Privacy Policy

Last Updated: 25.08.26

About Us

Claim.co.uk is a trading style of Fairweather Group Ltd. Fairweather Group Ltd is a data controller and is committed to protecting your privacy and takes its responsibilities regarding the security of user information very seriously.

Fairweather Group Ltd adheres to a unified Group Privacy Policy that governs our management of data across all websites and applications we manage, as well as our handling of phone calls, emails, text messages, other forms of digital communication, and additional methods of data collection. This policy details the measures Fairweather Group Ltd takes to uphold data protection standards in line with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

You are free to explore our sites without disclosing any personal data. However, if you decide to share personal details with us, they will be processed following the guidelines outlined in this Privacy Notice.

How we use your personal information

While interacting with this website/app and submitting personal information, Fairweather Group Ltd will gather and utilise your data for a number of reasons, always in compliance with UK data protection law. Below is a list of ways we may use your personal information (including but not limited to data fields, documents and images):

• To contact you in response to your specific enquiry
• To provide the products and services that you request from us
• To send you transactional communications
• To send you marketing/promotional communications for other relevant claims or financial products offered by Fairweather Group Ltd that you may be eligible for
• Contact third parties on your behalf, where this is required to progress the service we are providing you
• Acquire further personal information from service providers (such as AML providers, ATE providers or Credit Bureaus) in order to progress and provide the products and services that you request from us
• Operate and manage your account and manage any application, agreement or correspondence you may have with us
• Carry out, monitor and analyse our business
• To identify, prevent, detect or tackle fraud, money laundering, and other crimes
• To form a view of you as an individual and to identify, develop or improve products, that may be of interest to you
• For statistical analysis
• To be used to create new products and services
• For educational/training purposes including system development to improve customer experience
• For audits, regulatory purposes, legal obligations, and compliance with industry standards
• Perform other administrative and operational purposes including the testing of systems
• To personalise the website/app for you

Where we send you marketing by email or SMS, we do so either with your consent or, where permitted, in reliance on the “soft opt-in” under the Privacy and Electronic Communications Regulations 2003 (PECR) — that is, where you have enquired about or used our services, the marketing relates to our own similar services, and you were given a clear and simple opportunity to opt out both when we collected your details and in every message we have sent since. You can opt out at any time using the unsubscribe link in any email, by replying STOP to any SMS, or by contacting our Data Protection Officer.

We can assure you that your data will never be sold or disclosed to third-party marketing entities without your explicit permission.

To confirm, we may use the information that you directly provide to us in the following ways: We may use your name, email address and postal address to provide you with information you have requested from us, respond to inquiries or requests from you and communicate with you in relation to those inquiries or requests. Our legal basis for this use is our legitimate interests, namely carrying out activities in the course of Claim.co.uk business in response to customer inquiries or requests. We may also use the images of issues that you supply for educational/training purposes including system development to improve customer experience.

Why do we collect and store personal data?

The collection of personal data is essential for us to deliver services, respond to enquiries about our offerings, and keep our records up-to-date. We are dedicated to ensuring that the information we gather and utilise is suitable for these purposes and respects your privacy.

Personal data categories we collect

We may collect, use, store and transfer multiple kinds of personal data related to you which we have categorised as:

Identity Data — this includes first name, middle name, maiden name, last name, marital status, title, date of birth and gender.

Contact Data — this includes email address and telephone numbers.

Case Data — this includes information relevant to your specific case, such as your employment status and contractual employment cover such as sick pay.

Financial Data — this includes bank account information and payment details.

Compliance Data — this includes recorded calls for quality checks and staff training. These recordings can also be used to help us combat fraud.

Technical Data — this includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website/app.

Usage Data — this includes information about how you use our website/app, products and services.

Marketing and Communications Data — this includes your preferences in receiving marketing from us and your communication preferences.

Aggregated Data — this includes statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website/app feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

Special Categories of Personal Data — this includes health and vulnerability related data that you may voluntarily share with us during the fulfilment of our services to you. We will always ask for your explicit consent to record and share Special Category Data, and where the processing is necessary in connection with establishing, exercising or defending legal claims we may also rely on the legal claims condition under Article 9(2)(f) UK GDPR and Schedule 1 of the Data Protection Act 2018.

How we might collect personal data

Fairweather Group Ltd uses different methods to collect data from and about you as follows:

When you voluntarily provide it to us: You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you: apply for our products or services; request marketing to be sent to you; or give us some feedback.

Collected automatically: As you interact with our website/app, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites/applications employing our cookies. Please see our cookie policy for further details.

Provided by third parties or publicly available sources: Where personal data is not obtained directly from you, we may receive Identity and Contact Data (such as name, email address, postal address, and telephone number) from third-party sources. We may receive personal data about you from various third parties as set out below:

• Technical Data from analytics providers such as Google, which may be based outside the UK;
• Identity and Contact Data from publicly available sources, including Companies House and the Electoral Register, based inside the UK.

Where we process personal data obtained from third-party sources on the basis of our legitimate interests in marketing and developing our services, the data may include categories such as name, address and telephone number, and we will inform you of the source of your personal data. Where we process personal data on the basis of your consent, the information you provide to be passed to us will be used for the specified purposes.

Processing purpose and our legal basis

We always ensure that processing personal data always has a legal foundation, and we have thoroughly evaluated our processing objectives and the legal grounds for them.

We process your information based on our contractual responsibilities to provide you with the services and products you have requested. As a regulated company, we must uphold high standards for our services and products. This requirement means we might need to process personal data when undergoing regulatory audits.

When providing our services, we might pursue legitimate interests. We have ensured these interests are considered and balanced, assessing any potential effects on you (both positive and negative) and your rights. We only process your personal data for these interests if they do not disproportionately affect you, except where we have your consent or are legally bound or allowed to do so. For enquiries about the legal grounds of our processing activities, please contact our Data Protection Office.

We ensure that our legitimate interests are carefully considered and balanced against your rights and freedoms. You have the right to object to this type of processing at any time, particularly in relation to direct marketing.

Recipients of your personal data

In the process of delivering the services you have requested, your information may be disclosed to our processing affiliates, referred to as recipients and data processors. We conduct the appropriate due diligence against these partners regarding their data security measures and data protection policies, and we establish firm written agreements that dictate their handling of your information.

In the event that we consider acquiring or merging with other businesses, any new proprietors would be permitted to use your personal data in accordance with the terms outlined in this privacy notice.

When we may have to disclose your personal data

We might be required to share your personal data with certain third parties as detailed below. Rest assured, these entities are not permitted to use your information for contact purposes. They are bound by commitments to handle your personal information with the same level of security and confidentiality that we provide.

Legal Firms

We operate a large panel of legal firms across a number of different claims that we generate. In order to service your claim and successfully refer it to our legal partners to progress with, we will share your personal data with these firms.

Fairweather Group Ltd is the data controller in respect of the personal data described in this policy, meaning we determine the purposes and means of the processing of your personal data. In limited circumstances we may also act as a data processor on behalf of a partner organisation; where that is the case, that organisation’s own privacy notice will apply to the relevant processing.

In order to service your claim and refer it to our legal partners to progress, we will share your personal data with these firms. In order to process your claim and identify the right solicitor to manage it, we may also share your data with the following processors and/or controllers: Copious Ltd, Bond Turner Limited, Bott & Co Solicitors, Charles Lyndon, Elmwood Law, Express Solicitors, Prowse Phillips, Satchell Moran Solicitors Limited, TLW Solicitors LLP, Reed & Co Solicitors, Smith Jones Solicitors and ID Tech Solutions Ltd.

For claims proceeding under Scots law, your personal data may be shared with law firms authorised and regulated by the Law Society of Scotland. The specific firm your claim is referred to will be confirmed to you at the point of referral. The law firm we use for Scottish Personal Injury, and therefore who we will share your data with, is Thompsons Solicitors Scotland.

Regulatory Authorities

As part of our own FCA authorisation and the organisations which govern us in different areas of our business (such as the ICO), we may need to share your details with these Authorities.

Defendants

In order to acquire the necessary information we need to refer your claim, we may need to request information about your claim from the defendants, such as Vehicle Manufacturers, Car Dealerships, and Finance providers.

Compliance Consultants

This includes Compliance Consultants and similar services acting as processors within the United Kingdom, who might need to document processing activities due to specific legal and compliance requirements.

Service Providers

Service providers include businesses that provide us with additional information that could help your claim – such as AML providers and Credit Bureaus. We may share data with certain data processors in order to progress your claim. These data processors include Valid8 IP Ltd, Amazon Web Services, Inc and Experian Ltd.

Your data will only ever be transferred to other processors and/or controllers in relation to progressing the claim on your behalf. Your data is never sold to any third party.

Valid8 IP Ltd

In respect of car finance claims, we will disclose personal data to our partner Valid8 IP Ltd for the provision of credit report information which may include Equifax Ltd, Experian Ltd and TransUnion. If you’d like to understand how the credit reference agencies use and share personal data (including the legitimate interests they pursue) please read the Credit Reference Agency Information Notice (CRAIN): www.transunion.co.uk/crain; www.equifax.co.uk/crain; www.experian.co.uk/legal/crain.

International transfers

Some of our service providers (for example, Amazon Web Services, Inc. and Google) may process personal data outside the UK, including in the United States. Where personal data is transferred outside the UK, we ensure a similar degree of protection is afforded to it by using safeguards recognised under UK data protection law. These include transfers to countries covered by UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework (the “UK–US Data Bridge”), the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses. Further information about the safeguards used for a particular transfer is available from our Data Protection Officer.

Making sure your data is secure

We have implemented safeguards to protect your personal data against accidental loss or unauthorised access, use, alteration, or disclosure. Access to your personal data is also restricted to those staff members, agents, contractors, and third parties who require it for business purposes. They are instructed to process your personal data solely according to our directives and are bound by confidentiality obligations.

Procedures have been established to address any potential breaches of personal data. Should such a breach occur, we will inform you and the relevant regulatory authorities, as required by law.

How long do we keep data?

Your personal data will be kept only as long as it is necessary for the reasons it was collected, as well as to meet any legal, accounting, or reporting obligations. When deciding how long to keep personal data, we weigh factors such as the data’s volume, nature, and sensitivity, the risk of harm from unauthorised access or disclosure, the processing objectives, whether those objectives can be met by other means, and legal requirements.

Information on how long we retain different types of your personal data is available, and you can obtain further details by reaching out to our Data Protection Office. Legally, we are required to maintain certain customer information, which will be held securely and used strictly for these legal reasons.

Your rights as a data subject

At any point while we are in possession of or processing your personal data, you, the data subject, are entitled to the following rights:

• Right of access – you have the right to request a copy of the information that we hold about you.
• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing – where certain conditions apply you have a right to restrict the processing.
• Right of portability – you have the right to have the data we hold about you transferred to another organisation.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to object to automated processing, including profiling – you have the right not to be subject to the legal effects of automated processing or profiling.
• Right to judicial review – in the event that Fairweather Group Ltd refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain and we have provided a specific section on this below.

All of the above requests will be forwarded on should there be a third party involved in the processing of your personal data.

Requesting access to my data

When requested, Fairweather Group Ltd is able to verify what personal data we have concerning you and the manner in which it is processed. If Fairweather Group Ltd possesses any of your personal data, you have the right to request the following details:

• Identity and the contact details of the person or organisation that has determined how and why to process your data.
• Contact details of the data protection officer, where applicable.
• The purpose of the processing as well as the legal basis for processing.
• If the processing is based on the legitimate interests of Fairweather Group Ltd or a third party, information about those interests.
• The categories of personal data collected, stored and processed.
• Recipient(s) or categories of recipients that the data is/will be disclosed to.
• If we intend to transfer the personal data to a third country or international organisation, information about how we ensure this is done securely. The UK Government has approved transfers to some countries by way of adequacy regulations because they meet a minimum standard of data protection. In other cases, we will ensure there are specific measures in place to secure your information.
• How long the data will be stored.
• Details of your rights to correct, erase, restrict or object to such processing.
• Information about your right to withdraw consent at any time.
• How to lodge a complaint with the supervisory authority.
• Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failing to provide such data.
• The source of personal data if it wasn’t collected directly from you.
• Any details and information of automated decision making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing.

What forms of ID will I need to provide in order to access this?

Fairweather Group Ltd accepts copies of the following forms of ID when information on your personal data is requested: Passport, Driving licence, Birth certificate.

Contact details of the Data Protection Officer (DPO): Data Protection Officer, 2A Crown Business Park, Cowm Top Lane, Rochdale, Greater Manchester, OL11 2PU. Email: clientservices@claim.co.uk

If things don’t go as planned

Should you have any grievances regarding the way Fairweather Group Ltd or its third-party affiliates process your personal data, or if you are dissatisfied with how your complaint has been addressed, you reserve the right to file a complaint with both the regulatory oversight agency and the Data Protection Officer (DPO) of Fairweather Group Ltd. The details for each of these contacts are:

Complaints Officer, 2A Crown Business Park, Cowm Top Lane, Rochdale, Greater Manchester, OL11 2PU. Email: clientservices@claim.co.uk

You can also make a complaint to the UK’s data protection supervisory authority, the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Web: Make a complaint | ICO. The ICO will expect you to have first raised your concerns with the organisation before submitting a complaint. If you need support with your complaint, you can call the ICO helpline on 0303 123 1113 (local rate) or start a live chat on the ICO website.

For Further Information

If you have any queries about the policy, please get in touch with us using clientservices@claim.co.uk or write to us at the address below and we will do our best to answer your questions.

Claim.co.uk, 2A Crown Business Park, Cowm Top Lane, Rochdale, Greater Manchester, OL11 2PU