Valid8 IP Ltd acts as an intermediary and technology service provider between service providers, companies who offer advice and consumers

Our postal address is: –
Suite 3 Foundation
2 George Street
Altrincham
WA14 1SG

Email – DP@valid8.cloud

We are registered with the Information Commissioner’s Office (Reg. No. CSN3443818).

This privacy policy sets out how Valid8 IP Ltd, collects, uses and protects your information when you use this website or our services, in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

Valid8 IP Ltd is the controller and is responsible for your personal data. We are committed to ensuring that your privacy is protected. By using our website and/or our services, you may be providing us with some of your personal information and we want to make sure that we do not use your data in a way that you would not expect. Valid8 IP Ltd assure you that your personal information will only be used in accordance with this privacy policy and in compliance with the latest privacy regulations.

Valid8 IP Ltd may change this policy in future by updating this page. You should check this page from time to time to ensure that you are happy with any changes.

Personal Information We Collect

Personal information is any information about an individual from which that person can be identified. It does not include data which has been anonymised.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

1. Contact information: Name, current and previous addresses (including postal, email and IP addresses) and telephone numbers.
2. Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.
3. Financial Data: includes information on your financial circumstances, the lenders or financial institutions used by you, the financial products you have taken out and the details and status of those financial products.
4. Usage Data includes information about how you use our website, products and services. This may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is our analytics tracking system.
5. Marketing and Communications Data includes your preferences in receiving marketing from us and our third party partners and your communication preferences.
6. Special Category Data: We will only process special category data where you have provided this to us and given your explicit consent to store it or we have a legal/regulatory obligation to. This includes race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.

This list may not include all the information we require when providing our service/s. The information we ask you for will relate to your specific enquiry and will only consist of the information we need to carry out our service. If you contact us other than via our website, we will keep a record of that correspondence and a copy of call recordings.

Method of collection

1. Direct interactions: By you filling in forms on our website or social media or by corresponding with us by post, phone, email or otherwise.
2. Third parties: We may receive information about you from a third-party partner firm who you have provide permission to share your data.
3. Public sources: The DVLA or from publicly available data.
4. Credit Reference Agencies: Equifax, Experian and TransUnion (for credit reports)
5. Data Sharing Platform: Equifax Ltd (for sharing bank transaction data)

We will always inform you where we have obtained your information from if requested by you.

The basis on which we process your information

The legal grounds for processing your personal information depend upon the nature of our relationship with you and the context of processing and are as follows:

1. Processing is necessary for the performance of a contract with you, or to take steps prior to entering into a contract with you.
2. Processing is necessary for the purposes of your legitimate interests or our legitimate interests, where your fundamental rights and interests do not override those interests. In order to determine this we shall undertake a Legitimate Interests Assessment and balancing test.
3. Processing is necessary for compliance with mandatory legal or regulatory obligations to which we are subject
4. Processing is undertaken after you have given us your express consent.

What we use your personal information for

We collect/store or use your information to…	Legal basis
assist your claims management company, solicitor, law firm, debt management firm, insolvency practitioner, mortgage provider to provide the service you have requested	Consent or Legitimate Interest
send to your claims management company, solicitor, law firm, debt management firm, insolvency practitioner	Consent or Legitimate Interest
send to our service provider/contractor partners	Consent and/or Legitimate Interests
send you information or marketing about our products and services	Legitimate Interests and/or Consent
provide annual statistics to our regulator	Legal Obligation
resolve complaints against us or the establishment, exercise or defence of legal claims	Legitimate Interests and/or Legal Obligation
gather feedback to enable us to improve our website, products and services	Legitimate Interests
verify your identity where we receive requests to access or change the information we hold about you	Legal Obligation
maintain our accounts and records	Legal Obligation
comply with legal and regulatory obligations	Legal Obligation
research and analyse trends to better understand how users are using our website and services in order to improve them	Legitimate Interests
inform you about changes in our services and important service related notices, such as security and fraud issues	Legal Obligation
maintaining insurance coverage, managing risks, or obtaining professional advice	Legitimate Interests and/or Legal Obligation

Providing your personal data to others

We will disclose personal data to credit information firms TransUnion, Experian Ltd, Equifax Ltd for the purposes of obtaining your credit file or open banking. If you’d like to understand how the credit reference agencies use and share personal data (including the legitimate interests they pursue) please read the Credit Reference Agency Information Notice (CRAIN); http://www.transunion.co.uk/crain; https://www.equifax.co.uk/crain; https://www.experian.co.uk/legal/crain/

We will disclose your data to companies you are working with such as claims management companies, debt management firms, insolvency practitioners, solicitors or law firms, upon your consent to do so, for the purpose of enabling them to provide relevant services to you. Each such third party will act as a data controller in relation to the data that we supply to it; and each such third party will supply to you a copy of its own privacy policy, which will govern that third party’s use of your personal data.

We may disclose your personal data to insurers, compliance consultants and/or professional advisers in so far as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

We may disclose personal data to our suppliers or subcontractors, such as external printers, IT service providers, credit information firms, admin companies, call centres, compliance consultants and legal advisers.

Any external processors, who process your data on our behalf, are subject to a data processing agreement to ensure the safety and protection of your data. None of our processors are allowed to use your data for any other purposes than instructed by us.

In addition to the specific disclosures of personal data set out in this Section, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

Marketing

You are provided with choices regarding marketing and we record your preferences in relation to this and how we communicate with you.

We may rely on consent when we use your personal information for direct marketing. This will be where you have specifically consented to us or a third party that you are happy to receive marketing contact from us.

We may also rely on legitimate interests for our direct marketing. Our legitimate interests are to inform individuals about products or services which may be of interest to them. Our legitimate interest may also be our commercial interests in operating our business, which includes acquiring new customers, providing additional services to existing or previous customers that are similar or aligned with previous products or services and, expanding our operations.

You may also receive marketing communications from us if you have previously enquired about or purchased similar services from us and, in each case, you have not opted-out of receiving that marketing. This is known as a ‘soft opt-in’.

Such marketing communications may be in relation to claims management, financial advice and legal services which could be done by post, email, SMS or telephone.

To opt out of receiving future marketing under any lawful basis, or under soft opt in, in which we intend to rely on for direct marketing, please opt-out using the contact details provided in this Privacy Policy.

If you require any further information about the lawful basis we have relied on to send direct marketing to you, please do not hesitate to contact us.

Cookies

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. These cookies are stored by the browser on your device. They can be used for a variety of purposes, such as identifying your previous visits to a website, researching the most popular features of a website.

For further information please feel free to visit our cookie policy page on valid8.co.uk . You can set your browser not to accept cookies and the following websites (www.aboutcookies.org or www.allaboutcookies.org) tell you how to remove cookies from your browser. However, in a few cases some of our website features may not function as a result.

Google cookies

Valid8 IP Ltd uses Google Analytics to monitor the use of its website valid8.co.uk . Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users’ computers. The information generated relating to our website is used to create reports about the use of the website. Google will store and use this information. Google’s privacy policy is available at: http://www.google.com/privacypolicy.html

Refusing cookies

Most browsers allow you to refuse to accept cookies. Please see below for further details:

Microsoft Edge: https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d

Firefox: https://support.mozilla.org/en-US/kb/block-websites-storing-site-preferences?redirectlocale=en-US&redirectslug=Blocking+cookies

Google Chrome: https://support.google.com/chrome/answer/95647?hl=en-GB

Safari: https://support.apple.com/kb/ph21411?locale=en_US

Opera : http://www.opera.com/help/tutorials/security/privacy/

Please note: The Valid8 IP Ltd website contains hyperlinks to websites owned and operated by third parties. These third-party websites will have their own privacy policies, including cookies, and we suggest that you check them. They will govern the use of any personal information which is collected by cookies while visiting these websites. Valid8 IP Ltd cannot accept any responsibility or liability for the privacy practices of such third-party websites and your use of such websites is at your own risk.

How long do we keep your personal information

We retain your information for as long as is necessary for the purpose for which it was originally obtained. We have some legal and regulatory obligations to hold certain pieces of information for specific timeframes.

Credit Reports – will be stored for 30 days and then pseudonymised.

Banking Transaction Data – will be stored for 30 days and then deleted.

Where we have provided a service to you, we will hold all information relevant to this for 6 years to enable us to defend any claims/complaints made about our service. Information relating to any complaints will be held for 3 years.

We also need to keep some of your information for our accounting and reporting requirements.

Your contact details will be held for the purposes of direct marketing for6 years, this is to enable us to let you know about new products or services that may be of interest to you as detailed above.

Your Rights

You have the following rights in accordance with the UK GDPR and the DPA:

1. To know that your data is being processed
2. To access your personal data free of charge
3. To have your information corrected if inaccurate (including ensuring any third party puts right any inaccuracy)
4. To request that your data be erased
5. To restrict processing
6. To request transfer of your data
7. To object to processing and;
8. Rights relating to automated decision making and profiling

You may request that we to provide you with any personal information we hold about you. Where you send us a request to access your data, this will usually be free of change and sent to you within one month (unless your request is complex). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity before we are able to process your request.

We may withhold personal information that you request to the extent permitted by law.

You may instruct us at any time not to process your personal information for marketing purposes.

If at any point you wish to raise a complaint regarding our data handling then you have the right to complain to the Information Commissioner’s Office (ICO) the supervisory authority for data protection issues in the UK whose information is available at www.ico.org.uk. However, we would appreciate to opportunity to deal with any concerns directly with you in the first instance.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane, Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk

Security

Valid8 IP Ltd recognise the personal nature of the information we collect, process and store. Valid8 IP Ltd is committed to good data management to protect people from harm. All personal data provided to us is stored on our secure servers. As we are committed to ensuring that your information is secure, we have put in place suitable physical, electronic and managerial procedures to prevent loss, unauthorised access, misuse or disclosure and to make sure that your information is safe and secure. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

Links to other websites

Our website valid8.co.uk may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which may be collected or you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

General and opt out

You may not transfer any of your rights under this privacy policy to any other person. We may transfer our rights under this privacy policy where we reasonably believe your rights will not be affected.

If any court or competent authority finds that any provision of this privacy policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this privacy policy will not be affected. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

 

BlueLion Claims is a trading style of BlueLion Law Limited.

This Privacy Policy sets out how BlueLion Claims, collects, uses and protects your information when you use this website or our services, in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

BlueLion Claims is the controller and is responsible for your personal data. We are committed to ensuring that your privacy is protected. By using our website and/or our services, you may be providing us with some of your personal information and we want to make sure that we do not use your data in a way that you would not expect. BlueLion Claims assures you that your personal information will only be used in accordance with this Privacy Policy and in compliance with the latest privacy regulations.

BlueLion Claims may change this policy in future by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 15 December 2025.

Personal Information We Collect

Personal information is any information about an individual from which that person can be identified. It does not include data which has been anonymised.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Contact information: Name, current and previous addresses (including postal, email and IP addresses) and telephone numbers.
• Identity Data: Includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.
• Financial Data: Includes information on your financial circumstances, the lenders or financial institutions used by you, the financial products you have taken out and the details and status of those financial products.
• Usage Data Includes information about how you use our website, products and services. This may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is our analytics tracking system.
• Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.
• Special Category Data: We will only process special category data where you have provided this to us and given your explicit consent to store it or we have a legal/regulatory obligation to. This includes race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.

This list may not include all the information we require when providing our services. The information we ask you for will relate to your specific enquiry and will only consist of the information we need to carry out our service. If you contact us other than through our website, we will keep a record of that correspondence and a copy of call recordings.

Method Of Collection

• Direct interactions: By you filling in forms on our website or social media or by corresponding with us by post, phone, email or otherwise.
• Third parties or public sources: We may receive information about you from various reputable third-party lead providers, from our regulators, your lenders, DVLA or from publicly available data.
• Credit information firms: We may verify your identity through third party credit information firms which will carry out a soft credit search. We will always obtain your consent to do this, and it will not affect your credit score in any way.
• Updating you: We will always inform you of the source from which we have obtained your information, if requested by you.

The Basis On Which We Process Your Information

The legal grounds for processing your personal information depend upon the nature of our relationship with you and the context of processing, as follows:

• Processing is necessary for the performance of a contract with you, or to take steps prior to entering into a contract with you.
• Processing is necessary for the purposes of your legitimate interests or our legitimate interests, where your fundamental rights and interests do not override those interests. In order to determine this, we shall undertake a Legitimate Interests Assessment and balancing test.
• Processing is necessary for compliance with mandatory legal or regulatory obligations to which we are subject.
• Processing is undertaken after you have given us your express consent.

What We Use Your Personal Information For

We collect/store or use your information to:

Purpose	Legal basis
Provide the service you have requested	Contract
Obtain information from credit information firms to identify and support your claims	Consent
Send to our service providers/contractor partners (including, but not limited to, compliance consultants, barristers, experts, marketing providers and funders)	Contract and/or Legitimate Interests
Send you information or marketing about our products and services	Legitimate Interests and/or Consent
Contact you where you fail to fully complete our online form	Legitimate Interests and/or Contract
Provide reports, questionnaires, returns and declarations to our regulator	Legal Obligation
Resolve complaints against us or the establishment, exercise or defence of legal claims	Legitimate Interests and/or Legal Obligation
Gather feedback to enable us to improve our website, products and services	Legitimate Interests
Verify your identity where we receive requests to access or change the information we hold about you	Legal Obligation
Maintain our accounts and records	Legal Obligation
Comply with legal and regulatory obligations	Legal Obligation
Research and analyse trends to better understand how users are using our website and services in order to improve them	Legitimate Interests
Inform you about changes in our services and important service-related notices, such as security and fraud issues	Legal Obligation
Maintaining insurance coverage, managing risks, or obtaining professional advice	Legitimate Interests and/or Legal Obligation

Providing Your Personal Data To Others

We may disclose your data to one or more of our selected third-party service providers, upon your consent to do so, for the purpose of enabling them to contact you so that they can offer, market and provide relevant services to you. Each such third party will act as a data controller in relation to the data that we supply to it; and upon contacting you, each such third party will supply to you a copy of its own privacy policy, which will govern that third party’s use of your personal data.

We may disclose your personal data to insurers, compliance consultants and/or professional advisers in so far as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

We may disclose personal data to our suppliers or subcontractors, such as external printers, IT service providers, credit information firms, admin companies, call centres, compliance consultants, legal advisers, professional experts and barristers.

We may disclose personal data to our partner credit information firm, Valid8 IP Ltd, for the purposes of obtaining your credit file from one or more credit reference bureaus and you can view their privacy policy: Valid8 | IP.

With your consent we will carry out a soft credit search through Valid8 IP Ltd to identify and validate any potential claims you may have, and your information will be shared with the following credit reference bureaus:

• Equifax Ltd – https://www.equifax.co.uk
• Experian Ltd – https://www.experian.co.uk
• TransUnion Information Group Limited – https://www.transunion.co.uk

If you would like to understand how the credit reference bureaus use and share personal data (including the legitimate interests they pursue) please read the Credit Reference Agency Information Notice (CRAIN) here https://www.equifax.co.uk/privacy-hub/crainhttps://www.experian.co.uk/legal/crain/https://www.transunion.co.uk/legal/privacy-centre/pc-credit-reference.

Any external processors, who process your data on our behalf, are subject to a data processing agreement to ensure the safety and protection of your data. None of our processors are allowed to use your data for any other purposes than instructed by us.

In addition to the specific disclosures of personal data set out in this section, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

To assist us to provide our services to you we may use data processors that are outside of the European Economic Area (EEA). Robust and comprehensive due diligence is completed before we use any data processors outside the EEA. Where the country, territory, sector or international organisation that the transfer of personal data is being made has not got an EU Commission ‘adequacy decision’, the restricted transfer will only be made where there is an appropriate safeguard in place which will ensure that your rights and freedoms in respect of your personal data are protected. Please contact us if you need any further details about how we transfer personal data outside of the EEA and what safeguards are in place.

Marketing

You are provided with choices regarding marketing and we record your preferences in relation to this and how we communicate with you.

We may rely on consent when we use your personal information for direct marketing. This will be where you have specifically consented to us or a third party that you are happy to receive marketing contact from us.

We may also rely on legitimate interests for our direct marketing. Our legitimate interests are to inform individuals about products or services which may be of interest to them. Our legitimate interest may also be our commercial interests in operating our business, which includes acquiring new customers, providing additional services to existing or previous customers that are similar or aligned with previous products or services and expanding our operations.

You may also receive marketing communications from us if you have previously enquired about or purchased similar services from us and, in each case, you have not opted out of receiving that marketing. This is known as a ‘soft opt-in’.

Such marketing communications may be in relation to claims management, legal services and financial services which could be undertaken by post, email, SMS or telephone.

To opt out of receiving future marketing under any lawful basis, or under soft opt in, in which we intend to rely on for direct marketing, please opt out using the contact details provided in this Privacy Policy.

If you require any further information about the lawful basis we have relied on to send direct marketing to you, please do not hesitate to contact us.

Cookies

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. As you interact with our website, we may collect Technical Data and Usage Data about your equipment, browsing actions and patterns. We collect this personal data by using Third-Party cookies, specifically Google Analytics. You can view Google’s privacy policy here: www.google.com/policies/privacy.

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

You will be asked to provide your consent for us to use cookies upon your first visit to our website.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Also, to opt out of being tracked via Google Analytics, you can use Google’s opt-out browser add-on: https://tools.google.com/dlpage/gaoptout

If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

How Long Do We Keep Your Personal Information

We retain your information for as long as is necessary for the purpose for which it was originally obtained.  However, where we have provided a service, we will retain your information for 7 years from when the matter concluded.

We have some legal and regulatory obligations to hold certain pieces of information for specific timeframes.

We also need to keep some of your information for our accounting and reporting requirements.

Your contact details will be held for the purposes of direct marketing for 3 years; this is to enable us to let you know about new products or services that may be of interest to you as detailed above.

Your Rights

You have the following rights in accordance with the UK GDPR and the DPA:

• To know that your data is being processed
• To access your personal data free of charge
• To have your information corrected if inaccurate (Including ensuring any third party puts right any inaccuracy)
• To request that your data be erased
• To restrict processing
• To request transfer of your data
• To object to processing
• To maintain your rights relating to automated decision making and profiling

You may request that we to provide you with any personal information we hold about you. Where you send us a request to access your data, this will usually be free of change and sent to you within one month (unless your request is complex). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity before we are able to process your request.

We may withhold personal information that you request to the extent permitted by law.

You may instruct us at any time not to process your personal information for marketing purposes.

We may use automated decision making in our claims process and/or profiling in order to send you targeted marketing.

You have the right to access details of the information we used to create your profile and the right to object to profiling, including profiling for marketing purposes.

You have the right to request human intervention or challenge an automated decision.

We do not use automated decision making which would produce legal or significant effects on individuals.

If at any point you wish to raise a complaint regarding our data handling then you have the right to complain to the Information Commissioner’s Office (ICO) which is the supervisory authority for data protection issues in the UK whose information is available at www.ico.org.uk. However, we would appreciate the opportunity to deal with any concerns directly with you in the first instance.

Security

BlueLion Claims recognises the personal nature of the information we collect, process and store. As we are committed to ensuring that your information is secure, we have put in place suitable physical, electronic and managerial procedures to prevent loss, unauthorised access, misuse or disclosure and to make sure that your information is safe and secure. If password access is required for certain parts of our website/application, you are responsible for keeping this password confidential.

Links To Other Websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which may be collected or you provide whilst visiting such sites as such sites are not governed by this Privacy Policy. You should exercise caution and look at the privacy statement applicable to the website in question.

General and Opt Out

You may not transfer any of your rights under this Privacy Policy to any other person. We may transfer our rights under this Privacy Policy where we reasonably consider your rights will not be affected.

If any court or competent authority finds that any provision of this Privacy Policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Policy will not be affected. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

If you have any queries relating to our Privacy Policy or the personal data we hold about you, wish to opt out of marketing or you wish to invoke any of your legal rights, you can contact us by:

Email: contactus@bluelionclaims.co.uk

Telephone:  020 8153 0033

Post: BlueLion Claims, The Centro Buildings, 20–23 Mandela Street, London NW1 0DU

This Privacy Policy sets out how BlueLion Claims, collects, uses and protects your information when you use this website or our services, in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

BlueLion Claims is the controller and is responsible for your personal data. We are committed to ensuring that your privacy is protected. By using our website and/or our services, you may be providing us with some of your personal information and we want to make sure that we do not use your data in a way that you would not expect. BlueLion Claims assures you that your personal information will only be used in accordance with this Privacy Policy and in compliance with the latest privacy regulations.

BlueLion Claims may change this policy in future by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 15 December 2025.

Personal Information We Collect

Personal information is any information about an individual from which that person can be identified. It does not include data which has been anonymised.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Contact information: Name, current and previous addresses (including postal, email and IP addresses) and telephone numbers.
• Identity Data: Includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.
• Financial Data: Includes information on your financial circumstances, the lenders or financial institutions used by you, the financial products you have taken out and the details and status of those financial products.
• Usage Data Includes information about how you use our website, products and services. This may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is our analytics tracking system.
• Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.
• Special Category Data: We will only process special category data where you have provided this to us and given your explicit consent to store it or we have a legal/regulatory obligation to. This includes race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.

This list may not include all the information we require when providing our services. The information we ask you for will relate to your specific enquiry and will only consist of the information we need to carry out our service. If you contact us other than through our website, we will keep a record of that correspondence and a copy of call recordings.

Method Of Collection

• Direct interactions: By you filling in forms on our website or social media or by corresponding with us by post, phone, email or otherwise.
• Third parties or public sources: We may receive information about you from various reputable third-party lead providers, from our regulators, your lenders, DVLA or from publicly available data.
• Credit information firms: We may verify your identity through third party credit information firms which will carry out a soft credit search. We will always obtain your consent to do this, and it will not affect your credit score in any way.
• Updating you: We will always inform you of the source from which we have obtained your information, if requested by you.

The Basis On Which We Process Your Information

The legal grounds for processing your personal information depend upon the nature of our relationship with you and the context of processing, as follows:

• Processing is necessary for the performance of a contract with you, or to take steps prior to entering into a contract with you.
• Processing is necessary for the purposes of your legitimate interests or our legitimate interests, where your fundamental rights and interests do not override those interests. In order to determine this, we shall undertake a Legitimate Interests Assessment and balancing test.
• Processing is necessary for compliance with mandatory legal or regulatory obligations to which we are subject.
• Processing is undertaken after you have given us your express consent.

What We Use Your Personal Information For

We collect/store or use your information to:

Purpose	Legal basis
Provide the service you have requested	Contract
Obtain information from credit information firms to identify and support your claims	Consent
Send to our service providers/contractor partners (including, but not limited to, compliance consultants, barristers, experts, marketing providers and funders)	Contract and/or Legitimate Interests
Send you information or marketing about our products and services	Legitimate Interests and/or Consent
Contact you where you fail to fully complete our online form	Legitimate Interests and/or Contract
Provide reports, questionnaires, returns and declarations to our regulator	Legal Obligation
Resolve complaints against us or the establishment, exercise or defence of legal claims	Legitimate Interests and/or Legal Obligation
Gather feedback to enable us to improve our website, products and services	Legitimate Interests
Verify your identity where we receive requests to access or change the information we hold about you	Legal Obligation
Maintain our accounts and records	Legal Obligation
Comply with legal and regulatory obligations	Legal Obligation
Research and analyse trends to better understand how users are using our website and services in order to improve them	Legitimate Interests
Inform you about changes in our services and important service-related notices, such as security and fraud issues	Legal Obligation
Maintaining insurance coverage, managing risks, or obtaining professional advice	Legitimate Interests and/or Legal Obligation

Providing Your Personal Data To Others

We may disclose your data to one or more of our selected third-party service providers, upon your consent to do so, for the purpose of enabling them to contact you so that they can offer, market and provide relevant services to you. Each such third party will act as a data controller in relation to the data that we supply to it; and upon contacting you, each such third party will supply to you a copy of its own privacy policy, which will govern that third party’s use of your personal data.

We may disclose your personal data to insurers, compliance consultants and/or professional advisers in so far as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

We may disclose personal data to our suppliers or subcontractors, such as external printers, IT service providers, credit information firms, admin companies, call centres, compliance consultants, legal advisers, professional experts and barristers.

We may disclose personal data to our partner credit information firm, Valid8 IP Ltd, for the purposes of obtaining your credit file from one or more credit reference bureaus and you can view their privacy policy: Valid8 | IP.

With your consent we will carry out a soft credit search through Valid8 IP Ltd to identify and validate any potential claims you may have, and your information will be shared with the following credit reference bureaus:

• Equifax Ltd – https://www.equifax.co.uk
• Experian Ltd – https://www.experian.co.uk
• TransUnion Information Group Limited – https://www.transunion.co.uk

If you would like to understand how the credit reference bureaus use and share personal data (including the legitimate interests they pursue) please read the Credit Reference Agency Information Notice (CRAIN) here https://www.equifax.co.uk/privacy-hub/crainhttps://www.experian.co.uk/legal/crain/https://www.transunion.co.uk/legal/privacy-centre/pc-credit-reference.

Any external processors, who process your data on our behalf, are subject to a data processing agreement to ensure the safety and protection of your data. None of our processors are allowed to use your data for any other purposes than instructed by us.

In addition to the specific disclosures of personal data set out in this section, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

To assist us to provide our services to you we may use data processors that are outside of the European Economic Area (EEA). Robust and comprehensive due diligence is completed before we use any data processors outside the EEA. Where the country, territory, sector or international organisation that the transfer of personal data is being made has not got an EU Commission ‘adequacy decision’, the restricted transfer will only be made where there is an appropriate safeguard in place which will ensure that your rights and freedoms in respect of your personal data are protected. Please contact us if you need any further details about how we transfer personal data outside of the EEA and what safeguards are in place.

Marketing

You are provided with choices regarding marketing and we record your preferences in relation to this and how we communicate with you.

We may rely on consent when we use your personal information for direct marketing. This will be where you have specifically consented to us or a third party that you are happy to receive marketing contact from us.

We may also rely on legitimate interests for our direct marketing. Our legitimate interests are to inform individuals about products or services which may be of interest to them. Our legitimate interest may also be our commercial interests in operating our business, which includes acquiring new customers, providing additional services to existing or previous customers that are similar or aligned with previous products or services and expanding our operations.

You may also receive marketing communications from us if you have previously enquired about or purchased similar services from us and, in each case, you have not opted out of receiving that marketing. This is known as a ‘soft opt-in’.

Such marketing communications may be in relation to claims management, legal services and financial services which could be undertaken by post, email, SMS or telephone.

To opt out of receiving future marketing under any lawful basis, or under soft opt in, in which we intend to rely on for direct marketing, please opt out using the contact details provided in this Privacy Policy.

If you require any further information about the lawful basis we have relied on to send direct marketing to you, please do not hesitate to contact us.

Cookies

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. As you interact with our website, we may collect Technical Data and Usage Data about your equipment, browsing actions and patterns. We collect this personal data by using Third-Party cookies, specifically Google Analytics. You can view Google’s privacy policy here: www.google.com/policies/privacy.

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

You will be asked to provide your consent for us to use cookies upon your first visit to our website.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Also, to opt out of being tracked via Google Analytics, you can use Google’s opt-out browser add-on: https://tools.google.com/dlpage/gaoptout

If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

How Long Do We Keep Your Personal Information

We retain your information for as long as is necessary for the purpose for which it was originally obtained.  However, where we have provided a service, we will retain your information for 7 years from when the matter concluded.

We have some legal and regulatory obligations to hold certain pieces of information for specific timeframes.

We also need to keep some of your information for our accounting and reporting requirements.

Your contact details will be held for the purposes of direct marketing for 3 years; this is to enable us to let you know about new products or services that may be of interest to you as detailed above.

Your Rights

You have the following rights in accordance with the UK GDPR and the DPA:

• To know that your data is being processed
• To access your personal data free of charge
• To have your information corrected if inaccurate (Including ensuring any third party puts right any inaccuracy)
• To request that your data be erased
• To restrict processing
• To request transfer of your data
• To object to processing
• To maintain your rights relating to automated decision making and profiling

You may request that we to provide you with any personal information we hold about you. Where you send us a request to access your data, this will usually be free of change and sent to you within one month (unless your request is complex). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity before we are able to process your request.

We may withhold personal information that you request to the extent permitted by law.

You may instruct us at any time not to process your personal information for marketing purposes.

We may use automated decision making in our claims process and/or profiling in order to send you targeted marketing.

You have the right to access details of the information we used to create your profile and the right to object to profiling, including profiling for marketing purposes.

You have the right to request human intervention or challenge an automated decision.

We do not use automated decision making which would produce legal or significant effects on individuals.

If at any point you wish to raise a complaint regarding our data handling then you have the right to complain to the Information Commissioner’s Office (ICO) which is the supervisory authority for data protection issues in the UK whose information is available at www.ico.org.uk. However, we would appreciate the opportunity to deal with any concerns directly with you in the first instance.

Security

BlueLion Claims recognises the personal nature of the information we collect, process and store. As we are committed to ensuring that your information is secure, we have put in place suitable physical, electronic and managerial procedures to prevent loss, unauthorised access, misuse or disclosure and to make sure that your information is safe and secure. If password access is required for certain parts of our website/application, you are responsible for keeping this password confidential.

Links To Other Websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which may be collected or you provide whilst visiting such sites as such sites are not governed by this Privacy Policy. You should exercise caution and look at the privacy statement applicable to the website in question.

General and Opt Out

You may not transfer any of your rights under this Privacy Policy to any other person. We may transfer our rights under this Privacy Policy where we reasonably consider your rights will not be affected.

If any court or competent authority finds that any provision of this Privacy Policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Policy will not be affected. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

If you have any queries relating to our Privacy Policy or the personal data we hold about you, wish to opt out of marketing or you wish to invoke any of your legal rights, you can contact us by:

Email: contactus@bluelionclaims.co.uk

Telephone:  020 8153 0033

Post: BlueLion Claims, The Centro Buildings, 20–23 Mandela Street, London NW1 0DU