IIntroduction
First Legal Solicitors Limited (‘we’, ‘our’ or ‘us’) is committed to protecting the privacy and security of your personal information. Whether you communicate with us online, over the phone, through our website, or social media platforms, we are dedicated to safeguarding your data.
This Privacy Notice explains:
- What personal data we collect
- How we use and secure your information
- The rights and choices you have under data protection legislation
This Notice should be read alongside our Cookie Policy, available on our website.
Data protection Legislation:
We adhere to all relevant data protection laws, including:
- Data Protection Act 2018
- UK General Data Protection Regulation (UK GDPR)
- The Data (Use and Access) Act
- The Privacy and Electronic Communications Regulations 2003 (PECR), and any amendments.
Data Controller
First Legal Solicitors Limited is the Data Controller of your personal information, unless
stated otherwise.
ICO Registration Number: ZA240665
Company Number 10381298
Registered Address: Fourth Floor, 8 Princes Parade Liverpool L3 1DL
Contact Us
- Phone: 0333 0537404
- Email: enquiries@firstlegalsolicitors.com
- Post: Compliance Department, First Legal Solicitors, Fourth Floor, 8 Princes Parade, Liverpool, L3 1DL
How we Collect your Personal Information
We collect personal data:
- Directly from you (e.g., via our website. Live chat or contact forms)
- Through approved lead generators and other third parties
- Via cookies and other tracking technologies on our website
Types of Personal Data we Collect
We only collect data that is necessary and lawful. This may include:
- Identity Data: Name, title, date of birth, gender, passport/ID, CCTV footage (if visiting our office)
- Contact Data: Address history, phone numbers, email addresses
- Employment Data: Industry or sector you work in.
- Credit Data: If necessary to pursue your case we will disclose personal data to our partner Checkboard for the provision of credit report information which may include Equifax , Experian , TransUnion. If you’d like to understand how the credit reference agencies use and share personal data (including the legitimate interests they pursue) please read the Credit Reference Agency Information Notice for each agency
(CRAIN); Equifax, Experian and TransUnion
I authorise First Legal Solicitorsto conduct soft credit searches on my behalf through its provider, Checkboard Ltd, with no impact on my credit score. I understand that in order to verify my eligibility First Legal Solicitors will conduct a soft credit check through our provider Checkboard Ltd who will receive an Electronic Credit Report from Equifax and CRAIN, pass on all information collected about me to First Legal Solicitors. I also agree to Checkboard’s privacy policy (https://checkboard.com/privacy-policy) and terms and conditions (https://checkboard.com/terms-and-conditions). A soft footprint will be retained on my credit file, which will not affect my credit score
- Financial Data: Card/payment information (in compliance with PCI DSS)
- Technical Data: IP address, browser info, operating system, location and website usage. Calls may be recorded for training and monitoring purposes
- Profile Data: Services used, preferences, feedback, survey responses
- Special Category Data: Health-related information (where relevant to a claim)
- Other Personal Data: Representatives acting on your behalf
- Aggregated Data: Anonymous usage data used for internal analysis
How we Use Your Information & Our Legal Basis
We will only use your personal data when the law allows. In most cases, the legal basis will be one of the following.
- Consent: you have consented for us to process your personal data
- Contract: the processing is necessary to enter into a contract you have with us.
- Legal obligation: the processing is necessary for us to comply with the law. For example, Money Laundering Regulation and associated laws.
- Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. For example, to understand how customers use our services so we can develop new services and improve the services we currently provide.
When we process your personal information for our legitimate interests, we make sure to consider and balance any potential impact on you and your rights under data protection laws.
Where we need to collect personal information by law, or under the terms of a contract we have with you, and you choose not to provide it, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may have to cancel a service you have with us, but we will notify you if this is the case at the time.
|
Purpose/Processing activity |
Lawful bases for processing |
|
To contact you following the submission of an enquiry regarding a mis-sold vehicle finance claim or any other potential financial services or product claim, or to respond to any questions you may have. |
Performance of a contract |
|
To identify whether a potential claimant may have a vehicle finance, financial services, or product claim. |
Legitimate interest (to assess claim eligibility) |
|
To undertake a soft credit check undertaken by Experian and Equifax. |
Consent |
|
To recommend an appropriate law firm for claims investigation and representation where a potential financial services or product claim has been identified. |
Performance of a contract |
|
To fulfil our contract to provide you with the agreed service. |
Performance of a contract |
|
To process payments from you or provide refunds. |
Performance of a contract |
|
To process medical information or history provided by you in relation to a claim. |
Consent |
|
To better understand you as a client and the services you use, so we can improve our service delivery. |
Legitimate interest |
|
To conduct marketing or analytics through our website using cookies. |
Consent (where required by law) Legitimate interest |
|
To conduct research and statistical analysis about our services. |
Legitimate interest |
Who we Share Your Information With
We may share your data with:
- Law enforcement or regulatory bodies, where required by law
- Legal experts (as part of your claim)
- Credit reference agencies (e.g., Equifax or Experian)
- Auditors and compliance consultants.
- Service providers helping us to deliver our services (under contract)
- In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
- If the company or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
How we Communicate with You
We may contact you about our services if:
- You have consented to marketing, or
- We have a legitimate interest in doing so (with your rights considered)
Marketing emails will always offer an opt-out option. To update preferences, follow the instructions or contact us.
Your Rights Under Data Protection Law
You have several rights over your personal information:
Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you, subject to certain exceptions.
Request rectification of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Request erasure of your personal data. You may ask us to delete information we hold about you in certain circumstances, this is often referred to as the ‘right to be forgotten’. This right is not absolute and only applies in certain circumstances. It may not always be possible for us to delete the information we hold about you, for example, if we have an ongoing relationship with you or we are required to retain information to comply with our legal obligations.
Object to processing of your personal data when it is based upon our legitimate interests or for the purpose of statistical analysis, profiling or direct marketing.
Request restriction of processing of your personal data. This is not an absolute right and only applies in certain circumstances. For example, where you contest the accuracy of your personal information, it may be restricted until the accuracy is verified, or where the processing is unlawful but you object to it being deleted and request that it is restricted instead.
Request data portability of your personal data to you or to a third party. You have the right to receive, move, copy or transfer your personal information to another controller.
We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.
For more information about your privacy rights
The Information Commissioner’s Office (ICO) regulates data protection and privacy matters in the UK. They make a lot of information accessible to consumers on their website, and they ensure that the registered details of all data controllers, such as us, are available publicly. You can access them here – Your data matters.
You can make a complaint to the ICO at any time about the way we use your information. However, we hope that you would consider raising any issue or complaint you have with us first. Your satisfaction is extremely important to us, and we will always do our very best to solve any problems you may have.
How long we keep your information for
We retain a record of your personal information to provide you with a high-quality and consistent service. We always handle your data in accordance with Data Protection Legislation and will never keep it for longer than necessary.
- If a contract is formed between you and us (e.g. a claim is progressed), we will retain your data for six years after the contract ends.
- If no contract is formed and no claim is made, we will retain your data for three years from the date of our last contact with you or any other identifiable activity.
After the relevant retention period ends, your data will be securely deleted, unless we are required by law to retain it for longer.
We may anonymise your data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
If your information is transferred to a third party their Data Retention Policy may differ to ours.
Automated Processing
We sometimes use trusted AI tools (such as ChatGPT, Canva, and Midjourney) to help create content for our website, marketing, and social media. These tools do not use your personal data to generate content, and we do not share any personal information with them.
If we ever use AI to create realistic images, videos, or voices (known as deepfakes), we will clearly label them as AI-generated to avoid confusion.
Data SecurityWho we Share Your Information With
We may share your data with:
- Law enforcement or regulatory bodies, where required by law
- Legal experts (as part of your claim)
- Credit reference agencies (e.g., Equifax or Experian)
- Auditors and compliance consultants.
- Service providers helping us to deliver our services (under contract)
- In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
- If the company or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
How we Communicate with You
We may contact you about our services if:
- You have consented to marketing, or
- We have a legitimate interest in doing so (with your rights considered)
Marketing emails will always offer an opt-out option. To update preferences, follow the instructions or contact us.
Your Rights Under Data Protection Law
You have several rights over your personal information:
Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you, subject to certain exceptions.
Request rectification of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Request erasure of your personal data. You may ask us to delete information we hold about you in certain circumstances, this is often referred to as the ‘right to be forgotten’. This right is not absolute and only applies in certain circumstances. It may not always be possible for us to delete the information we hold about you, for example, if we have an ongoing relationship with you or we are required to retain information to comply with our legal obligations.
Object to processing of your personal data when it is based upon our legitimate interests or for the purpose of statistical analysis, profiling or direct marketing.
Request restriction of processing of your personal data. This is not an absolute right and only applies in certain circumstances. For example, where you contest the accuracy of your personal information, it may be restricted until the accuracy is verified, or where the processing is unlawful but you object to it being deleted and request that it is restricted instead.
Request data portability of your personal data to you or to a third party. You have the right to receive, move, copy or transfer your personal information to another controller.
We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will advise you if this is the case at the time you withdraw your consent.
For more information about your privacy rights
The Information Commissioner’s Office (ICO) regulates data protection and privacy matters in the UK. They make a lot of information accessible to consumers on their website, and they ensure that the registered details of all data controllers, such as us, are available publicly. You can access them here – Your data matters.
You can make a complaint to the ICO at any time about the way we use your information. However, we hope that you would consider raising any issue or complaint you have with us first. Your satisfaction is extremely important to us, and we will always do our very best to solve any problems you may have.
How long we keep your information for
We retain a record of your personal information to provide you with a high-quality and consistent service. We always handle your data in accordance with Data Protection Legislation and will never keep it for longer than necessary.
- If a contract is formed between you and us (e.g. a claim is progressed), we will retain your data for six years after the contract ends.
- If no contract is formed and no claim is made, we will retain your data for three years from the date of our last contact with you or any other identifiable activity.
After the relevant retention period ends, your data will be securely deleted, unless we are required by law to retain it for longer.
We may anonymise your data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
If your information is transferred to a third party their Data Retention Policy may differ to ours.
Automated Processing
We sometimes use trusted AI tools (such as ChatGPT, Canva, and Midjourney) to help create content for our website, marketing, and social media. These tools do not use your personal data to generate content, and we do not share any personal information with them.
If we ever use AI to create realistic images, videos, or voices (known as deepfakes), we will clearly label them as AI-generated to avoid confusion.
Data Security
Data security is of great importance to First Legal Solicitors Limited and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure your collected data.
We take security measures to protect your information including:
- Limiting access to our buildings to those that we believe are entitled to be there by use of passes.
- Implementing access controls to our information technology; and
- We use appropriate procedures and technical security measures (including strict encryption, anonymisation and archiving techniques) to safeguard your information across all our computer systems, website and offices.
- Training our staff.
Transferring your data abroad
We do not transfer your personal data outside the European Economic Area (EEA), and should we require to do so, we will ensure we have standard contractual clauses in place.
Keeping your information accurate
It is important that the personal data we hold about you is accurate and current. Please keep us informed of any changes during your relationship with us. This should include any change of address, telephone numbers and health matters that may affect the management of your account.
Complaints
If you have any questions about how we treat your personal data and protect your privacy, please contact us at:
- Phone: 0300 124 8445
- Email: enquiries@firstlegalsolicitors.com
You also have the right to make a complaint to the Information Commissioner’s Office (ICO) here or call 0303 123 1113.
Updates to This Privacy Notice
This version was last updated on 10 December 2025 and historic versions can be obtained by contacting us at enquiries@firstlegalsolicitors.com. If changes to this privacy notice have a major effect on what we do with your personal data or on you personally, we will give you enough notice to allow you to exercise your rights