Privacy Policy
Enquiry attribution may include the original public landing page and the submission page, with query strings and fragments removed. If you allow full analytics, campaign labels and Google click identifiers (gclid, gbraid and wbraid) may also accompany the enquiry in our CRM. Claim-checker answers about care setting, approximate timing and harm are used to review the enquiry and are not sent to analytics. Completing the checker does not mean a claim is qualified or accepted.
Last updated: 7 October 2026
This notice explains how Rees Clayton Solicitors Ltd uses personal information collected through the Healthcare Standards Group website. It should be read together with any wider privacy information provided by the firm when a matter is opened or progressed.
Who is responsible for your information?
Rees Clayton Solicitors Ltd is responsible for the personal information collected through this website. You can contact us at The Ace Enterprise Centre, Cross Street, Nelson, Lancashire, BB9 7NN, by telephone on 020 3337 6322, or by email at contact@healthcarestandardsgroup.co.uk.
What information may we collect?
Depending on how you use the website, we may collect your name, contact details, preferred callback time, the type of medical negligence concern, healthcare provider, approximate treatment date, information you choose to provide about what happened, claim-checker answers, and limited marketing attribution information such as campaign parameters.
Information about treatment, diagnoses, injuries or health is special category personal data and is treated as sensitive information.
Why do we use this information?
We use enquiry information to respond to you, carry out an initial assessment, decide whether we may be able to assist, arrange contact, protect the website from misuse, keep appropriate records and, where a matter progresses, establish, exercise or defend legal rights.
Where processing is necessary to respond to a request you have made before entering into a contract, the relevant lawful basis may be Article 6(1)(b) UK GDPR. Where health or other special category information is necessary for the establishment, exercise or defence of legal claims, Article 9(2)(f) UK GDPR may apply. Other lawful bases may apply where required by law or by the circumstances of an individual matter.
Who may receive the information?
Access is limited to people and service providers who need it for the purposes described above. Depending on which services are enabled, this can include our website hosting provider, approved email delivery provider, CRM provider, professional advisers, experts and other organisations involved in assessing or progressing a legal matter. We do not sell enquiry information.
International transfers
Some technology providers may process information outside the UK. Where this happens, we require an appropriate legal mechanism or safeguard for the transfer where required by data protection law.
How long do we keep information?
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including assessing an enquiry, managing any resulting legal matter, meeting legal or regulatory obligations, handling complaints and establishing or defending legal claims. The exact period can differ depending on whether we are able to act and the circumstances of the matter.
Analytics and marketing attribution
Privacy-friendly basic measurement is used by default solely to produce aggregated website-improvement statistics. It does not use analytics cookies, create visitor profiles or try to identify visitors. It can count visits to approved public pages and a controlled list of conversion actions so we can understand aggregate journeys through the website. It does not receive form contents, names, telephone numbers, email addresses, medical narratives, selected medical claim types, query strings, fragments or advertising click identifiers. You can object at any time, free of charge, using the privacy and analytics choices in the footer.
Google Analytics is a separate, fuller level of measurement and loads only after you choose to allow full analytics. It uses restricted event details and approved public page paths, with advertising personalisation features disabled. With that permission, campaign parameters may also be held temporarily in session storage and submitted with an enquiry so we can understand how it reached the website. Without full analytics permission, attribution is limited to the original public landing page held in memory and the submission page.
Claim checker
The claim checker does not make an automated legal decision about whether you have a valid claim. If you choose to submit the checker, the answers are sent as part of an enquiry for human review.
Your rights
Depending on the circumstances and lawful basis, you may have rights to ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing, data portability or to object to certain processing. Some rights are subject to legal exceptions, including where information is needed for legal claims or regulatory obligations.
If you have concerns about how your information is used, please contact us first so we can consider them. You also have the right to raise a complaint with the Information Commissioner’s Office.
Security
We use technical and organisational measures intended to protect information submitted through the website, including encrypted transport, server-side validation, request-size controls, abuse protection, restricted logging and access controls within the services used to process enquiries.
Cookies and browser storage
For information about basic measurement, Google Analytics cookies and the browser storage used by this website, see our Cookie Policy.
Changes to this notice
We may update this notice when the website, our service providers or our processing activities change. The date above shows when this version was last updated.