How ClaimSaveUK uses your personal information.

1. Who is responsible for your personal information

ClaimSaveUK is a trading name of Cambridge Corporate Consultants, 65 Church Street, Harston, Cambridge CB22 7NP. Cambridge Corporate Consultants is the FCA-regulated business behind the regulated ClaimSaveUK claims journey (FCA FRN 124851) and is registered with the Information Commissioner's Office under registration number ZB224521. For personal information handled as part of the ClaimSaveUK claims-management journey, Cambridge Corporate Consultants is responsible for determining how and why that information is used, except where another organisation is separately identified as a controller.

GPT Legal Limited is a business/technology partner providing website/domain and technology support for the ClaimSaveUK platform. Where it processes personal information on behalf of Cambridge Corporate Consultants, this must be governed by appropriate data-processing terms. If another party determines its own purposes and means of processing, its own privacy information will apply.

2. Personal information we may collect

Depending on the journey you use, we may collect your name, date of birth, postal address, postcode, email address, telephone number, IP address and other online identifiers; information about the claim, complaint, product, agreement, provider or incident you tell us about; eligibility answers; communications and correspondence; documents you choose to provide; consent, transfer and marketing preferences; portal and account information; referral, campaign and source information; and technical, security and audit records such as browser/user-agent, timestamps and authentication events.

Some claims may involve special category information, for example health information in a medical-negligence journey. We only ask for or use this type of information where it is necessary and an appropriate Article 9 UK GDPR condition applies, including where processing is necessary for the establishment, exercise or defence of legal claims, or another condition applies. We do not ask you to provide special category information where it is not needed.

3. Where we obtain information

Most information is obtained directly from you when you use ClaimSaveUK, contact us, upload information or make choices on the website. We may also receive limited information from an approved traffic/referral partner, a receiving specialist firm, service providers supporting the platform, or publicly available/official sources where necessary for verification, compliance, fraud prevention or complaint handling. If we obtain personal information about you from another source, we will provide the information required by data-protection law within the applicable timeframe unless an exemption applies.

4. Why we use information and our lawful bases

We use personal information only where we have a lawful basis. Depending on the activity, this may include:

• Providing the journey and acting on your request: to operate the website, receive your enquiry, carry out an initial eligibility journey, communicate with you and take steps you ask us to take before entering into an arrangement or making an introduction.
• Partner matching and transfer: to identify a suitable specialist firm and, after the named recipient and relevant information have been shown to you, transfer information where you have instructed or confirmed that transfer. The lawful basis will depend on the circumstances and may include steps at your request, legitimate interests and/or consent where consent is legally required.
• Legal and regulatory compliance: to meet obligations applying to regulated claims-management activity, complaints, data protection, fraud prevention, regulatory enquiries and other applicable law. We rely on legal obligation where the law requires the processing.
• Security, service administration and improvement: to protect customers and the platform, prevent abuse, maintain audit trails, troubleshoot and manage service performance. We may rely on our legitimate interests in operating a secure, accountable and effective service, balanced against your rights and interests.
• Marketing: to send optional electronic marketing only where permitted by applicable privacy and electronic-marketing law. Where consent is required, we rely on consent and you can withdraw it at any time.

Where we rely on legitimate interests, those interests include securing and administering ClaimSaveUK, preventing fraud and misuse, maintaining evidence of customer instructions and regulatory disclosures, and improving the service. We assess whether those interests are necessary and appropriately balanced against your rights.

5. Individual FCA/SRA regulated receiving partners

An individual claim may be introduced or transferred to a separate FCA-authorised or SRA-regulated specialist firm. Before any transfer, the ClaimSaveUK journey identifies the proposed receiving firm and displays the relevant regulatory details, privacy information, complaints route and applicable disclosures. You are asked to confirm the transfer before your claim information is sent. We do not use generic partner wording as a substitute for identifying the actual recipient.

After a receiving firm obtains your information, it will normally act as an independent controller for the regulated or legal service it provides. Its own privacy notice, retention periods, lawful bases and customer agreement will then apply to its processing.

6. What ClaimSaveUK retains after a successful transfer

ClaimSaveUK is designed so that completed substantive claim answers are not retained by ClaimSaveUK after a successful partner transfer, unless retention is required for a specific legal, regulatory, security or complaint-handling reason. The receiving firm is responsible for the claim information it receives under its own privacy notice.

ClaimSaveUK retains a limited transfer/compliance audit record where necessary to demonstrate what happened. This may include a customer/profile identifier, claim category, acquisition/source information, the versions of privacy and disclosure information shown, the named receiving partner and regulatory identifier, the customer's transfer instruction/confirmation, date and time, IP address/user-agent and transfer reference. We retain such records only for as long as reasonably necessary for the applicable regulatory, complaint, legal and accountability purposes and review them under the approved retention schedule.

7. Reusable ClaimSaveUK profile and retention

To reduce repeat form filling, ClaimSaveUK may retain a limited reusable profile containing first name, surname, date of birth, address, postcode, email address, telephone number and IP address, together with limited security identifiers. The production configuration is currently set to retain this reusable profile for 365 days, after which the profile is scheduled for deletion unless a different retention requirement lawfully applies. If the approved retention period is changed, this notice and the relevant retention documentation must be updated before the changed period is relied upon.

You may ask us to delete the reusable profile sooner. We will comply where the right to erasure applies, although we may need to retain limited information where there is a legal or regulatory reason to do so.

8. Who we share information with

Depending on the service you use, personal information may be shared with the specific FCA-authorised or SRA-regulated receiving firm identified to you before transfer; vetted hosting, infrastructure, security, communications, analytics or other technology providers acting under appropriate contractual controls; professional advisers such as legal, compliance or audit advisers where necessary; and regulators, ombudsmen, courts, law-enforcement bodies or other authorities where disclosure is required or permitted by law.

We do not sell your personal information as a general-purpose data list. A commercial payment may be received in connection with an introduction to a partner where permitted; this does not remove the requirement to identify the proposed recipient and provide the applicable disclosure before transfer.

9. International transfers

Some technology or communications suppliers may process information outside the UK. Where a restricted international transfer takes place, we require an appropriate UK data-transfer mechanism, such as UK adequacy regulations or appropriate contractual safeguards (including the UK International Data Transfer Agreement or UK Addendum where applicable), together with any additional measures required by the circumstances. You can contact us to request further information about the safeguards relevant to your information.

10. Marketing and your absolute right to object

Optional marketing is separate from service communications and from any instruction or confirmation required to progress or transfer a claim. Marketing choices should be presented by relevant channel where required. If we rely on consent, you can withdraw it at any time without affecting processing that was lawful before withdrawal.

You have an absolute right to object at any time to the use of your personal information for direct marketing, including related profiling. If you object, we will stop using your information for that purpose.

11. Cookies, analytics and online identifiers

Essential cookies and similar technologies support security and core website functionality. Optional analytics are activated only in accordance with the choices presented through the cookie controls. Claim form contents, substantive claim answers and customer contact details must not be deliberately sent to Google Analytics. Analytics information is subject to the applicable analytics configuration and retention settings described in the Cookie Policy.

12. Automated decision-making and Smart Check

ClaimSaveUK may use rules-based questions or Smart Check functionality to suggest claim categories or route an enquiry. These tools provide an initial indication only. ClaimSaveUK does not use solely automated decision-making that produces legal effects or similarly significant effects on you. A Smart Check or eligibility result is not a guarantee that a claim is valid, will be accepted or will succeed, and the receiving regulated firm makes its own assessment.

13. Security and data minimisation

We use technical and organisational measures designed to protect personal information, including access controls, authentication, encryption and security/audit logging where appropriate. Access should be limited to people and providers who need the information for an authorised purpose. No online service can guarantee absolute security, and controls are reviewed as risks and technology change.

14. Your data-protection rights

Depending on the processing and lawful basis, you may have the right to be informed; obtain access to your personal information; correct inaccurate or incomplete information; request erasure; request restriction; object to processing based on legitimate interests; receive certain information in a portable format; withdraw consent where processing is based on consent; and raise concerns about automated decision-making where applicable. These rights are not all absolute and exemptions may apply.

To exercise a right, contact Cambridge Corporate Consultants, trading as ClaimSaveUK, 65 Church Street, Harston, Cambridge CB22 7NP, using the website contact route. We may need enough information to verify your identity before acting on a request.

15. Complaints to the ICO

If you have concerns about how your personal information has been handled, please contact us first so that we can investigate. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator. Current ICO contact and complaint information is available at ico.org.uk. Using our complaints process does not remove your right to contact the ICO.

16. Providing information and consequences of not providing it

You are not required to use ClaimSaveUK. However, some information marked as required is necessary for us to operate the requested eligibility or transfer journey, verify relevant details, protect the service or comply with applicable requirements. If you do not provide required information, we may be unable to progress the relevant enquiry or transfer it to a specialist firm.

17. Changes to this notice

We review this Privacy Policy when the service, partner network, processing activities or legal/regulatory requirements change. If we intend to use personal information for a materially new purpose, we will update the privacy information and, where required, bring the change to affected individuals' attention before starting that processing. The current version and revision date will be published on this page.