1. Introduction
driftwood-adventure ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
2. Information We Collect
Personal Information
We collect information that you provide directly to us, including:
- Name and contact information (email address, postal address)
- Financial information relevant to benefit applications
- Health information necessary for assessing benefit eligibility
- Employment history and income details
- National Insurance number (when required for applications)
Automatically Collected Information
When you visit our website, we may automatically collect:
- IP address and browser type
- Pages visited and time spent on each page
- Referring website addresses
- Cookie data (see our Cookies Policy for details)
3. How We Use Your Information
We use the information we collect to:
- Provide and manage our benefit application support services
- Communicate with you about your case
- Prepare and submit benefit applications on your behalf
- Represent you in appeals and reassessments
- Improve our website and services
- Comply with legal obligations
4. Legal Basis for Processing (UK GDPR)
We process your personal data under the following legal bases:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary for a contract we have with you
- Legal obligation: Processing is necessary to comply with the law
- Legitimate interests: Processing is necessary for our legitimate interests or those of a third party
5. Sharing Your Information
We may share your information with:
- Government agencies: Department for Work and Pensions, HMRC, and other relevant authorities when submitting applications or appeals on your behalf
- Healthcare providers: To obtain medical evidence supporting your claim (with your explicit consent)
- Legal advisors: When professional consultation is necessary for your case
- Service providers: Third-party vendors who assist in operating our website and business, bound by confidentiality agreements
We do not sell or rent your personal information to third parties for marketing purposes.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of sensitive data in transit and at rest
- Secure file storage with access controls
- Regular security assessments and updates
- Staff training on data protection
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Typically:
- Active case files: Duration of service plus 6 years
- Financial records: 7 years from end of engagement
- Marketing communications: Until you unsubscribe or request deletion
8. Your Rights
Under UK data protection law, you have the following rights:
- Right of access: Request copies of your personal data
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your data in certain circumstances
- Right to restrict processing: Request limitation on how we use your data
- Right to data portability: Request transfer of your data to another organization
- Right to object: Object to processing based on legitimate interests
- Rights related to automated decision-making: We do not use automated decision-making or profiling
To exercise any of these rights, contact us at [email protected].
9. Children's Privacy
Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Email: [email protected]
Address: 47 Ridgeway Lane, Birmingham B15 3QR, United Kingdom
12. Supervisory Authority
You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately:
Website: driftwood-adventure.com
Helpline: 0303 123 1113