top of page
SurePath-logo

Privacy Policy

Last Updated: 1 January 2026

At SurePath Advice (“we,” “us,” or “our”), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our services, or interact with us regarding financial claims assessments.

This policy is prepared in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 under the laws of England and Wales.

1. Important Information and Who We Are

SurePath Advice is the data controller responsible for your personal data.

If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact us using the details below:

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). However, we would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.

2. The Data We Collect About You

Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

  • Identity Data: First name, last name, title, and business name (where applicable).

  • Contact Data: Email address, telephone number, and postal address.

  • Financial & Contractual Data: Copies of finance agreements, lease contracts, loan documents, energy contracts, bank statements, and correspondence with lenders relevant to assessing your mis-selling claim.

  • Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and platform used to access our website.

  • Consultation Data: Notes and details recorded during your free Zoom video consultations.

  • Marketing & Communications Data: Your preferences in receiving updates or marketing communications from us.

3. How We Collect Your Personal Data

We use different methods to collect data from and about you, including:

  • Direct Interactions: You provide your Identity, Contact, and Financial Data by filling out web forms, booking a free Zoom consultation, uploading claim paperwork, or contacting us via email at contact@surepathadvice.co.uk.

  • Video Consultations: Information you share verbally or visually during your remote Zoom assessment sessions.

  • Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment and browsing patterns via standard cookies and log files.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

  1. Performance of a Contract: Where we need to assess, prepare, or process your financial claim.

  2. Legitimate Interests: Where it is necessary for our legitimate business interests (e.g., managing client records, maintaining IT security, and improving our services) and your interests do not override those.

  3. Legal Obligation: Where we need to comply with a legal or regulatory requirement under English law.

Summary of Purposes for Data Processing:

Purpose / ActivityType of DataLawful Basis for Processing

Registering you as a new clientIdentity, ContactPerformance of a contract

Conducting your free Zoom assessmentIdentity, Contact, FinancialPerformance of a contract

Managing & submitting your claimIdentity, Contact, FinancialPerformance of a contract

Managing fees and processing refundsIdentity, Contact, FinancialPerformance of a contract

Managing our relationship with youIdentity, Contact, MarketingNecessary for legitimate interests

Administering & protecting our websiteTechnical, ContactNecessary for legitimate interests

5. Disclosures of Your Personal Data

We may share your personal data with trusted third parties for the purposes set out above:

  • Financial Institutions & Opposing Parties: Lenders, brokers, banks, and legal representatives against whom your claim is being evaluated or made.

  • Third-Party Service Providers: Secure cloud storage providers, video conferencing platforms (e.g., Zoom Video Communications, Inc.), IT support, and practice management tools.

  • Professional Advisers: Lawyers, solicitors, auditors, or regulatory authorities where required by law.

All third parties are required to respect the security of your personal data and treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

6. International Data Transfers

Where we use service providers located outside the UK (such as cloud platform servers or video conferencing software located in the US or EU), we ensure a similar degree of protection is afforded to your data by ensuring appropriate safeguards—such as UK GDPR-approved Standard Contractual Clauses (SCCs) or International Data Transfer Agreements (IDTAs)—are implemented.

7. Data Security

We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed. Access to your personal data is restricted to authorized employees, case managers, and service providers who have a strict business need-to-know basis.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or regulatory reporting requirements.

For claims files and contract documents, we typically retain client records for six (6) years following the closure or resolution of your case to comply with statutory limitation periods under English law.

9. Your Legal Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

  • Request Access: Receive a copy of the personal data we hold about you (a "Data Subject Access Request").

  • Request Correction: Have incomplete or inaccurate data corrected.

  • Request Erasure: Ask us to delete your personal data where there is no good reason for us to continue processing it.

  • Object to Processing: Object to processing based on legitimate interests or direct marketing.

  • Request Restriction: Ask us to suspend the processing of your personal data in certain scenarios.

  • Request Transfer: Receive your personal data in a structured, commonly used format.

  • Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your data.

To exercise any of these rights, please contact us at contact@surepathadvice.co.uk.

10. Third-Party Links & Cookies

Our website may include links to third-party websites or plugins. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

11. Changes to This Privacy Policy

We review and update this Privacy Policy regularly to reflect changes in our legal obligations or operational practices. Any changes will be posted on this page with an updated "Last Updated" date.

Contact Details

SurePath Advice

Email: contact@surepathadvice.co.uk

bottom of page