This Privacy Notice is v2.1.1 and is valid from 00:01hrs on 1st November 2020. It replaces and supersedes all other Privacy Notices associated with Lawcost Legal.
We take your privacy very seriously. This Privacy Policy details what personal data we collect and how we shall use it.

Changes To This Privacy Notice.

We continually review our Privacy Notice and update it where necessary. We advise that you regularly check our Privacy Notice for updates. We do not wish to bother you with lots of minor amendments, but where we make significant changes to our policy, we shall contact you to inform you. You can read our full Privacy Policy below or Click on each section to find out more

Who are Lawcost Legal ?

The Data Controller of your personal data is Lawcost Legal Limited (Lawcost Legal).
This means that Lawcost Legal decides how your personal data is processed and for what purposes.
Lawcost Legal Limited is Registered in England and Wales CRN 13035913
Regulated and Authorised by the Financial Conduct Authority FRN 307800
Listed as a data controller with the Information Commissioner registration number ZA110112
Our contact details are:
Lawcost Legal Limited, Quadrant Court, 49 Calthorpe Road, Birmingham, B15 1TH

Data Protection Officer Contact Details.
In observance of the General Data Protection Regulation and the Data Protection Act 2018, Lawcost Legal have chosen to establish a Data Protection Officer.
Should you wish to contact our Data Protection Officer regarding a data protection matter you can do so by emailing admin@lawcostlegal.com, or writing to:
Data Protection Officer
Lawcost Legal
Quadrant Court
49 Calthorpe Road
Birmingham
B15 1TH

Personal Data Categories We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have categorised as follows:

• Identity Data: This includes first name, maiden name, last name, marital status, title, date of birth and gender.
• Contact Data: This includes email address and telephone numbers.
• Financial Data: This includes bank account information and payment details.
• Compliance Data: This includes recorded calls for quality checks and staff training. Such recordings may also be used to help us combat fraud.
• Technical Data: This includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• Usage Data: This includes information about how you use our website, products and services.
• Marketing and Communications Data: This includes your preferences in receiving marketing from us and your communication preferences.
• Aggregated Data: This includes statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
• Special Categories of Personal Data: This includes health and vulnerability related data that you may voluntarily share with us during the fulfilment of our services to you. We will always ask for your explicit consent to record and share Special Category Data.
• For what purposes do we process personal data, and what are the lawful basis by which we process data?
  Lawcost Legal processes your Personal Data for the following purposes:

What Are Our Legitimate Interests For Processing Your Data?

Where we have used legitimate interest as the lawful basis for processing your personal data, we may:

• Direct market products and services to you via post, emails, telephone, SMS text and push notifications where they are similar/aligned to our current products and services, a soft opt-in exists, and it conforms with the Privacy and E-Communication Regulation;
• Request specific consent to share customer personal data with specific fulfilment partners so that they may direct market similar or aligned new products and services to our existing customers.
• For reporting, analytics and product/service improvement (including training);
• Improve and maintain data accuracy or completeness.
• Track your email engagement.
• Personalise your online experience. This could include customising the content and/or layout of our pages for individual users, for both visitors and contributors
• Conduct market research. Including research on the demographics, interests, and behaviour of our customers in order to help us gain a better understanding of different audiences and enable us to improve our service. This research may be carried out internally by our employees or we may ask another company to do this work for us. Data will be anonymised to protect your data rights for research purposes.
• Sell your personal data.
• Resolve complaints and/or disputes.

Selling Your Personal Data

Lawcost Legal may choose to sell your personal data.
You have the Right to Object to us selling your personal data at any time and can do so by informing us by telephone, post or email.
Where we choose to sell your information, we shall do so in the following circumstances:

• Where we have your “Consent” to do so.
• Where we have a “Legitimate Interest” to do so, including.
• Where required for a proposed sale; reorganisation; transfer; financial arrangement; asset disposal; or any other transaction relating to our business and/or assets held by our organisation.
• For the purposes of generating revenue for our business we may sell your data to the categories of industry listed below:

International Personal Data Transfer – Countries & Organisations.

If data is transferred outside of the EEA, Lawcost Legal will put in place Standard Contractual Clauses with the Data Controller or Data Processor which contractually obliges them to protect your information to the same standard required by the General Data Protection Regulation and Data Protection Act 2018 post 31 December 2020.

Personal Data Retention Period

Lawcost Legal has the following data retention policies:

• If you purchased, or enquired about purchasing, a Single Premium Mortgage Payment Protection Insurance (SP MPPI) policy through your mortgage broker at the time, where Lawcost Legal were the ‘Administrator’ of that policy or services, we shall retain any personal details applicable, extended to 29/08/2024 (name, email, telephone, postal address, policy details). This will give us time to contact you whilst looking into potential single premium claims and ensuring you were not disadvantaged in making a claim during this time, we may contact you using legitimate interest to market additional products or services.
• Where a Regulating Body directs a statutory retention period, we shall retain the relevant data for the statutory period.
• Where you have downloaded free content from our site, we shall retain your contact details (name, email, mobile telephone number, company, job title) for a period of 7 years, or until you exercise your Right to Object or opt out. During this time, we may contact you using legitimate interest to market similar free content that may be of interest to you.
• Where you have signed up to receive information emails from Lawcost Legal, we shall retain your contact details (name, email, mobile telephone number, company, job title) for 7 years, or until you withdraw your consent.
• Prospect contact details. Where you have enquired about one of our products or services that is designed to assist you to claim money that you are owed, enable you to save money; and/or will strengthen your financial position we shall retain your contact details for 7 years, or until you withdraw your consent, so that we may keep you informed if:
• We expanded our portfolio of product or service offerings.
• Where a new and/or additional PPI claim may be made that may come about due to current legal challenges, future legal challenges and/or fresh evidence of mis-selling.
• New or emerging product or service offerings that may enable you to claim money that you are owed, will save you money or will strengthen your financial position are introduced.
• Client contact details. Where you have completed part or all of our website “PPI Claim” webform and/or we have provided you with a product or service that is designed for you to claim money that you are eligible to claim; and/or will enable you to save money; and/or will strengthen your financial position, we shall retain your contact details for direct marketing purposes for 7 years after any associated deadline (for example the PPI deadline) or full delivery of the product/service we have provided, so that we may keep you informed:
• If we and/or any of our trading styles or group entities expand our portfolio of product or service offerings.
• Where a new and/or additional PPI claim may be made that may come about due to current legal challenges, future legal challenges and/or fresh evidence of mis-selling.
• New or emerging product or service offerings that may enable you to claim money that you are owed, will save you money or will strengthen your financial position are introduced.
• For our PPI claims service, we shall retain your contact details and relevant PPI claims data for 7 years after the PPI deadline. We retain your data for this period of time to enable us to contact you about any changes or challenges to the PPI deadline and/or the circumstance where a claim may be made that may come about due to current legal challenges, future legal challenges and/or fresh evidence of mis-selling.
• When we no longer need this information, we will anonymise your data and/or dispose of it securely.

The Rights Available To Individuals In Respect Of The Processing

Unless subject to an exemption under legislation, you have the following rights with respect to your personal data:

• • Your right of access. You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process. You can read more about your Right to Access here. In most cases Lawcost Legal will not charge for this service however we do have the right to charge an administrative cost should we feel the request is excessive (excessive means that you submit a subject access request multiple times for the same or similar information). Fees will not exceed £50. Information will be provided within 28 calendar days from the day you request it. We will take all reasonable steps to verify your identity before providing you with details of any personal information we may hold about you.
  • Your right to rectification. You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies. You can read more about your Right to Rectification here.
  • Your right to erasure. You have the right to ask us to erase your personal information in certain circumstances. You can read more about your Right to Erasure here.
  • Your right to the restriction of processing. You have the right to ask us to restrict the processing of your information in certain circumstances. You can read more about your Right to the Restriction of Processing here. You have the right to object to processing if we are able to process your information because the process forms part of our public task, or is in our legitimate interests. You can read more about your Right to Object to Processing here.
  • Your right to data portability. This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated. You can read more about your Right to Data Portability here.

If you wish to exercise any of your individual rights, you can do so by informing a member of our team or by contacting our Data Protection Officer by emailing admin@lawcostlegal.com

Your Right To Lodge A Complaint With The ICO

You have the right to lodge a complaint with the UK’s Supervising Authority: The Information Commissioners Office.
Prior to lodging a complaint, Lawcost Legal would like the opportunity to address any complaint you may have.
Should you have a complaint please in the first instance contact our Data Protection Officer by emailing admin@lawcostlegal.comor writing to:
Data Protection Officer
Lawcost Legal Limited
Quadrant House
49 Calthorpe Road,
Birmingham,
B15 1TH

If your complaint has not been resolved, you can lodge a complaint with the Information Commissioners Office via email https://ico.org.uk/global/contact-us/email or by writing to:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire.
SK9 5AF.
Or by telephone on 0303 123 1113.