1. Who we are and what this policy covers
This Privacy Policy explains how we collect, use, store and share your personal data when you use claimitmyself.co.uk, create an account, purchase a plan, complete eligibility checks/questionnaires, generate claim packs, contact support, or otherwise use our services (together, the “Services”).
ClaimItMyself is a trading name of Ashley Dow Ltd (Company No. 08265188). We are the “controller” of your personal data for the purposes of UK data protection law (including the UK GDPR and the Data Protection Act 2018).
2. What we do (important context)
We provide self-help digital tools, templates and guidance to help you check potential eligibility and prepare claim packs so you can submit claims yourself. We do not submit claims on your behalf, act as your agent, or communicate with HMRC (or other bodies) on your behalf.
3. The personal data we collect
We collect different categories of personal data depending on how you use the Services. This may include:
- Identity and contact data: name, email address, phone number, postal address, login credentials.
- Eligibility and claim data: answers you provide in eligibility checks/questionnaires, claim history, and information required to prepare claim packs.
- Government and employment-related data (where relevant): National Insurance number, employer details, employment dates, address history.
- Family/household data (where relevant): spouse/partner information and children’s details (for example names and dates of birth where required for eligibility/claim checks).
- Account and usage data: logins, pages/features used, claim packs generated/unlocked, downloads/prints (where trackable), and support interactions.
- Technical data: IP address, device type, browser, operating system, timestamps, and diagnostic data.
- Payment data: we do not store full card details. Payments are processed by our payment providers (including Stripe, Worldpay and PayPal). We receive identifiers such as transaction IDs, subscription status, payment status, and billing history.
- Support communications: emails and WhatsApp messages you send to us and our responses.
- Guarantee/refund evidence (where applicable): documents/screenshots showing rejection decisions and related information needed to assess the 100% Money-Back Guarantee.
If you provide information about another person (for example your spouse/partner or children), you confirm you have the right to provide that information and to share it with us. You should only provide the minimum information necessary and ensure it is accurate.
4. Where we get your data from
We collect personal data from:
- You directly (when you complete forms, create an account, purchase a plan, contact support, or upload evidence).
- Your use of the website and Services (usage and technical data).
- Our service providers (for example, payment and subscription information from Stripe, Worldpay and PayPal).
5. How we use your data and our lawful bases
We use your data for the purposes below. UK GDPR requires a lawful basis for each purpose:
5.1 Provide the Services and perform our contract with you Contract
- Create and manage your account and deliver access to your plan.
- Run eligibility checks/questionnaires and generate claim packs based on your answers.
- Maintain your credit ledger/activity log (claim pack generation/unlock events).
- Provide customer support and service communications.
5.2 Manage payments, subscriptions and accounting Contract / Legal obligation
- Process payments and manage renewals/cancellations through Stripe, Worldpay and PayPal.
- Keep records required for accounting, tax and audit purposes.
5.3 Improve, secure and operate the Services Legitimate interests
- Monitor performance, troubleshoot issues and maintain service availability.
- Protect against fraud, misuse, abusive behaviour and security incidents.
- Maintain logs needed to resolve disputes, chargebacks and complaints.
Our legitimate interests include running a secure, reliable service, preventing fraud/abuse, and improving our platform. Where we rely on legitimate interests, we balance our interests against your rights.
5.4 Analytics and advertising measurement Consent
- We use Google Analytics to understand how visitors use our website and to improve our content and user experience.
- We use the Meta (Facebook) Pixel to measure advertising performance and to help show relevant ads.
Where required, we will ask for your consent before placing analytics/marketing cookies or similar technologies on your device. You can withdraw consent at any time (see section 8).
5.5 Marketing communications Consent / Legitimate interests
We may send service messages that are necessary for your account or the Services, such as purchase confirmations, login details, billing notices, important product or policy updates, support responses, and other operational messages. The lawful basis for these service messages is usually performance of a contract and, where appropriate, our legitimate interests in operating and securing the Services.
Where we send marketing or promotional communications by email, SMS, WhatsApp or similar electronic messaging channels (for example quiz-result follow-ups, abandoned-checkout reminders, offers, updates about new claim opportunities, upgrades or promotions), we will do so in accordance with applicable marketing laws. Where consent is required, our lawful basis is your consent. Where consent is not required and we are permitted to rely on another lawful basis, we may rely on our legitimate interests.
You can opt out of marketing communications at any time by using the unsubscribe link (where available), replying STOP to SMS where applicable, contacting us at info@claimitmyself.co.uk, or otherwise following the opt-out instructions provided in the message.
5.6 Guarantee and refunds Contract / Legitimate interests
- Assess and process refund requests and 100% Money-Back Guarantee claims, including verifying rejection evidence.
- Prevent fraudulent refund/guarantee claims and maintain records to resolve disputes.
6. Automated eligibility indicators (profiling)
We use your questionnaire answers to generate automated eligibility indicators (for example, “may qualify”, “may not qualify”, or “more information needed”). This is a rules-based assessment designed to help you prioritise claim types and does not guarantee outcomes.
These indicators are not intended to have legal or similarly significant effects on you. You remain responsible for deciding what to submit. You can update your answers at any time, and you can contact us if you believe an indicator is wrong.
7. Who we share your data with
We may share personal data with trusted service providers who help us deliver the Services, including:
- Stripe, Worldpay and PayPal (payments and subscription management).
- Namecheap and our UK hosting/database infrastructure providers (website and database hosting).
- Microsoft / Outlook / Microsoft 365 (email and internal communication).
- ClickSend (SMS delivery and messaging services).
- WhatsApp/Meta (support messaging, if you contact us via WhatsApp).
- Google Analytics (website analytics) and Meta Pixel (advertising measurement) via cookies/online identifiers (where consent is given).
8. Cookies, analytics and similar technologies
We use cookies and similar technologies to operate the website, remember preferences, and understand usage. Some cookies are essential for the site to work; others (such as analytics and advertising cookies) are optional.
Where required, we will show a cookie banner that allows you to accept or reject optional cookies. You can also control cookies through your browser settings.
9. International transfers
Some of our service providers (including Google and Meta/WhatsApp) may process data outside the UK. Where this occurs, we take steps to ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA), an adequacy decision, or other approved transfer mechanisms.
10. How long we keep your data (retention)
We keep personal data only for as long as necessary for the purposes set out in this policy, including providing the Services, handling support requests, maintaining security logs, and meeting legal, accounting and dispute-resolution requirements.
- Account and service data: kept while your account is active and for at least 2 years after closure or last activity, and longer if needed for disputes, fraud prevention or legal obligations.
- Transaction and billing records: typically kept for at least 6 years for accounting and tax purposes.
- Support communications: typically kept for at least 2 years and longer if needed to resolve a complaint, dispute or chargeback.
- Guarantee/refund evidence: typically kept for at least 30 months (aligned to the guarantee longstop) and longer if required for disputes or legal obligations.
11. Security
We use appropriate technical and organisational measures to protect your personal data, including access controls, secure hosting, encryption in transit where available, and limiting access to authorised personnel.
No system is completely secure. You should keep your password confidential and notify us immediately if you believe your account has been compromised.
12. Your rights
Under UK data protection law, you may have rights including:
- Access: request a copy of your personal data.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete your data (where applicable).
- Restriction: ask us to restrict processing in certain circumstances.
- Objection: object to processing based on legitimate interests (including direct marketing).
- Portability: request transfer of certain data to another provider.
- Withdraw consent: where we rely on consent (for example for optional cookies or certain marketing communications), you can withdraw it at any time.
To exercise your rights, contact us at info@claimitmyself.co.uk. We may need to verify your identity before responding.
If you wish to request deletion of your account, email info@claimitmyself.co.uk from the email address on your account. We may retain certain records where required for legal obligations, accounting, fraud prevention, or dispute handling.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ICO). We encourage you to contact us first so we can try to resolve your concern.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The version published on our website will apply from the date it is posted. If we make material changes, we will take reasonable steps to notify users (for example by email or in-account notice).