financial advisers, pension providers, product providers, expert witnesses, and medical records.
• Identification and verification information, including details used to perform anti money laundering checks and soft credit searches (with your consent).
• Technical data such as IP address, browser type, referrer, pages visited, and log data collected automatically when using our website.
• Cookies and analytics data for improving our website and understanding user behaviour.
• Telephone call recordings for quality monitoring and training.
• CCTV footage from visits to our premises, which is stored for a minimum of 30 days.
• Social media reviews or public information relevant to the validation of claims.
2. How We Use Your Information
We process your personal information where it is necessary to:
• Provide legal services including investigating, pursuing, and managing your claim, preparing legal documents, and communicating with relevant parties such as product providers, the Financial Ombudsman Service, FSCS, and Pensions Ombudsman.
• Comply with our legal obligations including anti money laundering regulations and professional obligations under the Solicitors Regulation Authority.
• Perform identity verification and soft credit searches, where required for mis sold finance claims or anti money laundering compliance. These checks are conducted through our provider Valid8 IP Ltd, who may use one or more credit reference agencies.
• Communicate with you, including sending updates about your matter, service announcements, or marketing information (if you have opted in, which you may opt out of at any time).
• Audit, research, and improve our services to ensure compliance and quality control.
• Prevent fraud, money laundering, or other unlawful activity.
• Maintain business records and backups for operational continuity.
3. Lawful Basis for Processing
We rely on one or more of the following lawful bases:
• Contractual necessity for providing you with legal services and fulfilling our engagement terms.
• Legal obligation for complying with statutory and regulatory requirements such as AML checks.
• Legitimate interests for improving our services, monitoring quality, and preventing fraud.
• Consent for marketing communications and soft credit searches where required. You can withdraw consent at any time.
4. Who We Share Your Information With
We may share your information with:
• Valid8 IP Ltd for identity verification and soft credit searches.
– If soft searches are conducted using Experian only:
We will disclose personal data to our partner Valid8 IP Ltd for the provision of credit report information.
– If soft searches may involve more than one credit reference agency (Equifax, Experian, TransUnion):
We will disclose personal data to our partner Valid8 IP Ltd for the provision of credit report information which may include Equifax Ltd, Experian Ltd, and TransUnion. If you would like to understand how the credit reference agencies use and share personal data, please read the Credit Reference Agency Information Notice (CRAIN):
http://www.transunion.co.uk/
https://www.equifax.co.uk/
https://www.experian.co.uk/
• Third party service providers such as barristers, expert witnesses, IT providers, cloud storage services, and case management platforms under strict confidentiality and data processing agreements.
• Regulatory bodies and redress schemes including the Financial Ombudsman Service, Financial Services Compensation Scheme, Pensions Ombudsman, and courts or tribunals where required.
• Professional advisers such as accountants, auditors, and insurers where necessary.
• Law enforcement or regulators where required by law or to prevent fraud.
All third parties are required to adhere to appropriate confidentiality, security, and data protection standards.
5. International Transfers
If data is transferred outside the UK or EEA, we ensure it is protected by using approved safeguards such as adequacy regulations, standard contractual clauses, or equivalent lawful mechanisms.
6. Your Rights
You have rights under data protection law including:
• Right to be informed, access, rectify, and erase your data.
• Right to restrict or object to processing.
• Right to data portability.
• Right not to be subject to solely automated decision making.
To exercise these rights, contact our Data Protection Officer using the details below. You may also complain to the Information Commissioner’s Office at www.ico.org.uk if you believe your data has been mishandled.
7. Data Security
We use appropriate technical and organisational measures to keep your data secure, including:
• ISO27001 certification and Cyber Essentials Plus compliance.
• Secure servers, firewalls, and encryption for data storage and transmission.
• Restricted access controls ensuring only authorised personnel can access your data.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and reporting obligations.
9. Complaints and Contact
If you are unhappy with how your data has been handled, contact the case handler or email hello@claimmyloss.co.uk. If unresolved, you may escalate your complaint to the Solicitors Regulation Authority or the Legal Ombudsman.
10. Cookies
For information on our use of cookies, please see our Cookie Policy.
11. Policy Updates
We may update this policy periodically. The latest version will always be available on this page.
