Privacy Policy

This notice explains how Carrington Chase Law collects, uses and protects your personal information when we act for you or consider taking on your case. Please read it alongside our client care letter and terms of business.

1. Who we are

Carrington Chase Law is the controller of your personal information, which means we decide how it is used and are responsible for protecting it.

We act for people bringing clinical negligence claims and complaints about financial services. If we act for you through someone else, such as a litigation friend, deputy, attorney or family member, this notice applies to them too.

2. The information we collect

We collect only the information we need to advise you and run your case. Some of it is highly sensitive, especially information about your health, and we treat it with particular care.

2.1 What we collect.

• Identity and contact details: name, address, date of birth, phone number, email address, and copies of identity documents.
• Details of your case: your account of what happened, correspondence, witness statements and evidence.
• Health information (clinical negligence): your medical records from GPs, hospitals and other providers, X-rays and scans, expert reports, and information about your care needs, treatment and recovery.
• Financial information: bank details for paying you, funding and insurance details, and evidence of financial losses such as earnings, benefits and expenses. For financial services complaints, details of your accounts, loans, credit cards or other products and your dealings with the bank or lender.
• Information about other people: for example, family members who care for you, a person who has died whose care is the subject of the claim, and witnesses. Please tell them you have shared their details with us.

2.2 Where it comes from. Mostly from you. We also obtain information, with your authority, from healthcare providers, banks and lenders, employers, the Department for Work and Pensions, experts and other professionals. We may receive information from the other side in your case, from the court or the Financial Ombudsman Service, and from identity verification services.

3. How we use your information and why we are allowed to

We use your information to advise you, run your case and meet our legal and professional duties. The law requires us to have a lawful reason for each use.

We do not rely on your consent to use your health information for your claim. This is because you could not withdraw it without ending the claim. We do not make decisions about you by automated means, and we do not sell your information.

4. Who we share your information with

We share your information only where your case needs it or the law requires it, and only as much as is necessary.

• People working on your case: barristers, medical and other experts, medical reporting agencies, and costs specialists.
• The other side: the hospital, NHS body, GP, healthcare provider, bank or lender you are claiming against, and their lawyers or insurers, as part of the claim or complaint process.
• Courts, tribunals and ombudsmen: including the Financial Ombudsman Service.
• Insurers and funders: for example, an after-the-event insurer covering your legal costs.
• Our service providers: our case management system (Smokeball), IT support, secure storage and document providers. They act only on our instructions under contracts that protect your information.
• Regulators and authorities: CILEX Regulation, which may inspect client files to check we are meeting our standards; the Legal Ombudsman; and, where the law requires, the police, HM Revenue & Customs or the National Crime Agency.
• Our professional indemnity insurers and auditors.

Outside the UK. We aim to keep your information in the UK. If it needs to go abroad, for example to an overseas expert or a service provider, we transfer it only where the UK government has approved the destination or there are legal safeguards in place, such as the UK International Data Transfer Agreement.

5. Keeping your information safe, and for how long

Your file is held securely in our case management system, and we keep it only as long as we need to.

5.1 Security. We use encryption, multi-factor sign-in, access limited to the people working on your case, secure methods for sending medical records, and staff training. We will never ask you to send money or change payment details by email alone. If you receive an email that appears to come from us asking you to do this, call us on a number you already have before acting.

5.2 How long we keep it.

We keep files this long so that we can deal with any later questions or claims about our work and meet our regulatory duties. After that, we securely destroy them. We return original documents you gave us at the end of your case.

6. Your rights and how to complain

You have rights over your information, and you can complain to us about how we have handled it. We will acknowledge any data protection complaint within 30 days.

6.1 Your rights. You can ask us to:

• give you a copy of the information we hold about you
• correct information that is wrong or incomplete
• delete information, or restrict how we use it, in some circumstances
• stop using your information for a particular purpose, including marketing
• give you your information in a format you can pass to another organisation

Some rights are limited where we need the information for your case or to meet our legal duties, or where information is legally privileged or concerns other people. There is normally no charge, and we will reply within one month. We may need to check your identity first.

6.2 Complaining to us. If you are unhappy with how we have used your information, please contact our Data Protection Lead by email at rh@carringtonchaselaw.co.uk, by post at Bartle House, 9 Oxford Court, Manchester, M2 3WQ or by phone on 0161 531 7224. You can also tell us in person. We will:

1. acknowledge your complaint within 30 days
2. look into it without undue delay and keep you updated
3. tell you the outcome in writing, explaining what we found and what we have done

Complaints about our legal service follow our separate complaints procedure, set out in our client care letter and on our Complaints page.

6.3 Complaining to the ICO. If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. The ICO normally expects you to raise the complaint with us first.

6.4 Changes to this notice. We review this notice regularly. The latest version is always on our website at carringtonchaselaw.co.uk/privacy-policy, and we will tell you about any important changes while we are acting for you.

Last updated: 24 October 2026