Pinnacle Claims Limited T/a Pinnacle Claims, (Company No: 14362307), Registered Office: 19 Westbury Gardens, Blackburn, BB1 1XF. Pinnacle Claims is a claims management company.
Pinnacle Claims uses the following terms throughout the policy “we”, “us”, & “our”. We are committed to protecting and respecting your privacy.
For the purposes of data protection legislation, we are the data controller, and we will process your personal data in accordance with the UK General Data Protection Regulations (and national laws which relate to the processing of personal data. As a controller of personal data, is registered with the Information Commissioner (ICO): ZB543639
| WHAT IS THE PURPOSE OF THIS PRIVACY NOTICE? |
This Privacy Policy sets out how ‘We’, uses and protects any information that the ‘You’, the user, provides to ‘Us’, throughout this website and our service.
Where we ask you to provide certain information by which ‘you’ can be identified (i.e. Personal Data) after providing this information, then this information shall only be used in accordance with this Privacy Policy.
This website has not been designed for use by children. We do not knowingly collect data relating to children.
| WHO IS THE DATA CONTROLLER? |
We are the (Data) Controller and are responsible for your personal information.
We are not required to appoint a Data Protection Officer (DPO). If you have any questions relating to this privacy notice, including any requests to exercise your legal rights please use the below contact information.
Our contact details:
Pinnacle Claims Limited T/a Pinnacle Claims
Postal Address: 19 Westbury Gardens, Blackburn, BB1 1XF
Telephone Number: 01254 781369/07739923265
Email: Kauthar.alli@icloud.com
HOW IS PERSONAL DATA COLLECTED BY US?
Personal Data or Personal Information can be defined as “Any information about an individual from which that person can be identified” This does not include data where the identity has been anonymised.
Under GDPR we will only collect information that is specified, explicit and legitimate for the purposes required. This means the data we collect must be adequate, relevant and limited to the requirements of the service.
We may collect, use, store and transfer different kinds of personal information about you. These are detailed as possible:
- Identity Data: First name, last name, marital status, date of birth.
- Contact Data: Current address, previous addresses and postcodes, email address and telephone number.
- Transaction Data: Information about your Road Traffic Accident, Accident at Work, or Employment Related Injuries
- Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating systems and platform and other technology on devices you use to access the website
- Profile Data: Includes, understanding the services you’ve engaged, your interests, preferences, feedback and analysing the data you have provided as part of the service to improve our services, customer relationships and experiences.
- Usage Data: Information about how you use our website.
PURPOSES AND LAWFUL BASIS FOR PROCESSING PERSONAL DATA
As the controller of customer and prospective customer personal data there are a variety of purposes for which us as the control processes personal data. The following details below sets this out:
| Purposes for processing personal data | Lawful basis |
| To identify whether potential claimant may have a claim | Legitimate Interest (necessary for us to provide the requested service to you
Explicit Consent (health data)
|
| To recommend to you an appropriate law firm for claims investigation and representation where it has been identified that you may have a potential claim for personal injury or medical negligence | Consent
Explicit Consent (health data) |
| To share any vulnerability information with third parties such law firms that these parties are aware of such and can support a vulnerable customer and have consideration for any specific needs or requirements to adapt their service delivery | Consent
Explicit Consent (health data) |
| Asking you to leave a review or take a customer satisfaction survey.
To publish feedback/testimonials provided by you regarding the satisfaction of our services |
Consent |
| To respond to any data subject access requests that we may receive from you | Legal Obligation |
| Monitoring and Oversight such as recording and monitoring telephone call and communication to ensure compliance with regulatory obligations and rules and to ensure firm processes for quality and training purposes. | Legal Obligation |
| To administer and protect our business and this website (including trouble shooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
Legal obligation |
| Notifying you about changes to our terms or privacy policy | Legal Obligation |
SPECIAL CATEGORIES OF PERSONAL DATA
If we identify that you are a vulnerable customer, we may collect data relating to your health to ensure we can tailor and adjust our service to your needs and circumstances. We will obtain your consent to obtain and store this data for the sole purpose of delivering our service.
We do not collect any other Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
If you do not provide Personal Data?
Where we need to collect personal data by law, or in order to establish if a claim exists, we may not be able to identify if you have a Personal Injury or Employment Related Injury and as such will not be able to continue with the service.
THIRD PARTIES
In order to provide you with the services you have requested, we will need to share personal data with third parties such as our panel solicitors who we may recommend to you. We currently have two law firms/solicitors on our panel they are: Baker & Coleman Solicitor Limited (SRA:619778) and HPA Solicitors Ltd (SRA:543164). Where you inform us of anything that will affect how our service delivery should be provided to you, we will ask you if we can make a note of this on our records and if we can share this information with any relevant third party.
We will retain your information as long as we require this to provide you with the services and for a period of 12 months afterwards.
DISCLOSURE OF YOUR PERSONAL DATA
We may have to share your personal data with the parties set out below for the purposes set out in the table above. Selected third parties will be subject to obligations to process your personal information in compliance with the same safeguards that we deploy.
We may need to disclose your information to any one of the following:
- Third parties such as our panel solicitors. We currently only recommend one of two law firms as detailed above. We do ask for explicit consent to share your details with any recommended law firm before we disclose any personal information to them.
- Third parties service providers, for example: Telecommunications, IT systems etc acting as processors based in the United Kingdom who we engage to deliver our services (e.g. host our dialler system, electronic storing of your personal data).
- HM Revenue & Customs, Regulators (Financial Conduct Authority, Office of Communication, Information Commissioner’s Office), and other authorities acting as processors based in the United Kingdom who require reporting of processing activities in certain circumstances.
- Accountants, Solicitors, Compliance Consultants and other like services acting as processors based in the United Kingdom who require the reporting of processing activities in certain legal and compliance circumstances.
- Third parties to whom the firm may choose to sell, transfer or merge parts of our business or assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change in these circumstances occurs, your personal data will be used in the same way as set out within this privacy policy.
Please note we will never knowingly allow third-party service providers to use your personal data for their own purposes and only permit them to process your data for specified purposes and in accordance with our strict instruction, of which is contractually in place.
INTERNATIONAL TRANSFERS
We do not transfer your personal data outside the European Economic Area (EEA).
DATA SECURITY
We are committed to ensuring your information is safe and secure. In order to prevent unauthorised access or disclosure, we have developed, implemented and maintained suitable physical, electronic and managerial procedures to safeguard and secure the information collected online. We wish for our customers to be completely confident in using our services, therefore we regularly review our processes and procedures to protect your personal information from unauthorised access, use, accidental loss, destruction or disclosure.
DATA RETENTION
How long will we hold your personal data?
We will only retain your personal data for as long as is necessary to fulfil our obligations under the provision of our service as well as any purposes necessary to satisfy any legal, accounting or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk, of harm of unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, including applicable legal requirements.
Details of retention periods for different aspects of your personal data are available upon request. By law we have to keep certain information about our customers and this data will be held solely and securely for those legal purposes.
In some circumstances you can ask us to delete your data under the ‘Right to Request Erasure’ However, an erasure request may be partially declined. In the event a complaint has been made, coupled with an erasure request, we will maintain records relating to the complaint, including basic information such as name, and telephone name. In the event that you do not wish to be contacted by us, we are required to maintain a log of this request, withholding applicable data to ensure we no longer contact you further.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
YOUR LEGAL RIGHTS
In accordance with GDPR, you, in your capacity as a consumer and as a citizen you are entitled to a range of specific rights as the Data Subject that you may exercise under particular conditions, with a few exceptions.
| Your Right to ACCESS
|
The right of access, commonly referred to as subject access, gives individuals the right to obtain a copy of their personal data as well as other supplementary information. It helps you to understand how and why we are using your data, and to check we are using it lawfully.
|
| Your right to RECTIFICATION
|
You have the right to have inaccurate personal data rectified. You may also be able to have incomplete personal data completed – although this will depend on the purposes for the processing. This may involve providing a supplementary statement to the incomplete data.
|
| Your right to ERASURE
|
Under certain circumstances you have the right to have personal data erased. Also known as ‘The right to be forgotten’. The right is not absolute.
|
| Your right to RESTRICT PROCESSING
|
Under certain circumstances you have the right to request the restriction or suppression of your personal data, and as like the right to erasure, it is not absolute. Restriction of processing means we are permitted to store your personal data, we are unable to use it.
|
| Your right to DATA PORTABILITY
|
You have the right to obtain and reuse your personal data for your own purposes across different services. This eases the copying or transferring of personal data easily from one IT environment to another, safely and securely, without affecting the usability of the data.
|
| Your right to OBJECT
|
Under certain circumstances you have the right to object to the processing of your personal data, however you do have the absolute right to object to direct marketing.
|
| Your right to be INFORMED
|
You have the right to be informed about the collection and use of your personal data. Your right to be informed forms part of this policy, and provides the purposes for processing your data, our retention periods and who it will be shared with.
|
DATA SUBJECT ACESS REQUESTS (DSAR)
You have the right to access to your personal information. Also known as a Data Subject Access Request (DSAR). This means you are entitled to obtain the following information about yourself:
- Confirmation that we are processing their personal data;
- A copy of their personal data; and
- Other supplementary information;
A third party may make a request on your behalf. We will require evidence from the third party as to evidence this entitlement. This may take the form of a written authority or be a more general power of attorney.
HOW DO WE PROVIDE YOU WITH THE DATA YOU HAVE REQUESTED?
If you make a request electronically (via electronic means), we will provide the information in a commonly used electronic format unless you have specified otherwise. Please note, we may extend the time to respond by a further two months if the request is complex or you have made multiple requests. As you have the right to be informed, we will always ensure you are notified within one month of receiving the request, accompanied by an explanation.
HOW LONG DO WE HAVE TO COMPLY WITH A REQUEST?
We must act on your subject access request without undue delay and at the latest within one month of receipt. This is calculated as beginning from the day following receipt of the request until the corresponding calendar data the following month. We may request your identity to satisfy the request, however this will be proportionate to the request itself and if we have doubts of the authenticity of identification
WILL IT COST YOU ANYTHING?
For the vast majority of requests, we cannot charge you a fee. Where the request is manifestly unfounded or excessive, we may charge a reasonable fee to cover the administrative costs of complying with the request. This also applies in the event that you request further additional copies of data following your initial request. This will again be charged as an administrative cost.
YOUR RIGHT TO COMPLAIN TO THE SUPERVISORY AUTHORITY (ICO)
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
CHANGES TO THIS PRIVACY POLICY
This Privacy Policy was last updated on 07 September 2023. Any changes to this Privacy Policy will be made here and updated accordingly.