Privacy Policy

This Privacy Policy sets out how BlueLion Claims, collects, uses and protects your information when you use this website or our services, in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

BlueLion Claims is the controller and is responsible for your personal data. We are committed to ensuring that your privacy is protected. By using our website and/or our services, you may be providing us with some of your personal information and we want to make sure that we do not use your data in a way that you would not expect. BlueLion Claims assures you that your personal information will only be used in accordance with this Privacy Policy and in compliance with the latest privacy regulations.

BlueLion Claims may change this policy in future by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 15 December 2025.

Personal Information We Collect

Personal information is any information about an individual from which that person can be identified. It does not include data which has been anonymised.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Contact information: Name, current and previous addresses (including postal, email and IP addresses) and telephone numbers.

• Identity Data: Includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.

• Financial Data: Includes information on your financial circumstances, the lenders or financial institutions used by you, the financial products you have taken out and the details and status of those financial products.

• Usage Data Includes information about how you use our website, products and services. This may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is our analytics tracking system.

• Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.

• Special Category Data: We will only process special category data where you have provided this to us and given your explicit consent to store it or we have a legal/regulatory obligation to. This includes race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.

This list may not include all the information we require when providing our services. The information we ask you for will relate to your specific enquiry and will only consist of the information we need to carry out our service. If you contact us other than through our website, we will keep a record of that correspondence and a copy of call recordings.

Method Of Collection

• Direct interactions: By you filling in forms on our website or social media or by corresponding with us by post, phone, email or otherwise.

• Third parties or public sources: We may receive information about you from various reputable third-party lead providers, from our regulators, your lenders, DVLA or from publicly available data.

• Credit information firms: We may verify your identity through third party credit information firms which will carry out a soft credit search. We will always obtain your consent to do this, and it will not affect your credit score in any way.

• Updating you: We will always inform you of the source from which we have obtained your information, if requested by you.

The Basis On Which We Process Your Information

The legal grounds for processing your personal information depend upon the nature of our relationship with you and the context of processing, as follows:

• Processing is necessary for the performance of a contract with you, or to take steps prior to entering into a contract with you.

• Processing is necessary for the purposes of your legitimate interests or our legitimate interests, where your fundamental rights and interests do not override those interests. In order to determine this, we shall undertake a Legitimate Interests Assessment and balancing test.

• Processing is necessary for compliance with mandatory legal or regulatory obligations to which we are subject.

• Processing is undertaken after you have given us your express consent.

What We Use Your Personal Information For

We collect/store or use your information to:

Providing Your Personal Data To Others

We may disclose your data to one or more of our selected third-party service providers, upon your consent to do so, for the purpose of enabling them to contact you so that they can offer, market and provide relevant services to you. Each such third party will act as a data controller in relation to the data that we supply to it; and upon contacting you, each such third party will supply to you a copy of its own privacy policy, which will govern that third party's use of your personal data.

We may disclose your personal data to insurers, compliance consultants and/or professional advisers in so far as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

We may disclose personal data to our suppliers or subcontractors, such as external printers, IT service providers, credit information firms, admin companies, call centres, compliance consultants, legal advisers, professional experts and barristers.

We may disclose personal data to our partner credit information firms, Valid8 IP Ltd and Valifi Ltd, for the purposes of obtaining your credit file from one or more credit reference bureaus and you can view their respective privacy policies: Valid8 IP Ltd, Valifi Ltd

With your consent we will carry out a soft credit search through Valid8 IP Ltd and/or Valifi Ltd to identify and validate any potential claims you may have, and your information will be shared with the following credit reference bureaus:

• Equifax Ltd - https://www.equifax.co.uk

• Experial Ltd - https://www.experian.co.uk (Valid8 IP Ltd only)

• TransUnion Information Group Limited - https://www.transunion.co.uk

If you would like to understand how the credit reference bureaus use and share personal data (including the legitimate interests they pursue) please read the Credit Reference Agency Information Notice (CRAIN) here https://www.equifax.co.uk/privacyhub/crainhttps://www.experian.co.uk/legal/crain/https://www.transunion.co.uk/legal/privacy-centre/pc-credit-reference.

Any external processors, who process your data on our behalf, are subject to a data processing agreement to ensure the safety and protection of your data. None of our processors are allowed to use your data for any other purposes than instructed by us.

In addition to the specific disclosures of personal data set out in this section, we may disclose your personal data where such disclosure is necessary for compliance with a

legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

To assist us to provide our services to you we may use data processors that are outside of the European Economic Area (EEA). Robust and comprehensive due diligence is completed before we use any data processors outside the EEA. Where the country, territory, sector or international organisation that the transfer of personal data is being made has not got an EU Commission 'adequacy decision', the restricted transfer will only be made where there is an appropriate safeguard in place which will ensure that your rights and freedoms in respect of your personal data are protected. Please contact us if you need any further details about how we transfer personal data outside of the EEA and what safeguards are in place.

Marketing

You are provided with choices regarding marketing and we record your preferences in relation to this and how we communicate with you.

We may rely on consent when we use your personal information for direct marketing. This will be where you have specifically consented to us or a third party that you are happy to receive marketing contact from us.

We may also rely on legitimate interests for our direct marketing. Our legitimate interests are to inform individuals about products or services which may be of interest to them. Our legitimate interest may also be our commercial interests in operating our business, which includes acquiring new customers, providing additional services to existing or previous customers that are similar or aligned with previous products or services and expanding our operations.

You may also receive marketing communications from us if you have previously enquired about or purchased similar services from us and, in each case, you have not opted out of receiving that marketing. This is known as a 'soft opt-in'.

Such marketing communications may be in relation to claims management, legal services and financial services which could be undertaken by post, email, SMS or telephone.

To opt out of receiving future marketing under any lawful basis, or under soft opt in, in which we intend to rely on for direct marketing, please opt out using the contact details provided in this Privacy Policy.

If you require any further information about the lawful basis we have relied on to send direct marketing to you, please do not hesitate to contact us.

Cookies

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. As you interact with our website, we may collect Technical Data and Usage Data about your equipment, browsing actions and patterns. We collect this personal data by using Third-Party cookies, specifically Google Analytics. You can view Google's privacy policy here: www.google.com/policies/privacy.

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

You will be asked to provide your consent for us to use cookies upon your first visit to our website.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Also, to opt out of being tracked via Google Analytics, you can use Google's opt-out browser add-on: https://tools.google.com/dlpage/gaoptout

If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

How Long Do We Keep Your Personal Information

We retain your information for as long as is necessary for the purpose for which it was originally obtained. However, where we have provided a service, we will retain your information for 7 years from when the matter concluded.

We have some legal and regulatory obligations to hold certain pieces of information for specific timeframes.

We also need to keep some of your information for our accounting and reporting requirements.

Your contact details will be held for the purposes of direct marketing for 3 years; this is to enable us to let you know about new products or services that may be of interest to you as detailed above.

Your Rights

You have the following rights in accordance with the UK GDPR and the DPA:

• To know that your data is being processed

• To access your personal data free of charge

• To have your information corrected if inaccurate (Including ensuring any third party puts right any inaccuracy)

• To request that your data be erased

• To restrict processing

• To request transfer of your data

• To object to processing

• To maintain your rights relating to automated decision making and profiling

You may request that we to provide you with any personal information we hold about you. Where you send us a request to access your data, this will usually be free of change and sent to you within one month (unless your request is complex). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity before we are able to process your request.

We may withhold personal information that you request to the extent permitted by law.

You may instruct us at any time not to process your personal information for marketing purposes.

We may use automated decision making in our claims process and/or profiling in order to send you targeted marketing.

You have the right to access details of the information we used to create your profile and the right to object to profiling, including profiling for marketing purposes.

You have the right to request human intervention or challenge an automated decision.

We do not use automated decision making which would produce legal or significant effects on individuals.

If at any point you wish to raise a complaint regarding our data handling then you have the right to complain to the Information Commissioner's Office (ICO) which is the supervisory authority for data protection issues in the UK whose information is available at www.ico.org.uk. However, we would appreciate the opportunity to deal with any concerns directly with you in the first instance.

Security

BlueLion Claims recognises the personal nature of the information we collect, process and store. As we are committed to ensuring that your information is secure, we have put in place suitable physical, electronic and managerial procedures to prevent loss, unauthorised access, misuse or disclosure and to make sure that your information is safe and secure. If password access is required for certain parts of our website/application, you are responsible for keeping this password confidential.

Links To Other Websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which may be collected or you provide whilst visiting such sites as such sites are not governed by this Privacy Policy. You should exercise caution and look at the privacy statement applicable to the website in question.

General and Opt Out

You may not transfer any of your rights under this Privacy Policy to any other person. We may transfer our rights under this Privacy Policy where we reasonably consider your rights will not be affected.

If any court or competent authority finds that any provision of this Privacy Policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Policy will not be affected. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

If you have any queries relating to our Privacy Policy or the personal data we hold about you, wish to opt out of marketing or you wish to invoke any of your legal rights, you can contact us by:

Email: contactus@bluelionclaims.co.uk

Telephone: 020 8153 0033

Post: BlueLion Claims, The Centro Buildings, 20–23 Mandela Street, London NW1 0DU

BlueLion Claims is a trading name of BlueLion Law Limited; a private limited company registered in England & Wales (company no 12276560) with its registered office at The Centro Buildings, 20–23 Mandela Street, London NW1 0DU. Regulated by the Solicitors Regulation Authority under SRA number 815166.