To provide legal services
To deliver the legal services you have contracted us to provide, we may need to share your personal data with trusted organisations. This will always be done for a specific, agreed purpose and where appropriate with your explicit informed consent. These organisations may include:
- Medical agencies -to arrange medical appointments.
- GPs and hospitals – to obtain relevant medical history.
- Medical experts – to provide medical evidence.
- Vehicle hire companies – to arrange an alternative vehicle, if appropriate.
- Third party insurers or their representatives – to manage details of your claim.
- Unrepresented Defendants (the accused person) – to share details of your claim.
- Courts, barrister/counsel and their representatives – to support litigation activities.
- Mediation service providers – to support dispute resolution between insurers and ourselves.
- Your insurer.
- Verification Agencies – to verify driver and insurance details, such as DVLA, Motor Insurance Database and Motor Insurers’ Bureau.
- Law enforcement agencies – for accident or criminal investigation purposes.
- Specialist experts – such as engineers or Forensic Accountants.
- Rehabilitation providers – to assess and provide treatment and records.
- The coroner’s office – to support investigations into cause of death.
- Witness statement Agencies – that collect witness statements.
- Your employer – with your consent, to verify any loss of earnings and support determination of losses.
- The Health and Safety Executive – to establish accident circumstances.
- Banking/financial services – to support payment transactions.
- Repair organisations – to assess damage and recover repaid costs for your vehicle.
- Litigation friend/authorised persons – to provide you with support to manage the claim
- CCTV Operators – to support evidence gathering.
- External survey providers – to facilitate the collection of customer feedback surveys.
- E-signature providers – to facilitate secure document signing.
- Call overflow service providers – to ensure we provide timely and effective telephony services to you.
- Telephony Partners – to support call monitoring and recording.
We ensure that all organisations we work with handle your data securely and in accordance with data protection laws.
Legal and Regulatory Obligations
In certain circumstances, we are legally required to share your personal data with regulatory bodies and enforcement agencies. These may include:
- Regulatory authorities – such as the Solicitors Regulation Authority (SRA), Financial Conduct Authority (FCA) or the Information Commissioners Office (ICO), to meet our professional and compliance obligations.
- Serious Organised Crime Agency (SOCA) – where criminal activity is suspected.
- National Crime Agency (NCA) – where fraudulent activity is suspected.
- Office of Financial Sanctions Implementation (OFSI) – if our systems identify a match with individuals or entities subject to financial sanctions (e.g. frozen assets).
- Anti-money laundering reporting – We are required to report customers who could potentially be involved in money laundering activities.
- Law Enforcement Agencies – to support investigations into fraudulent activities.
We only share data with these organisations when necessary and in accordance with applicable laws and regulations.
Commercial and Contractual Obligations
To meet our commercial and contractual obligations, we may share your personal data with specific organisations, such as your insurer or Legal Expenses Insurance Provider to:
- Assess our service levels and ensure compliance with agreed processes.
- Share the progress of your claim to ensure we meet reporting requirements with them.
If the auditing activities or the updates include special category data (e.g. medical records) then your consent will be obtained prior to us sharing the data with them.
Informed Consent
We will gain specific consent from you to involve you in:
- Public relations – where we may identify you in promotional activities to promote our services or business.
- Market research – where we may seek your views to support initiatives such as new product developments.
We will always contact you before these activities take place to request your consent. You are free to decline participation, and if you do consent, you may withdraw it at any time.
Sharing Data to Protect Life
In exceptional circumstances, we may share your personal data with relevant authorities if we believe you are in danger. This is done solely to protect your life or wellbeing.
Automated Decision-making and Profiling
Some of the personal data you provide may be subject to automated decision-making to support our business processes. For example:
- Information about your claim may be automatically assessed to estimate its value and determine the most appropriate legal procedure.
We may also use your data to create digital profiles that help us improve our services and decision-making. Any data used for profiling will be anonymised before analysis.
You have the right to:
- Request that any decisions made through automated processing are reviewed by a member of our Legal Services Team.
- Object to your personal data being used for profiling purposes.
We use Artificial Intelligence (AI) technologies to support and enhance our business operations, including risk assessment, compliance monitoring, and decision-making processes.
You have the right to:
- Access your personal data.
- Rectify inaccurate data.
- Erase data where appropriate.
- Restrict or object to processing.
- Request data portability.
To exercise your rights or raise concerns about AI processing, please contact [email protected] for more details on how to do this.
Further information can also be found on the Information Commissioner’s Office website (www.ico.org.uk)