crisp-spire

This Privacy Policy explains how crisp-spire collects, uses, stores, and protects your personal data when you use our website or engage our services. We are committed to safeguarding your privacy and ensuring that your personal information is handled responsibly and in accordance with applicable data protection legislation.

Data Controller

crisp-spire operates as the data controller for personal information collected through this website and in the course of providing our consultancy services. Our registered office is located at 45 Temple Row West, Birmingham B2 5LS, United Kingdom. For any data protection enquiries, please contact us at [email protected].

Information We Collect

We may collect the following categories of personal information:

Identity information such as your name and title
Contact details including email address and postal address
Financial information relevant to benefit claims, such as income details
Health information where relevant to disability benefit applications
National Insurance number and other government identifiers
Technical data including IP address and browser type when you visit our website
Communication records from correspondence with our team

How We Collect Information

We collect personal data through several channels:

Directly from you when you complete our consultation request form
During face-to-face, telephone, or video consultations
Through correspondence via email or post
Automatically when you browse our website via cookies and similar technologies
From third parties such as government agencies when you authorise us to act on your behalf

Legal Basis for Processing

We process your personal data on the following legal grounds:

Contractual necessity: to provide the consultancy services you have requested
Legitimate interests: to improve our services, respond to enquiries, and maintain business records
Legal obligation: to comply with regulatory requirements and legal processes
Consent: where you have given explicit permission, such as for marketing communications

For special category data such as health information, we rely on your explicit consent and the processing being necessary for the provision of health-related services.

How We Use Your Information

Your personal data is used for the following purposes:

To provide benefits and pension consultancy services
To communicate with you about your case and appointments
To prepare and submit benefit applications on your behalf
To represent you in appeals and tribunal proceedings
To maintain accurate records of our professional relationship
To improve our website and service delivery
To comply with legal and regulatory obligations

Data Sharing

We may share your personal information with:

Government departments and agencies such as the DWP when acting on your behalf
HM Courts and Tribunals Service for appeals proceedings
Professional advisors including solicitors and barristers where required
IT service providers who assist with our systems and data storage
Regulatory bodies where legally required

We do not sell your personal information to third parties. Any sharing of data is done in accordance with this policy and applicable law.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Typically, client records are retained for seven years after the conclusion of our services, in line with professional and regulatory requirements. After this period, data is securely deleted or anonymised.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include secure data storage, encrypted communications, access controls, and regular security assessments.

Your Rights

Under data protection law, you have the following rights:

Right of access: to request a copy of the personal data we hold about you
Right to rectification: to request correction of inaccurate or incomplete data
Right to erasure: to request deletion of your data in certain circumstances
Right to restrict processing: to limit how we use your data
Right to data portability: to receive your data in a structured, machine-readable format
Right to object: to object to processing based on legitimate interests
Right to withdraw consent: where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

International Transfers

Your personal data is primarily stored and processed within the United Kingdom. If any data is transferred outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR requirements.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The most current version will always be available on this page. We encourage you to review this policy regularly.

Complaints

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can contact the ICO through their website at ico.org.uk or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Last updated: August 2024