“Winn Solicitors”, “Winn Legal”, “Winns”, “Dispute Resolution”, “Wills, Probate & Trusts”, “we”, “us” mean Winn Solicitors Limited.

An identifiable natural person is someone who can be identified, either directly or indirectly, by an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

As a Winn Solicitors client, to provide our services we need to use information about you, and some of that may be personal or private. For example, we may need to know your name and address, or details of how you would like to be contacted (e.g. your mobile phone number or email address).

As we do this, we would like you to take some time to read this privacy statement. It will explain what information we might collect about you, why we collect it, what we may use it for, and who we may give it to. We will also explain your rights towards your information and how we look after it while we have it.

The information we collect about you will vary based on what service we provide to you. Typically, we need details like:

• Contact information – including your name, address, telephone number, email address
• Regulatory information – including your date of birth, identity information
• Financial information – including bank account or other financial details (by way of Open Banking consent or credit reference agency checks)
• Technical data – including IP addresses, online identifiers, login data and other information automatically generated through your use of our website and digital platforms/media
• Images captured by our office CCTV cameras

We only collect information about you that we need to ensure you get the best service from us. We respect your privacy and we try to minimise what we do collect.

This category of personal information is more sensitive and relates to, for example, a persons physical or mental health, race or ethnic origin, political opinions, religious or philosophical beliefs, trade union memberships, their genetic or biometric data and sexual orientation.

We have in place additional measures to protect your sensitive personal information and its confidentiality. We will use your sensitive personal information in order to meet your requirements in relation to your case.

We will only disclose your sensitive personal information to the third parties as referred to in this Privacy Policy or where Winn Solicitors considers it is necessary, subject to us putting in place appropriate security or confidentiality obligations.

We collect your information where processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract with you to provide legal services.

We prefer to collect the information we need directly from you. That way, you know what we have, and we can be sure you have provided us with the most accurate and up-to-date information. We will usually do this:

• When you set up your case with us
• When you contact us for any reason
• Where necessary, we collect information about you from other ‘third parties’ such as:

We use your information in various ways, such as to:

• Meet the purposes that you provided your information for
• Provide you with the services you want
• Administer your case, including:
• Progressing your case, issuing legal proceedings where necessary
• Dealing with any problems, enquiries, or complaints you may have
• Keep our records accurate and up to date
• Comply with any legal and statutory obligations we may have
• Where we have a legitimate interest in doing so, such as the protection of our business interests or the prevention of fraud.

We only share your information where we are permitted or required to by law, or where you have given us your consent to do so. We may share your information with, for example:

• Any of your family, associates, or someone who represents you, where you have asked us to do so
• Our employees who provide you with our services
• Medical professionals, barristers, courts, insurers and the defendant’s solicitors
• Carefully selected contractors and specialists to help us provide you with our services
• Any person or organisation where we are required to because of a Court order, legal duty, or statutory obligation
• Appropriate Government Agencies
• Credit reference, and fraud prevention, agencies in order to help prevent and detect fraud, or as part of our debt collection process

Although we are a UK company, we may sometimes share your information with an organisation, such as a contractor working on our behalf, who is outside the UK. Such companies may also be outside of Europe. We may do this, but we will only do so where we are permitted to by law.

In all cases, the transfer will be on the basis of a European Commission adequacy decision or we will implement adequate safeguards to protect your personal information, such as the European Commission approved Standard Contractual Clauses.

Whenever we share your information we do everything we can to ensure it is protected from misuse or loss.

When we use information about you we take all reasonable efforts to do so fairly and lawfully.

We think it likely that our clients know we use information about them, and we provide notices of such wherever we can.

We never use information about you unless it is lawful for us to do so and we have a clearly defined need or purpose.

When we collect information about you we ensure that we minimise what we collect. We try to collect enough accurate and up to date information to ensure we provide you with the service you require and no more.

We make every effort to ensure your rights towards your information, which we detail below.

We take appropriate care to secure the information we hold about you. We have robust technical security such as passwords and information encryption. We also have policies and procedures to ensure your information is only available to our employees who need to see it to do their job, and we train those employees on data protection appropriately.

Also, we establish robust procedures and contracts to extend these protections to any other person or organisation we may need to give your information to.

In everything we do with your information we aim to be fair, lawful, and open, and we take seriously our obligations towards your privacy and the protection of information we may hold about you.

We do not keep your information for longer than we need it, ensuring that the records we have about you are managed properly and deleted promptly and securely when we no longer require them.

We will hold personal data to comply with legal and regulatory requirements in respect of retention of legal transaction files as follows:

We may keep your data for longer where this is necessary for statistical and historical research purposes. However, we will ensure all personally identifiable information is removed at the appropriate time.

When visiting our websites, you may also be providing us with certain information via our use of website ‘cookies’. You can find out more about this by reading our Cookie Policy here.

When you enter data onto secure areas of our websites, a Secure Socket Layer (SSL) is initiated. An SSL is a security device which ensures that any data which you enter is encrypted during transmission over the internet. Encryption means the data is encoded so that it is not legible until such time as we decode it.

No data transmission over the internet can ever be entirely secure. While we do our best to protect your personal information, we cannot guarantee its security and you must be aware of this when using our websites.

Our websites may contain links to other websites. If you follow a link to any of these websites, please note that these websites have their own Terms & Conditions and privacy policies and that we cannot accept responsibility for their content. This privacy statement applies only to our website.

Whilst we make every effort to ensure that our websites only include quality, safe and relevant external links, you are advised adopt a policy of caution before clicking any external web links mentioned throughout our websites.

We cannot guarantee or verify the contents of any externally linked website despite our best efforts. Users should therefore note that they click on external links at their own risk and our website and its owners cannot be held liable for any damages or implications caused by visiting any external links mentioned.

Communication, engagement and actions taken through external social media platforms that our website participates on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.

You are advised to use social media platforms wisely and communicate/engage upon them with due care and caution in regard to their own privacy and personal details. Our websites will never ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.

Our website may use social sharing buttons which help share web content directly from web pages to the

social media platform in question. You are advised before using such social sharing buttons that you do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.

Our website, through our social media platform accounts, may share web links to relevant web pages. By default, some social media platforms shorten lengthy web addresses (URLs), (for example: http://goo.gl/XC61E3).

You are advised to take caution and good judgement before clicking any shortened URLs published on social media platforms via our website. Despite the best efforts to ensure only genuine URLs are published, many social media platforms are prone to spam and hacking and therefore our website cannot be held liable for any damages or implications caused by visiting any shortened links.

If you have contacted us by email, or provided an email address, we may use that to contact you if we need to.

You should also be aware that information conveyed by email could be deliberately or accidentally intercepted or corrupted. Whilst we make every effort to ensure that emails we send to you are free from viruses this cannot be guaranteed. We recommend that you scan all emails for viruses with appropriate and frequently updated virus checking software.

If you have given us your phone number (landline or mobile), we may use it to contact you if we need to, including sending texts. If you contact us, or we contact you, we also record your phone call, for security, compliance and training and monitoring purposes.

Please let us know if your mobile phone number or email address changes so that we can keep this information up to date.

Under data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal information.
• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. If you think that what we have is not accurate or up to date, please tell us as soon as possible and we will ensure it is corrected without undue delay.
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances where we are relying on a legitimate interest or where we are processing your personal data for the purposes of direct marketing.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us using the details below if you wish to make a request.

We will handle routine enquiries as part of our usual customer service. If you want to see more of the information that we have about you, you can make a data subject access request.

You can write to us at:

To help you make your request, we have produced a form which you can find on our website here.

We may reply to you where we need further information to help respond effectively to your request.

To ensure that we only provide your information to you and not someone else, you will need to provide us with two current forms of identification.

We provide your information free of charge. In the case of subsequent or excessive requests from you to provide your information, we may charge a reasonable fee based on administration costs (as we are allowed to by law). We will inform you if this fee is applicable.

Once we receive your written request, any clarifications, identification, and in the case of subsequent or excessive requests your administration fee, we will respond as soon as we can within 1 month.

We’re keen to promote our services and may make you aware of products that help with this. Also, from time to time we may tell you about other services we think may interest you.

If you do not want to receive such correspondence at all, please let us know by calling 0800 988 6288, or in writing to:

Also, we will not send you these offers by phone if you have registered with the Telephone Preference Service or by mail if you have registered with the Mailing Preference Service.

We do not routinely use software to take automated decisions about you.

The Data Protection Act (2018) and General Data Protection Regulation ((EU) 2016/679) (GDPR) governs how we may use your personal information. We are registered under the Act and regulated by the Information Commissioner’s Office (ICO).

You can find our registration details here: Winn Solicitors Ltd, Registration Number: Z6337302

Our Data Protection Officer is Gemma Wilkinson.

From time to time, we may amend this privacy statement to reflect changes in the law, guidance from the ICO, our experience of handling your information, or for other legitimate reasons. We will do this by posting the amended privacy statement on this website. We therefore suggest you check this statement from time to time to ensure you are aware of the latest version.

This policy was last reviewed on 20/11/2023.

If you have any questions or ideas, please refer to the Data Protection Team at Winn Solicitors, who will be pleased to help you. You can contact the team:

• by calling 0800 988 6288
• by email to DPTeam@winnsolicitors.com
• or in writing to:

If you have any concerns about our use of your personal information, you can contact us on the details above and we will investigate the matter for you. You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO can be contacted at:

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

1. Data Protection Act 2018
2. UK General Data Protection Regulation
3. Privacy and Electronic Communications Regulations 2003
4. Privacy and Electronic Communications Regulations 2003 – The Guide
5. Stripe Privacy Policy
6. Google Privacy Policy
7. Twitter Privacy Policy
8. Meta Privacy Policy
9. LinkedIn Privacy Policy
10. Instagram Data Policy
11. MailChimp Privacy Policy
12. Campaign Monitor Privacy Policy
13. AdRoll Privacy Policy
14. Crazy Egg Privacy Policy
15. LiveChat Inc Privacy Policy
16. Mitel Privacy Policy
17. Puzzel Privacy Policy
18. Arken Privacy Policy
19. SmartSearch Privacy Policy
20. ClickGuard Privacy Policy
21. Experian Credit Reference Agency Information Notice (CRAIN)