Manchester AirportClaims Back to the claim form

DRAFT WORDING — to be reviewed by your DPO or Abbleys before publication

Privacy Policy

We are asking you to trust us with your data on the back of a breach of your data. This page says exactly what we do with it — in plain English.

Version [1.0] · Last updated [DATE] · ICO registration [ZA000000]

1. Who is responsible for your data

Until your claim is passed to Abbleys Solicitors, the data controller is [COMPANY NAME] LTD, trading as Manchester Airport Claims, of [REGISTERED ADDRESS], registered with the Information Commissioner’s Office under reference [ZA000000].

Our data protection contact is [NAME / ROLE], reachable at [privacy@manchesterairportclaims.co.uk]. Once your claim is passed on, Abbleys Solicitors become a controller in their own right for the claim, under their own privacy notice.

2. What we collect

Only what the form asks for, plus the technical record that proves you signed it:

  • your full name, telephone number and email address;
  • your answer to whether Manchester Airport Group emailed you about the breach;
  • your on-screen signature image, and the date and time you signed;
  • the IP address, browser and device you submitted from, kept as evidence of consent;
  • where you came to the site from, if you arrived through an advert or a link;
  • any correspondence you send us afterwards.

We do not collect bank or payment details. We will never ask you for them, and no one legitimately acting on this claim will either.

3. Why we use it, and our lawful basis

What we do with itLawful basis under UK GDPR
Check whether your circumstances fit the claim and contact you about itSteps taken at your request before entering a contract (Art. 6(1)(b))
Pass your claim and signature to Abbleys SolicitorsYour explicit consent, given by ticking the box at step two (Art. 6(1)(a))
Keep a record of the consent you gave and whenOur legal obligation as an FCA-regulated claims management firm (Art. 6(1)(c))
Handle complaints, prevent fraud, and keep the site secureOur legitimate interests in running a lawful, secure service (Art. 6(1)(f))

4. Who we share it with

Abbleys Solicitors — the whole point of the form, and only once you have ticked the consent box.

Our suppliers — the companies that host the site, store our records and send our emails, listed at [LINK TO SUB-PROCESSOR LIST]. They act on our written instructions and cannot use your data for their own purposes.

Regulators and authorities — the FCA, the ICO, the Financial Ombudsman Service or a court, where we are required to. We never sell your data, and we never share it with other claims firms or lead generators.

5. How long we keep it

We keep your claim record and consent evidence for [6] years from the date you signed, which is the period we need it for to answer regulatory and legal questions about the introduction. If you cancel or your claim is not taken on, we reduce what we hold to the minimum needed to show that the introduction happened and that you cancelled. After that it is securely deleted.

6. Where it is stored

Your claim record is stored in a managed Postgres database hosted in the United Kingdom (London region). Only our own systems, using a privileged server-side key, can read it — the website itself can write a claim but cannot read a single record back.

If any supplier processes your data outside the UK, we put an International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses in place first. Details are available on request.

7. How we keep it safe

The form is served over TLS, records are encrypted at rest, access is restricted to staff who need it and is logged, and we test our systems [FREQUENCY]. If we ever suffer a breach that is likely to put your rights at risk, we will tell the ICO within 72 hours and tell you without undue delay.

8. Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop using it, object to processing based on our legitimate interests, ask for it in a portable format, and withdraw your consent at any time.

Email [privacy@manchesterairportclaims.co.uk] and we will respond within one month. It is free, and we will not ask you why.

9. Cookies

This site sets no cookies at all. To carry your answers from step one to step two we use your browser’s session storage, which is cleared the moment you close the tab and is never sent to us. There is nothing here to consent to and no banner to dismiss. Our Cookie Policy explains this in full, and will be updated if that ever changes.

10. Marketing

We contact you about your claim because you asked us to. We will not add you to a marketing list, and we will not pass your details to anyone else for marketing. If we ever want to tell you about another service, we will ask you first, and every message will carry a one-click unsubscribe.

11. Complaining to the ICO

If you think we have mishandled your data, please tell us first at [privacy@manchesterairportclaims.co.uk]. You also have the right to complain directly to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — 0303 123 1113 — ico.org.uk.