Privacy Policy

About us

“We,” “Us,” and “Our” refer to Evanshaw Ltd, located at Unit 105 Cheadle Royal Business Park, Highfield, Cheadle SK8 3GY.
Company Number: 14799332 | HMRC Agent Services Ref: FARN0054948 | PAYE Agent Ref: IA6537 | Self-Assessment Agent Ref: 3004NQ

For the purpose of the Data Protection Legislation and this notice, we are the ‘data controller’; we are responsible for deciding how we hold and use personal data about you. We are required under the Data Protection Legislation to notify you of the information contained in this privacy notice.

Our Data Protection Officer is our point of contact and will be responsible for enquiries in relation to this privacy notice or our treatment of your personal data. Should you require any information regarding how we collect and process your data or have any privacy related, you can do so using the contact details listed at section 17 – Contact us below.

THE PURPOSE AND SCOPE OF THIS NOTICE

This notice describes how we collect and use personal data about you, in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and any other national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK (‘Data Protection Legislation’).

This includes our services in relation to claims under the Home Responsibilities Protection (HRP) scheme.

This notice applies to the information that we obtain or when you otherwise interact with our services.

Please read the following carefully to understand our practices regarding your personal data and how we will treat it.

HOW WE GET THE PERSONAL INFORMATION AND WHY WE HAVE IT

We obtain personal data about you, for example, when:

1. you register a claim with us. This includes completing our Conditional Fee Agreement (CFA) and Letter of Authority (LOA) for HRP claims.
2. you engage us to provide our services and during the provision of those services
3. you contact us by email, telephone, post or social media (for example when you have a query about our services)
4. from third parties and/or publicly available resources (for example, from your employer or HMRC)

THE TYPE OF PERSONAL INFORMATION WE COLLECT AND PROCESS

The information we collect and process about you may include the following:

1. Your personal details (such as your name, address, contact details, national insurance number and employment-related information)
2. Details of contact we have had with you in relation to the provision, or the proposed provision, of our services
3. Details of any services you have received from us
4. Information about any complaints and enquiries you make to us
5. Information from research, surveys, and marketing activities
6. Information we receive from other sources, such as publicly available information, your employer, or HMRC
7. This may also include any documentation submitted in support of your HRP claim, such as CF411 forms, Form 64-8, NI statements or SARs
8. If your claim is successful, we may request your bank account details in order to transfer any refund owed to you
9. Before making any payment, we may request proof of ID and proof of address to comply with anti-money laundering (AML) regulations and prevent fraud

HOW WE USE THE PERSONAL DATA WE HOLD ABOUT YOU

We may process your personal data for purposes necessary for the performance of our contract with you (for example to process your tax refund claim or tax return) and to comply with our legal obligations.

This includes acting as your authorised agent with HMRC and/or DWP in relation to HRP claims and receiving any resulting refunds on your behalf.

We may contact you by phone, SMS, or email for purposes related to the administration and verification of your HRP claim.

We may process your personal data for the purposes of our own legitimate interests provided that those interests do not override any of your own interests, rights and freedoms which require the protection of personal data. This includes processing for business development, statistical and management purposes.

We may process your personal data for certain additional purposes with your consent. For example, we will only share your data with third-party companies for marketing purposes where we have obtained your consent to do so.

Please note that we may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data.

SITUATIONS IN WHICH WE WILL USE YOUR PERSONAL DATA

We may use your personal data in order to:

1. Carry out our obligations arising from any agreements entered into between you and us (which will most usually be for the provision of our services)
2. Provide you with information related to our services and our events and activities that you request from us
3. Provide you with marketing information which we feel may interest you or provide your contact details to other companies for tax planning and savings purposes
4. Seek your thoughts and opinions on the services we provide
5. Notify you about any changes to our services

This includes processing personal data related to the calculation of success fees, handling refunds received from HMRC or DWP, and making disbursements to your nominated bank account.

In some circumstances we may anonymise or pseudonymise the personal data so that it can no longer be associated with you, in which case we may use it without further notice to you.

If you refuse to provide us with certain information when requested, we may not be able to perform the contract we have entered into with you. Alternatively, we may be unable to comply with our legal or regulatory obligations.

We may also process your personal data without your knowledge or consent, in accordance with this notice, where we are legally required or permitted to do so.

Marketing Partner – Tyler Hampshire Ltd (Tyler Media)

We may share your data with Tyler Hampshire Ltd (Company No. 14739509), 24 Greek Street, Stockport, SK3 8AB.

Tyler Hampshire Ltd may contact you by email, SMS, or telephone about relevant tax or financial services under their trading name Tyler Media, authorised by Riteway Claims Ltd (FRN: 941650).

You can opt out at any time by contacting info@tylerhampshire.uk or using the unsubscribe options.

See their full privacy policy at: https://tylerhampshire.uk/privacy-policy

DATA RETENTION

We will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.

For HRP claims, this may be until the claim is fully resolved and any refund disbursed, or until your agreement with us is terminated.

When assessing what retention period is appropriate for your personal data, we take into consideration:

1. the requirements of our business and the services provided.
2. any statutory or legal obligations.
3. the purposes for which we originally collected the personal data.
4. the lawful grounds on which we based our processing.
5. the types of personal data we have collected.
6. the amount and categories of your personal data; and
7. whether the purpose of the processing could reasonably be fulfilled by other means.

CHANGE OF PURPOSE

Where we need to use your personal data for similar or new purposes such as providing you with financial money savings offers or tips from other companies, other than for the purpose for which we collected it, we will notify you and communicate the legal basis which allows us to do so before starting any new processing.

DATA SHARING

Why might you share my personal data with third parties? We will share your personal data with third parties where we are required by law, where it is necessary to administer the relationship between us or where we have another legitimate interest in doing so.

Which third-party service providers process my personal data? “Third parties” includes third-party service providers. The following activities are carried out by third-party service providers: IT and cloud services, professional advisory services, administration services, marketing services, postal services and banking services.

All of our third-party service providers are required to take commercially reasonable and appropriate security measures to protect your personal data.

We only permit our third-party service providers to process your personal data for specified purposes and in accordance with our instructions.

What about other third parties? We may share your personal data with other third parties, for example in the context of the possible sale or restructuring of the business. We may also need to share your personal data with a regulator or to otherwise comply with the law.

We will share your personal data with HMRC and/or the DWP for the purpose of submitting and managing your HRP claim, and to receive payments on your behalf under the terms of your Letter of Authority and Conditional Fee Agreement.

We may also share identity documents or AML verification data with HMRC or other relevant authorities where legally required to comply with fraud prevention or money laundering regulations.

MARKETING PURPOSES

In line with our terms and conditions, we will share your data with Tyler Hampshire Ltd to provide you with money saving tips, benefits and offers from third party companies, including but not limited to:

1. Service providers
2. Advertising agencies
3. Marketing partners

Tyler Hampshire Ltd acts as a joint data controller for marketing profiling purposes only. You can view their privacy policy at Privacy Policy - Marketing Partners

Tyler Hampshire Ltd may contact you by email, telephone, or SMS, where lawful to do so, to provide you with relevant offers or benefits based on your profile. You may opt out of such communications at any time.

This data sharing is conducted under either your consent or our legitimate interest in offering relevant financial services, in accordance with GDPR Article 6(1)(a) or (f).

The types of personal data that may be shared with Tyler Hampshire Ltd for joint marketing and profiling purposes may include demographic information, tax profile, preferences, and other relevant details. Tyler Hampshire Ltd will not share your details with these third-party companies.

The third-party companies will only have your personal data only when you signed up or register for their products.

TRANSFERRING PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)

We may transfer and store the personal data we collect about you to countries outside of the EEA in order to perform our contract with you.

There is an adequacy decision by the European Commission in relation to these countries therefore it will be deemed to provide an adequate level of protection for your personal information for the purpose of the Data Protection Legislation.

DATA SECURITY

We have put in place commercially reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

LEGAL REQUIREMENTS

We may be required to use your data due to a legal requirement which is placed upon us; this includes our regulatory requirements such as financial record keeping, staff training and monitoring, in addition to complaint handling. We will always inform you if this is the case.

WHAT IS OUR LEGAL BASIS FOR PROCESSING?

RIGHTS OF ACCESS, CORRECTION, ERASURE, AND RESTRICTION

Your duty to inform us of changes It is important that the personal data we hold about you is accurate and current. Should your personal information change, please notify us of any changes of which we need to be made aware by contacting us, using the contact details below.

Your rights in connection with personal data Under certain circumstances, by law you have the right to:

1. Request access to your personal data.
2. Request correction or erasure of the personal data we hold about you.
3. Object to processing or request restriction of your personal data.
4. Request the transfer of your personal data to you or another data controller.

To exercise these rights, contact dpo@evanshaw.co.uk

RIGHT TO WITHDRAW CONSENT

Where we rely on your consent to process your data (e.g., for direct marketing), you may withdraw that consent at any time by emailing dpo@evanshaw.co.uk

Once we receive your withdrawal, we will stop processing your data for that purpose, unless we have another lawful basis to do so.

COOKIES

Evanshaw uses cookies to improve your online experience. These may include:

1. Functionality cookies
2. Analytics cookies
3. Third-party marketing cookies

You can manage cookie preferences in your browser. See All About Cookies or our Cookie Policy for more info.

Please note that we do not control tracking technologies used by third parties such as Facebook, Google, or Microsoft. These third parties may collect and process personal data according to their own privacy policies. We recommend reviewing their respective privacy notices for more information.

COMPLAINTS

To make a complaint, contact:

Data Protection Officer
Evanshaw Ltd
Suite 105, Cheadle Royal Business Park
Highfield, Cheadle, SK8 3GY
Email: dpo@evanshaw.co.uk

If you remain dissatisfied, you may contact the Information Commissioner’s Office (ICO) at ico.org.uk or call 0303 123 1113.

CHANGES TO THIS NOTICE

Any changes we may make to our privacy notice in the future will be located at: https://evanshaw.co.uk/privacy-policy/

CONTACT US

If you have any questions regarding this notice or how we handle your data, please contact us at: dpo@evanshaw.co.uk