Privacy Policy

Last Updated: 25.08.26

About Us

Fairweather Claims is a trading style of Fairweather Group Ltd. Fairweather Group Ltd is a limited company registered in England and Wales with company number 12783771 and registered office at 2A Crown Business Park, Cowm Top Lane, Rochdale, Greater Manchester, OL11 2PU. Fairweather Group Ltd is a Claims Management Company authorised and regulated by the Financial Conduct Authority in respect of regulated claims management activities, Firm Reference Number 935899, and is registered with the Information Commissioner’s Office under registration number ZB048450.

Fairweather Group Ltd is the data controller in respect of the personal data described in this policy, meaning we determine the purposes and means of the processing of your personal data. In limited circumstances we may also act as a data processor on behalf of a partner organisation; where that is the case, that organisation’s own privacy notice will apply to the relevant processing.

Fairweather Group Ltd adheres to a unified Group Privacy Policy that governs our management of data across all websites and applications we operate, as well as our handling of phone calls, emails, text messages and other forms of digital communication. This policy details the measures Fairweather Group Ltd takes to uphold data protection standards in line with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

You are free to explore our sites without disclosing any personal data. However, if you decide to share personal details with us, they will be processed in accordance with this Privacy Policy.

How we use your personal information

When you interact with this website and submit personal information, Fairweather Group Ltd will collect and use your data for a number of purposes, always in compliance with UK data protection law. Below is a list of the ways we may use your personal information (including, but not limited to, data fields, documents and images):

• To contact you in response to your specific enquiry;
• To provide the products and services that you request from us;
• To send you transactional communications;
• To send you marketing/promotional communications for other relevant claims or services offered by Fairweather Group Ltd that you may be eligible for;
• To contact third parties on your behalf, where this is required to progress the service we are providing to you;
• To acquire further personal information from service providers (such as AML providers, ATE providers or credit reference agencies) in order to progress and provide the products and services that you request from us;
• To operate and manage your account and manage any application, agreement or correspondence you may have with us;
• To carry out, monitor and analyse our business;
• To identify, prevent, detect or tackle fraud, money laundering and other crime;
• To form a view of you as an individual and to identify, develop or improve products that may be of interest to you;
• For statistical analysis;
• To create new products and services;
• For educational and training purposes, including system development to improve customer experience;
• For audits, regulatory purposes, legal obligations and compliance with industry standards;
• To perform other administrative and operational purposes, including the testing of systems;
• To personalise the website for you.

Where we send you marketing by email or SMS, we do so either with your consent or, where permitted, in reliance on the “soft opt-in” under the Privacy and Electronic Communications Regulations 2003 (PECR) — that is, where you have enquired about or used our services, the marketing relates to our own similar services, and you were given a clear and simple opportunity to opt out both when we collected your details and in every message we have sent since. You can opt out at any time using the unsubscribe link in any email, by replying STOP to any SMS, or by contacting our Data Protection Officer.

We can assure you that your data will never be sold or disclosed to third-party marketing entities without your explicit permission. Where we refer your claim to a panel law firm, we may receive a fee for that introduction; this is explained in our Terms & Conditions.

Why do we collect and store personal data?

The collection of personal data is essential for us to deliver services, respond to enquiries about our offerings and keep our records up to date. We are dedicated to ensuring that the information we gather and use is suitable for these purposes and respects your privacy.

Personal data categories we collect

We may collect, use, store and transfer the following categories of personal data relating to you:

Identity Data — first name, middle name, maiden name, last name, marital status, title, date of birth and gender.

Contact Data — email address, postal address and telephone numbers.

Case Data — information relevant to your specific claim, such as the circumstances of an accident or incident, your employment status and any contractual employment cover such as sick pay.

Financial Data — bank account information and payment details.

Compliance Data — recorded calls used for quality checks and staff training. These recordings can also be used to help us combat fraud.

Technical Data — internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

Usage Data — information about how you use our website, products and services.

Marketing and Communications Data — your preferences in receiving marketing from us and your communication preferences.

Aggregated Data — statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law, as it does not directly or indirectly reveal your identity. If we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy.

Special Categories of Personal Data — this includes health-related data (for example, details of injuries or medical treatment relevant to a personal injury claim) and vulnerability-related data that you may share with us during the fulfilment of our services to you. We will always ask for your explicit consent to record and share Special Category Data, and where the processing is necessary in connection with establishing, exercising or defending legal claims we may also rely on the legal claims condition under Article 9(2)(f) UK GDPR and Schedule 1 of the Data Protection Act 2018.

How we collect personal data

When you voluntarily provide it to us. You may give us your Identity, Contact, Case and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you apply for our products or services, request marketing to be sent to you, or give us feedback.

Collected automatically. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites or applications employing our cookies. Please see our Cookie Policy for further details.

Provided by third parties or publicly available sources. Where personal data is not obtained directly from you, we may receive Identity and Contact Data (such as name, email address, postal address and telephone number) from third-party sources, including Technical Data from analytics providers such as Google (which may be based outside the UK), and Identity and Contact Data from publicly available sources such as Companies House and the Electoral Register (based inside the UK). Where we process personal data obtained from third-party sources, we will inform you of the source of your personal data in our first communication with you or as soon as reasonably practicable.

Processing purposes and our legal basis

We always ensure that processing personal data has a legal foundation, and we have thoroughly evaluated our processing objectives and the legal grounds for them.

We process your information on the basis of our contractual responsibilities to provide you with the services and products you have requested. As a regulated company, we must uphold high standards for our services and products, which means we may need to process personal data when undergoing regulatory audits or complying with legal obligations.

When providing our services, we may also pursue legitimate interests. We ensure these interests are carefully considered and balanced against your rights and freedoms, assessing any potential effects on you, and we only process your personal data for these interests where they do not disproportionately affect you, except where we have your consent or are legally bound or permitted to do so. You have the right to object to this type of processing at any time, particularly in relation to direct marketing. For enquiries about the legal grounds of our processing activities, please contact our Data Protection Officer.

Recipients of your personal data

In the process of delivering the services you have requested, your information may be disclosed to our processing affiliates, referred to as recipients and data processors. We conduct appropriate due diligence on these partners regarding their data security measures and data protection policies, and we establish firm written agreements that dictate their handling of your information.

In the event that we consider acquiring or merging with other businesses, any new owners would be permitted to use your personal data in accordance with the terms outlined in this Privacy Policy.

When we may have to disclose your personal data

We may be required to share your personal data with certain third parties as detailed below. These entities are bound by commitments to handle your personal information with the same level of security and confidentiality that we provide.

Legal Firms. We operate a panel of law firms across the different claim types that we generate. In order to service your claim and refer it to our legal partners to progress, we will share your personal data with these firms. In order to process your claim and identify the right solicitor to manage it, we may also share your data with the following processors and/or controllers: Copious Ltd, Bond Turner Limited, Bott & Co Solicitors, Charles Lyndon, Elmwood Law, Express Solicitors, Prowse Phillips, Satchell Moran Solicitors Limited, TLW Solicitors LLP, Reed & Co Solicitors, Smith Jones Solicitors and ID Tech Solutions Ltd.

For claims proceeding under Scots law, your personal data may be shared with law firms authorised and regulated by the Law Society of Scotland. The specific firm your claim is referred to will be confirmed to you at the point of referral. The law firm we use for Scottish Personal Injury, and therefore who we will share your data with, is Thompsons Solicitors Scotland.

Regulatory Authorities. As part of our FCA authorisation and our obligations to the organisations which govern us in different areas of our business (such as the ICO), we may need to share your details with these authorities.

Defendants and their representatives. In order to acquire the information we need to progress or refer your claim, we may need to request information about your claim from defendants or their insurers or representatives.

Compliance Consultants. This includes compliance consultants and similar services acting as processors within the United Kingdom, who may need to document processing activities due to specific legal and compliance requirements.

Service Providers. Service providers include businesses that provide us with additional information that could help your claim, such as AML providers and credit reference agencies, and businesses that host our systems. These data processors include Amazon Web Services, Copious Ltd, Valid8 Ltd.

Valid8 Ltd

In respect to car finance claims , we will disclose personal data to our partner Valid8 IP Ltd for the provision of credit report information which may include Equifax Ltd, Experian Ltd, TransUnion. If you’d like to understand how the credit reference agencies use and share personal data (including the legitimate interests they pursue) please read the Credit Reference Agency Information Notice (CRAIN) http://www.transunion.co.uk/crain; https://www.equifax.co.uk/crain/; https://www.experian.co.uk/legal/crain/

Your data will only ever be transferred to other processors and/or controllers in relation to progressing your claim or enquiry on your behalf.

International transfers

Some of our service providers (for example, Amazon Web Services, Inc. and Google) may process personal data outside the UK, including in the United States. Where personal data is transferred outside the UK, we ensure a similar degree of protection is afforded to it by using safeguards recognised under UK data protection law. These include transfers to countries covered by UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework (the “UK–US Data Bridge”), the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses. Further information about the safeguards used for a particular transfer is available from our Data Protection Officer.

Making sure your data is secure

We have implemented safeguards to protect your personal data against accidental loss and unauthorised access, use, alteration or disclosure. Access to your personal data is restricted to those staff members, agents, contractors and third parties who require it for business purposes. They are instructed to process your personal data solely in accordance with our directions and are bound by confidentiality obligations.

Procedures have been established to address any potential breach of personal data. Should such a breach occur, we will inform you and the relevant regulatory authorities where required by law.

How long do we keep your data?

Your personal data will be kept only as long as is necessary for the purposes for which it was collected, and to meet any legal, accounting or reporting obligations. When deciding how long to keep personal data, we weigh factors such as the volume, nature and sensitivity of the data, the risk of harm from unauthorised access or disclosure, the purposes of processing, whether those purposes can be met by other means, and legal requirements. Further information on how long we retain different types of personal data is available from our Data Protection Officer. Where we are legally required to maintain certain customer information, it will be held securely and used strictly for those legal purposes.

Your rights as a data subject

At any point while we hold or process your personal data, you are entitled to the following rights:

• Right of access — you have the right to request a copy of the information that we hold about you.
• Right of rectification — you have the right to correct data that we hold about you that is inaccurate or incomplete.
• Right to erasure — in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing — where certain conditions apply, you have the right to restrict our processing of your data.
• Right to data portability — you have the right to have the data we hold about you transferred to another organisation in a structured, commonly used, machine-readable format.
• Right to object — you have the right to object to certain types of processing, such as direct marketing.
• Rights relating to automated decision-making and profiling — you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
• Right to complain — if we refuse a request made under your rights, we will provide you with a reason why, and you have the right to complain as set out below.

All of the above requests will be forwarded on should there be a third party involved in the processing of your personal data.

Requesting access to your data

When requested, Fairweather Group Ltd is able to confirm what personal data we hold concerning you and the manner in which it is processed. If we hold your personal data, you have the right to request the following details:

• The identity and contact details of the organisation that has determined how and why your data is processed;
• The contact details of the Data Protection Officer;
• The purposes of the processing and the legal basis for it;
• Where processing is based on the legitimate interests of Fairweather Group Ltd or a third party, information about those interests;
• The categories of personal data collected, stored and processed;
• The recipients or categories of recipients to whom the data is or will be disclosed;
• Where we transfer personal data outside the UK, information about how we ensure this is done securely (the UK Government has approved transfers to some countries by way of adequacy regulations; in other cases we ensure specific safeguards are in place);
• How long the data will be stored;
• Details of your rights to correct, erase, restrict or object to processing;
• Information about your right to withdraw consent at any time;
• How to lodge a complaint with the supervisory authority;
• Whether the provision of personal data is a statutory or contractual requirement, whether you are obliged to provide it, and the possible consequences of not doing so;
• The source of the personal data, if it was not collected directly from you;
• Details of any automated decision-making, including profiling, along with meaningful information about the logic involved and the significance and expected consequences of such processing.

We accept copies of the following forms of ID when information on your personal data is requested: passport, driving licence or birth certificate.

Data Protection Officer

Data Protection Officer, Fairweather Group Ltd, 2A Crown Business Park, Cowm Top Lane, Rochdale, Greater Manchester, OL11 2PU. Email: info@fairweatherclaims.co.uk.

If things don’t go as planned

Should you have any grievances regarding the way Fairweather Group Ltd or its third-party affiliates process your personal data, or if you are dissatisfied with how your complaint has been addressed, you have the right to raise a complaint with our Data Protection Officer and with the supervisory authority.

Complaints Officer, Fairweather Group Ltd, 2A Crown Business Park, Cowm Top Lane, Rochdale, Greater Manchester, OL11 2PU. Email: info@fairweatherclaims.co.uk.

You can also make a complaint to the UK’s data protection supervisory authority, the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF — ico.org.uk/make-a-complaint. The ICO will expect you to have first raised your concerns with us before submitting a complaint. If you need support with your complaint, you can call the ICO helpline on 0303 123 1113 (local rate) or start a live chat on the ICO website.

Further information

If you have any queries about this policy, please contact us at info@fairweatherclaims.co.uk or write to us at Fairweather Group Ltd, 2A Crown Business Park, Cowm Top Lane, Rochdale, Greater Manchester, OL11 2PU, and we will do our best to answer your questions.