Call the PPI Hotline now: 0800 177 7033 Current Wait Time: None
This policy explains the steps we take to ensure information about you is kept secure and confidential. Please read it carefully as by using our website and/or enquiry (contact us) facility (“Services”) you will be regarded as having read and accepted this Privacy & Security Policy. You must not use our website or our Services if you do not accept this Privacy & Security Policy.
GWlegal is the data controller in relation to the services and your personal data. Our registered address is GWlegal, 4th Floor, 20 Chapel Street, Liverpool, L3 9GW
You can contact us at the address above or:
• Call us: 0345 373 3737
• Email us: firstname.lastname@example.org
Information we collect about you
There are a variety of reasons that we would collect information about you which generally fall under the following:
• Provide a service for which we have been instructed
• Respond when you have contacted us through our website
• Further your case by sending updates (whether this be in writing, email, phone or SMS)
• Take/accept payment for the service we have provided
• Meet any legal requirements we have (including regulatory obligations)
• Review and respond to complaints about the service we have provided
• Review job applications to work at GWlegal
• Marketing our legal services to you
The data we collect is called personal data and includes the following:
• Email Address(es)
• Telephone Number(s) (including landlines, mobiles etc.)
• Financial Information
There is additional information which is classed as sensitive personal data such as physical/mental health that we may need to obtain such as GP records on a Personal Injury matter. We will ask your permission for this information before collecting it.
We collect personal data online, face to face, over the phone or in writing. In a lot of cases the information will be sent over to us from a third party (such as a broker or introducer of work). Once we have been instructed on a case we will send you a Terms of Business letter/email or CFA (Contingency Fee Agreement or Conditional Fee Agreement) which includes a copy of our Terms and Conditions (including a copy of this policy) – this is our contract with you. The Terms of Business letter/email or CFA which contains information on the agreement we have with the company who has introduced the work to us.
On the basis of this contract we will use your information to help speed up/further your case. This will include using your data with third parties when necessary to ensure the smooth running of your case. These are third parties we could share data with for the purpose of a contract:
• Medical Agencies;
• Barristers etc.
This list is not exhaustive but gives you an idea of the third parties we work with. The majority of this information is being shared with third parties as we have a contract with you. More details on the legal basis for using your data are contained in the table below.
Please note: You have rights as regards to how we use this data and if you want to allow it – these rights are outlined in this document, with ways to get in touch to discuss it with us in more detail.
Reasons to use your data & legal basis
Provide a service for which we have been instructed
Respond when you have contacted us through our website
Further your case by sending updates (whether this be in writing, email, phone or SMS)
Take/accept payment for the service we have provided
Meet any legal requirements we have (including regulatory obligations)
Review and respond to complaints about the service we have provided
Review job applications to work at GWlegal
Marketing our legal services to you
What do the legal reasons for using your data mean?
Contract – we need to process your personal data to fulfil our contractual obligations to you; or because you have asked us to do something before entering into a contract (e.g. provide a quote).
Consent – this means offering you real choice and control. This puts you in charge - we use consent for marketing to new clients. More can be read on this by reading our marketing policy here: https://gw.legal/legal/marketing-policy
Legal Obligation – this is used if we need to process your personal data to comply with a common law or statutory obligation.
Legitimate Interest – this is appropriate when we you use your data in ways you would reasonably expect and which have a minimal impact on privacy, or where there is a compelling justification for the use of your data. For more information on our assessment for legitimate interests please read our marketing policy by visiting: https://gw.legal/legal/marketing-policy
When you make an online enquiry we may use your personal information for the following purposes:
• To enable you to access and use our services; and/or
• To personalise aspects of our overall service to you; and/or
• To contact you in relation to your enquiry.
Whenever you make an enquiry about any of the services advertised on our website we may collect and store your personal information including name, email address and telephone number.
By submitting your details you are allowing GWlegal (and/or its suisions/brands) to provide you with information about the services you select.We will periodically review your personal information to ensure that we do not keep it any longer than necessary. We will only contact you in relation to the enquiry you made for a limited amount of time. We will not add you to our marketing database based on this enquiry alone - only if you instruct us as your solicitors will we ask for consent to market other legal services to you. For more information on marketing please read our marketing policy by visiting:https://gw.legal/legal/marketing-policy
Your Rights – Accessing your Information
Under the Data Protection Legislation, you can request a copy of the information GWlegal holds on you. This is known as a Subject Access Request and the information can usually be obtained at no cost to you. We will send you this information within 30 days of your request. There are some instances in which information you have requested cannot be sent based on legal reasons. We would discuss this with you in detail.
To request a copy, please write to Compliance Team, GWlegal, 4th Floor, 20 Chapel Street, Liverpool, L3 9GW. Alternatively you can call us on 0345 373 3737 or email us at email@example.com.
Your Rights – Updating your Information
If any of the information we hold on you is incorrect please write and let us know so we can rectify this. Contact us at Compliance Team, GWlegal, 4th Floor, 20 Chapel Street, Liverpool, L3 9GW. Alternatively you can call us on 0345 373 3737 or email us at firstname.lastname@example.org.
Your Rights – Right to be Forgotten
From the 25th May 2018 you can request for us to erase the information we hold on you. We have 30 days in which to do this from the date of your request. We will comply with this request unless we have a lawful reason to keep the information (there could be regulatory requirements for example). If we are unable to erase your information we will discuss this with you in detail and let you know the reason why.
To request your information to be erased, please write to Compliance Team, GWlegal, 4th Floor, 20 Chapel Street, Liverpool, L3 9GW. Alternatively you can call us on 0345 373 3737 or email us at email@example.com.
Your Rights – Right to Object
You have the right to object to us using your information – but this is dependent on the legal basis for which we are using your information.
As an example if we are using ‘consent’ as the legal basis in which we can process your personal information then you have the right to withdraw the consent given. Consent would usually be given to us to market further legal services to you, and we will also give you the option within our marketing material to change/withdraw your consent.
Alternatively if you object to us using your information and our legal basis is ‘contract’ then we would have to discuss this with you in detail first.
To talk about withdrawing consent, please write to Compliance Team, GWlegal, 4th Floor, 20 Chapel Street, Liverpool, L3 9GW. Alternatively you can call us on 0345 373 3737 or email us at firstname.lastname@example.org.
Your Rights – Right to Porting Data
If you would like to move, copy or transfer your data that we have on file to another company please write to Compliance Team, GWlegal, 4th Floor, 20 Chapel Street, Liverpool, L3 9GW. Alternatively you can call us on 0345 373 3737 or email us at email@example.com.
Your Rights – Right to Restrict Processing
If you would like to restrict the processing (using) of your data please write to Compliance Team, GWlegal, 4th Floor, 20 Chapel Street, Liverpool, L3 9GW. Alternatively you can call us on 0345 373 3737 or email us at firstname.lastname@example.org. This is not an absolute right and only applies in certain circumstances. If processing is restricted we are permitted to store your data but not use it.
Your Right - Automated Decision-Making
If you would like to object to the profiling of your data or automated decision making, please write to Compliance Team, GWlegal, 4th Floor, 20 Chapel Street, Liverpool, L3 9GW. Alternatively you can call us on 0345 373 3737 or email us at email@example.com.
How long do we keep your information for?
We keep our files for six years in electronic format and we will destroy them thereafter unless you ask us not to. Wills & Probate files are however kept in either electronic or paper format indefinitely. Files relating to minors are kept electronically and are kept until six years after they turn 18 years of age - we will destroy them thereafter unless you ask us not to. If you do not go ahead with your case, we may destroy your file at any time.
Whilst we will delete our files after 6 years we will keep a separate record of your information indefinitely for the following reasons:
• Conflict Checks – to make sure we can act for someone and it wouldn’t conflict with our obligations to you. This also helps with preventing fraud.
• Marketing – if you’re in our marketing database (our marketing policy can be viewed here) we will need to keep these details on file so we can contact you as agreed/requested.
You can ask for a copy of our policy on keeping your data and the reasons for this by writing to Compliance Team, GWlegal, 4th Floor, 20 Chapel Street, Liverpool, L3 9GW. Alternatively you can call us on 0345 373 3737 or email us at firstname.lastname@example.org.
Changes to our Policy
We may from time to time be required to update our Privacy and Security policy therefore it is advisable that you read through the policy each time you make an enquiry. The most up to date version of the policy will be available on this page. If you do not agree to any of the changes made, please refrain from using our website, submitting an enquiry or instructing us as your solicitor. If significant changes are made to our Privacy and Security Policy we will alert to these changes by a placing a prominent notification on the website.
Data Privacy and Security
At GWlegal, we maintain a key asset register, which includes relevant information of all existing IT systems that hold personal data. Where any concerns, risks or issues are identified, we conduct relevant impact assessments in order to determine any actions that are necessary to ensure the best possible privacy.
We also maintain an active information security work programme which seeks to protect the availability, confidentiality and integrity of all physical and information assets. Specifically, this helps us to:
• Protect against potential breaches of confidentiality;
• Ensure all IT facilities are protected against damage, loss or misuse;
• Increase awareness and understanding of the responsibility of our employees to protect the confidentiality and integrity of the information that they manage;
• Ensure the optimum security of our websites using secure SSL certificates to maintain an encrypted connection;
• Staying ahead of the vulnerability curve by only allowing currently secure encryption negotiation, ensuring clients aren’t subject to data leakage by credential theft;
• Prevent email fraud using the latest available protocols for email identity validation, protecting our clients from masquerading scammers;
• Ensuring our network perimeter is protected by industry best technologies, constant assessment of outside-in vulnerability to maintain integrity of our systems
Your Right to Complain
As part of our commitment to customer satisfaction, GWlegal has a rigorous complaints procedure that you can access at any time. Please let us know as soon as possible if you have any problems or you would like a copy of our Complaints Procedure.
If you have a complaint about the service you receive from us, at any time, you should raise this with the person responsible for your case. If they cannot resolve the matter then you should speak to the manager of the team.
If, after that, you are dissatisfied with how your complaint has been dealt with, you should contact our Customer Services Manager, Barbara Hillen on 0345 373 3737, by email email@example.com or by writing to us. Your complaint will then be dealt with in accordance with our complaints procedure, a copy of which is available on request. Please do not store up any complaints, please raise them straight away.
If you are still dissatisfied, you may take your complaint to the Legal Ombudsman. Normally, you will have to bring your complaint to the Legal Ombudsman within six months of receiving a final response from us about your complaint and six years from the date of the act or omission giving rise to the complaint or alternatively three years from the date you should reasonably have known there are grounds for complaint (if the act/omission took place before 6th October 2010 or was more than six years ago). Their information is available here: www.legalombudsman.org.uk
If the complaint is in relation to how we use, access and/or store your personal data and you are not happy with the outcome you can contact the ICO. Their information is available here: www.ico.org.uk
Links to third party websites
We can hold no responsibility for the content and/or processes of third party websites that you visit as a result of using the GWlegal website and any websites maintained or run by GWlegal including any brands, trading styles etc.
Using your data overseas
In the main we keep your data within the European Economic Area (EEA) but some information could be transferred out. When we do this we will put certain safeguards in place and vet the companies before using them. Usually this will be for our transactional emails that help further your case – we use a company called Mandrill who is not based in the EEA.
GWlegal is the trading name of Goldsmith Williams Solicitors who are registered in England at 4th Floor, 20 Chapel Street, Liverpool, L3 9GW and is authorised and regulated by the Solicitors Regulation Authority under number 48089.
Cookies on GWlegal sites
We will only read or write cookies for the preference level set, cookies set prior to you changing your settings will still be on your computer and you can remove them using your browser settings.
We use a cookie to remember your cookie preferences this has a couple of consequences
If you delete all your cookies you will have to update your preferences with us again.
If you use a different device, computer profile or browser you will have to tell us your preferences again.
The cookies used on our sites are based on the International Chamber of Commerce guide for cookie categories:
For more information about cookies see the further reading below.
Ruler Analytics is one of our third party partners & their cookies may be set when you visit our website. We use the information gathered to analyse and understand how people interact with our website. For opt-out information please contact firstname.lastname@example.org or visit https://www.ruleranalytics.com
'Strictly Necessary' cookies let you move around the website and use essential features like secure areas, shopping baskets and online billing. These cookies don't gather any information about you that could be used for marketing or remembering where you've been on the internet.
We use these strictly necessary cookies to...
Accepting these cookies is a condition of using the website, so if you prevent these cookies we can't guarantee your security or predict how our website will perform during your visit.
Here is a list of cookies we have defined as 'strictly necessary'
Allows us to identify the browsing session
Cookies provided by 3rd parties
'Performance' cookies collect information about how you use our website e.g. which pages you visit, and if you experience any errors. These cookies don't collect any information that could identify you – all the information collected is anonymous and is only used to help us improve how our website works, understand what interests our users and measure how effective our advertising is.
We use performance cookies to...
In some cases, some of these cookies are managed for us by third parties, but we don't allow the third party to use the cookies for any purpose other than those listed above.
Using our site indicates that you accept the use of 'Performance' cookies.
Accepting these cookies is a condition of using the website, so if you prevent them we cannot guarantee how our site will perform for you.
Here is a list of the cookies we have defined as 'Performance'.
Cookies provided by 3rd parties
Description - Google Analytics
Purpose - Allows us to track and monitor page views and site usage as well as environment information
Description - Mouseflow
Purpose - Allows us to track and monitor browsing sessions. Simulates screen recording
'Functionality' cookies are used to provide services or to remember settings to improve your visit.
We use 'Functionality' cookies to...
You can control whether or not these cookies are used, but preventing them may mean we can't offer you some services, and will reduce the support we can offer you. It's also possible that preventing these cookie stops us remembering that you didn't want a specific service.
Here is a list of cookies we have defined as 'Functionality'
Description - Cookie Notification
Purpose - Stores cookie to let us know user has acknowleged cookie notice displayed at top of website. This allows us to only show the notification once to each user.
Description - Web Chat
Purpose - Web chat functionality to allow our users to speak to one of our trained staff
Cookies provided by 3rd parties
'Targeting' cookies are linked to services provided by third parties, such as 'Like' buttons and 'Share' buttons. The third party provides these services in return for recognising that you have visited our website.
We use 'Targeting' cookies to...
You can control whether or not these cookies are used, but preventing them may stop us from offering you some services.All of these cookies are managed by third parties, and you may alternatively use the third parties' own tools to prevent these cookies.
Here is a list of the cookies we have defined as 'Targeting'
Cookies provided by 3rd parties
Description - Twitter
Purpose - Gets GW latest tweets from twitter
Description - Facebook
Purpose - Allows users to 'like' content on our website and share it with friends
Description - Add This
Purpose - Bookmarking and sharing service
Information about cookies
Useful information about cookies can be found at:
Internet Advertising Bureau
A guide to behavioural advertising and online privacy has been produced by the internet advertising industry which can be found at:
International Chamber of Commerce United Kingdom
Information on the ICC (UK) UK cookie guide can be found on the ICC website section: