Privacy Policy

1. Who We Are

Claims Wizard operates as an independent marketplace connecting individuals with claims specialists across the United Kingdom. We are the data controller for personal data collected through our platform. For any questions about this policy or your data, you can contact us at privacy@claimswizard.co.uk.

2. What Data We Collect

We collect and process the following categories of personal data:

• Identity data: your name, email address, and phone number when you submit an enquiry or create an account.
• Enquiry data: details about your claim or situation that you provide through our enquiry form, including property addresses, dates, descriptions of incidents, and any supporting photographs or documents.
• Technical data: IP address, browser type, device information, and browsing behaviour on our website collected through cookies and similar technologies.
• Communication data: records of your interactions with us, including emails and messages sent through our platform.
• Specialist data: for registered specialists: business name, professional qualifications, contact details, membership tier, and profile information displayed publicly in our directory.

3. How We Use Your Data

We process your personal data for the following purposes:

• Enquiry matching: to share your enquiry details with relevant claims specialists registered on our platform so they can assess whether they can help you.
• Account management: to create and manage your user account, provide access to your dashboard, and enable you to track your enquiries.
• Platform improvement: to analyse how our website is used, identify areas for improvement, and develop new features.
• Communication: to send you service-related notifications, updates about your enquiries, and (with your consent) marketing communications.
• Legal compliance: to comply with our legal obligations, resolve disputes, and enforce our terms.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Consent: where you have given clear consent for us to process your personal data for a specific purpose (e.g. sharing your enquiry with specialists, marketing communications).
• Contract: where processing is necessary for the performance of a contract with you (e.g. providing our enquiry matching service).
• Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights (e.g. analysing platform usage, preventing fraud).
• Legal obligation: where we need to comply with a legal or regulatory obligation.

5. How We Share Your Data

We share your personal data only as necessary:

• Claims specialists: when you submit an enquiry, we share your details with specialists registered on our platform who operate in the relevant category. These specialists are independent professionals and data controllers in their own right.
• Service providers: we may use trusted third-party providers for hosting, analytics, email delivery, and other operational services. These providers process data on our instructions under strict contractual obligations.
• Legal authorities: where required by law, we may disclose data to regulators, law enforcement, or other government bodies.
• Business transfers: in the event of a merger, acquisition, or sale of our business, your data may be transferred to the new owner.

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is typically retained for 6 years from the date of your last activity (in line with limitation periods for legal claims). Account data is retained until you request deletion. We regularly review our data stores and securely delete information that is no longer required.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: you can request a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct inaccurate or incomplete data.
• Right to erasure: you can ask us to delete your personal data in certain circumstances (“right to be forgotten”).
• Right to restrict processing: you can ask us to limit how we use your data in certain circumstances.
• Right to data portability: you can request your data in a structured, commonly used format to transfer to another controller.
• Right to object: you can object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent: where processing is based on consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at privacy@claimswizard.co.uk. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies to function properly and improve your experience. We use the following categories:

• Essential cookies: required for the website to function, including session management, authentication, and security. These cannot be disabled.
• Analytics cookies: help us understand how visitors use our website so we can improve it. These are only set with your consent.
• Functional cookies: remember your preferences and settings to enhance your experience. These are only set with your consent.

You can manage your cookie preferences at any time through the cookie consent banner displayed when you first visit our site. You can also configure your browser to block cookies, though this may affect website functionality.

9. International Transfers

Your data is primarily stored and processed within the United Kingdom and the European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your privacy rights.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure server infrastructure, and regular security assessments. While we strive to protect your data, no method of transmission over the internet is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform functionality. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your data, please contact us at: