Who we are
The Bodyshop Directory is part of a group of companies whose ultimate parent company is Slater and Gordon UK Holdings Limited (“Slater and Gordon”, “we”, “us”).
We take the privacy and confidentiality of our clients, potential clients, ex-clients and their affiliates very seriously and we are committed to protecting it.
How do we collect your information?
Most of the personal information we process is provided to us directly by you in relation to a legal claim or legal advice. We might collect this information from you in a number of ways, including via our website (e.g. our online enquiry form), over the telephone or via email. The personal information you supply to us may include: your name, address, contact details, date of birth, details of the circumstances of any claim or incident and any damage, injury or loss suffered by you, National Insurance number, employment and GP details.
We may also receive personal information indirectly, for example:
- by contacting third parties in connection with the services we provide to you, for example, medical or other experts;
- if a claimant or a third party refers to you in correspondence or documentation relating to a legal claim;
- from our suppliers, including introducers or referrers;
- from Credit Reference Agencies (please click here for more information in relation to Credit Reference Agencies);
- from public authorities, regulators or law enforcement bodies; or
- an employee of ours gives your contact details as an emergency contact or a referee.
Please note that if you are a third party and we are processing your information in connection with legal proceedings, and/or if legal professional privilege applies, then it is likely we are exempt from any requirement to inform you that we are processing your information.
We may use your personal information:
- to provide legal or other services;
- to perform credit reference or other regulatory checks;
- to engage the services of a third party (where instructed);
- for the purposes of operating our business (such as management information);
- to comply with legal and regulatory obligations;
- to contact you in relation to customer surveys or market research; or
- to send you legal updates, or information in relation to products and services that may be of interest to you from Slater and Gordon or other members of the Slater and Gordon group of companies.
You have a number of legal rights over the personal information held by us:
- The right to access your personal information;
- The right to correct or update any personal information;
- The right to object to further processing;
- The right to restrict the processing of your personal information;
- The right to ask us to delete your personal information (please note we will only be able to accommodate this request where it is no longer necessary for the purpose(s) for which it was provided or where we no longer have a lawful basis to process your personal information); and
- The right to receive the personal information we hold about you in a portable format, however this need only be provided in limited circumstances where the processing has been done by automated means.
You can contact us should you wish to have access to this information or to update or complete any of our records pertaining to your personal information. Requests can be made in writing to our Data Protection Officer:
90 High Holborn
Sharing your personal information
We may need to communicate your personal information to other individuals or organisations to facilitate our legal services. For example:
- medical experts for the purpose of obtaining medical reports or acting as expert witnesses;
- car rental companies for the purpose of obtaining a replacement car;
- insurance underwriters for the purpose of assessing and validating your claim or to enable them to provide cover under an insurance policy such as legal expenses insurers;
- insurance companies/brokers/third party introducers who referred your claim to us for the purpose of complying with our contractual obligations regarding details of the claim we process;
- credit hire companies you may have contracted;
- any employer who has paid sick pay which is to be recovered as part of your personal injury claim;
- any supplier by virtue of whom you have been introduced to us (such as a Union) for management information purposes; and/or
- other members of the Slater and Gordon Group for legal advice and/or specialist services necessary to facilitate our legal or other services.
We may also transfer your information to third parties providing us with support and administrative services in connection with the legitimate business purposes associated with the operating of a law firm.
If after providing us with your personal information it becomes apparent we are unable to offer our service to you, we may, with your consent, pass your details to another legal services provider who may be able to assist you.
For more information about this policy, or if you would like to make a complaint in relation to the way we process your personal information, please contact our DPO at DPO@slatergordon.co.uk.
We will endeavour to resolve any issues as soon as possible, however if we are unable to do so to your satisfaction, you can contact the Information Commissioner’s Office (ICO) (www.ico.org.uk, Tel:0303 123 1113).
Changes to this Privacy Notice
We may amend this policy at any time by either notifying you or posting a revised version on our website.
If we make a change to this policy, we will take your continued use of our services after that date as your acceptance of the change.
The lawful basis on which we rely when processing your data is Article 6(1)(f) of the General Data Protection Regulation (GDPR), which allows us to process personal data for the purposes of the legitimate interests pursued either by us or by a third party. From time to time, we might also rely on Article 6(1)(a) of the GDPR, which allows us to process your personal data if we have obtained your consent (for example, when we require your consent for the optional cookies we use). Where we process special categories of personal information, we rely on Article 9(f) of the GDPR if the processing is in connection with a legal claim. At times, we may also rely on alternative legal bases for processing special category personal information. For example, Article 9(b) if you are an employee.
We will retain your personal information in accordance with applicable law. This is usually in accordance with the statutory limitation period. If you contact us but don’t proceed with a claim, we may retain your personal information for a short period to ensure we can effectively track and monitor attempted fraud and to help us differentiate between service and new enquiry calls.
We may use the personal information you provide to carry out an automated decision making process as to the validity of your identity, as well as to carry out other checks as required by law and regulation (for example, a credit history check or the applicability of any sanctions). If a query arises in relation to any of these checks (i.e. if your identity cannot be validated or other checks raise issues that might prevent the continuance of our legal services to you), a human-led forensic analysis will be undertaken and any decision on our part not to act on your behalf will not be solely automated.
Transferring personal information overseas
Most of the personal information we hold on you will be used and stored in the UK. However, there may be instances where some or all of your personal information is transferred overseas as some or our operations and third party providers are located outside of the UK. Where this occurs, we have taken steps to ensure that data is transferred and held securely and in accordance with relevant data protection laws.
Please be assured that we will keep your personal information confidential and take appropriate measures to protect it against loss, theft or misuse and to safeguard your privacy.
Where you are provided with any confidential information (including a user ID or password), you must not disclose such information to any third party.