top of page

Privacy Policy

CWS LIMITED – PRIVACY NOTICE

(UK GDPR & Data Protection Act 2018)

Effective date: 4th December 2024


1. Data Controller

 

CWS Limited
36A Walnut Road,

Torquay,

Devon

TQ2 6HS


Email:

support@cwslimited.com

admin@cwslimited.com


Telephone: 07591 175832

 

CWS Limited is the data controller for the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

 

 

2. Scope of This Notice

 

This Privacy Notice explains how CWS Limited collects, uses, stores, and protects personal data relating to:
 

  • Clients and prospective clients

  • Website users

  • Employees and contractors


It applies where we provide services relating to Personal Independence Payment (PIP) Advice & Guidance, Expert Witness Services and Employment Law DIY including other welfare-based benefit enquiries.

 

 

3. Personal Data We Collect

​

We may collect and process the following categories of personal data:
 

3.1 Personal Data

  • Name, address, date of birth

  • Contact details (email address, telephone number)

  • National Insurance number

  • Financial information

  • Correspondence with the Department for Work and Pensions (DWP)

  • Tribunal and court documentation
     

3.2 Special Category Personal Data

  • Medical records and reports

  • Information concerning physical or mental health

  • Disability-related information

  • Supporting evidence from healthcare professionals
     

3.3 Website and Technical Data

  • IP address

  • Browser type and version

  • Pages visited and interaction data

 

 

4. Purposes for Which We Use Personal Data

​

CWS Limited processes personal data for the following purposes:
 

  • To provide welfare benefits advice, representation, and support

  • To prepare and submit applications, disputes, appeals, and tribunal documentation

  • To communicate with the DWP, HM Courts & Tribunals Service, and other relevant bodies

  • To manage client relationships and contractual obligations

  • To process payments for services purchased via our website

 

 

5. Lawful Bases for Processing

 

5.1 Article 6 UK GDPR – Lawful Bases

We rely on the following lawful bases:

  • Article 6(1)(b) – Processing is necessary for the performance of a contract

  • Article 6(1)(f) – Processing is necessary for our legitimate interests in providing welfare benefits services


5.2 Article 9 UK GDPR – Special Category Data

Where we process special category data, we rely on:

  • Article 9(2)(a) – Explicit consent

  • Article 9(2)(f) – Processing necessary for the establishment, exercise, or defence of legal claims

  • Schedule 1, Part 2, Data Protection Act 2018 – Social security and legal rights
     

Explicit consent will be obtained separately and may be withdrawn at any time

 

 

6. Data Sharing

​

We may share personal data with:
 

  • The Department for Work and Pensions (DWP)

  • HM Courts & Tribunals Service

  • Medical professionals and assessors

  • Payment processors and IT service providers

  • Professional advisers where legally required
     

All third parties are required to maintain appropriate data protection and security measures.

 

 

7. International Transfers

 

CWS Limited does not transfer personal data outside the United Kingdom unless appropriate safeguards are in place in accordance with UK GDPR..

 

 

8. Data Retention

 

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal and regulatory requirements.
 

Typical retention periods include:
 

  • Active client files: duration of the service

  • ​Closed client files: up to 6 years

  • Financial records: 6 years

  • Website enquiry data: up to 12 months

 

 

9. Data Security

 

We implement appropriate technical and organisational measures to protect personal data, including:
 

  • Access controls and role-based permissions

  • Encryption of devices and storage systems

  • Secure storage of paper records

  • Staff training on data protection obligations

 

 

10. Your Rights

 

Under UK GDPR, individuals have the right to:
 

  • Access their personal data

  • Rectify inaccurate or incomplete data

  • Request erasure (subject to legal limitations)

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent at any time
     

Requests should be made in writing using the contact details above. We will respond within one month.

 

​

11. Complaints

 

If you have concerns about how we process your personal data, you may contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

 

 

12. Changes to This Privacy Notice

 

CWS Limited reserves the right to update this Privacy Notice at any time. Any changes will be published on our website.​​​​

​

​

​

​

​

​

bottom of page