Privacy Policy

1. Introduction

GetMyCashBack Ltd ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

2.1 Personal Information You Provide

• Contact Information: Name, email address, phone number, postal address
• Case Information: Details about your claim, including documentation, invoices, receipts, correspondence
• Financial Information: Bank account details for payment processing (when applicable)
• Communication Records: Records of calls, emails, and other communications with our team
• Identity Verification: Documents required to verify your identity and validate claims

2.2 Information Automatically Collected

• Website Usage Data: IP address, browser type, device information, pages visited, time spent on site
• Cookies and Tracking: Information collected through cookies and similar technologies
• Analytics Data: Website performance and user interaction data

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Claims Management

• Processing and managing your claim
• Communicating with third parties on your behalf
• Providing legal and recovery services
• Maintaining case records and documentation

3.2 Service Delivery

• Responding to your inquiries and providing customer support
• Scheduling appointments and consultations
• Processing payments and managing accounts
• Improving our services and website functionality

3.3 Legal and Compliance

• Complying with legal obligations and regulatory requirements
• Preventing fraud and ensuring service security
• Maintaining records as required by law

4. Legal Bases for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary for performing our claims management services
• Legitimate Interest: Processing for our legitimate business interests, including service improvement and fraud prevention
• Legal Obligation: Processing required to comply with legal and regulatory requirements
• Consent: Where you have given explicit consent for specific processing activities

5. Data Sharing & Third Parties

We may share your information with:

5.1 Service Providers

• IT service providers and cloud hosting services
• Payment processors and financial institutions
• Legal service providers and barristers
• Document management and secure storage providers

5.2 Legal and Regulatory Bodies

• Courts and tribunals when required for legal proceedings
• Regulatory authorities as required by law
• Law enforcement agencies when legally obligated

5.3 Other Parties

• The party against whom your claim is made
• Insurance companies and legal representatives
• Professional advisors (accountants, lawyers, auditors)

6. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your website experience:

6.1 Types of Cookies

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand website usage and performance
• Marketing Cookies: Used for targeted advertising and marketing campaigns
• Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings or our cookie consent tool.

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for specific processing activities

To exercise these rights, contact us at privacy@getmycashback.co.uk. We will respond within one month of receiving your request.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• Encryption of data in transit and at rest
• Secure cloud hosting with reputable providers
• Regular security assessments and penetration testing
• Staff training on data protection and security
• Access controls and authentication measures
• Regular backups and disaster recovery procedures

9. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:

• Active Claims: For the duration of the claim plus 6 years as required by law
• Financial Records: 7 years from the end of the financial year
• Marketing Data: Until you withdraw consent or 3 years of inactivity
• Website Analytics: 26 months maximum

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via email if you have an active case with us
• Post a notice on our website homepage for 30 days

We encourage you to review this policy periodically to stay informed about how we protect your information.

11. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately: