Privacy Policy

Introduction

firm-bracket ("we", "us", or "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect personal information when you use our services or interact with our website.

We are registered with the Information Commissioner's Office (ICO) under registration number ZB284761. Our registered office is at 47 Meridian House, Canary Wharf, London E14 5HJ.

Information We Collect

The nature of our benefits advisory services means we collect detailed personal information to assess your entitlements accurately. This may include:

Identity Information

• Full name, date of birth, and National Insurance number
• Proof of identity documents when required for applications
• Information about your household members

Contact Details

• Postal address, email address
• Preferred contact methods

Financial Information

• Income from employment, pensions, or other sources
• Savings and capital
• Housing costs including rent or mortgage payments
• Existing benefit awards

Health Information

• Medical conditions and disabilities (where relevant to benefit claims)
• Information about how conditions affect daily living
• GP or specialist details for medical evidence requests

Technical Data

• IP address and browser type when visiting our website
• Pages viewed and time spent on site
• Referring website addresses

How We Use Your Information

We process your personal data for the following purposes:

• Assessing your eligibility for benefits and calculating potential entitlements
• Preparing and submitting benefit applications on your behalf
• Communicating with the DWP, HMRC, or local authorities regarding your claims
• Preparing appeals and mandatory reconsideration requests
• Contacting you about your case progress
• Processing payments for our services
• Improving our website and services
• Complying with legal obligations

Legal Basis for Processing

We rely on the following legal grounds under UK GDPR:

• Contract: Processing necessary to deliver services you have requested
• Legitimate interests: Operating our business, improving services, preventing fraud
• Legal obligation: Complying with regulatory requirements
• Consent: For marketing communications (where applicable)
• Explicit consent: For processing special category data such as health information

Sharing Your Information

We may share your information with:

• Government departments: DWP, HMRC, local councils—only as necessary for benefit claims you have authorised us to make
• Healthcare providers: To request medical evidence supporting your applications
• Tribunals service: When preparing appeals
• Professional advisors: Accountants, legal advisors, where necessary
• IT service providers: Who help us operate our systems securely

We never sell your personal information or share it with third parties for their marketing purposes.

Data Security

We implement appropriate security measures to protect your personal information:

• Encrypted storage for sensitive documents
• Secure, password-protected systems with two-factor authentication
• Regular security assessments
• Staff training on data protection
• Physical security measures at our office

Despite these measures, no method of transmission or storage is completely secure. We cannot guarantee absolute security but will notify you and the ICO of any breach as required by law.

Data Retention

We retain your information for as long as necessary for the purposes it was collected:

• Active client files: Duration of our engagement plus 6 years
• Completed cases: 6 years from case closure (in line with statutory limitation periods)
• Appeal records: 6 years from final tribunal decision
• Financial records: 7 years for tax and accounting purposes
• Website analytics: 26 months

After these periods, data is securely deleted or anonymised.

Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion in certain circumstances
• Restriction: Request we limit how we use your data
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We respond to requests within one month.

International Transfers

Your data is primarily processed and stored within the United Kingdom. If any processing occurs outside the UK, we ensure appropriate safeguards are in place through Standard Contractual Clauses or adequacy decisions.

Changes to This Policy

We may update this policy periodically. Significant changes will be notified via email to active clients or prominently posted on our website. The "last updated" date indicates when the policy was most recently revised.

Contact and Complaints

For questions about this policy or our data practices:

Email: [email protected]
Address: 47 Meridian House, Canary Wharf, London E14 5HJ

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or by calling their helpline.