Privacy Policy

1. Who we are and what this policy covers

This Privacy Policy explains how we collect, use, store and share your personal data when you

use claimitmyself.co.uk, create an account, purchase a plan, complete eligibility

checks/questionnaires, generate claim packs, contact support, or otherwise use our services

(together, the “Services”).

ClaimItMyself is a trading name of Ashley Dow Ltd (Company No. 08265188). We are the

“controller” of your personal data for the purposes of UK data protection law (including the UK

GDPR and the Data Protection Act 2018).

Contact details

Ashley Dow Ltd trading as ClaimItMyself

Address: 13 Oak Green House, Oak Green Business Park, Cheadle Hulme, Cheadle, England, SK8

6QL

Email: info@claimitmyself.co.uk

UK-first hosting and processing

We store and process your core account, questionnaire and claim-pack data in the UK and our

primary CRM/database is held in the UK. Our website is hosted with EUKhost. Some service

providers we use (such as Stripe, Google and Meta/WhatsApp) may process certain personal

data outside the UK (for example, analytics identifiers, messaging content, or payment-related

data). Where data is transferred outside the UK, we use appropriate safeguards (see section 9).

2. What we do (important context)

We provide self-help digital tools, templates and guidance to help you check potential eligibility

and prepare claim packs so you can submit claims yourself. We do not submit claims on your

behalf, act as your agent, or communicate with HMRC (or other bodies) on your behalf.

3. The personal data we collect

We collect different categories of personal data depending on how you use the Services. This

may include:

Identity and contact data: name, email address, phone number, postal address, login

credentials.

Eligibility and claim data: answers you provide in eligibility checks/questionnaires, claim

history, and information required to prepare claim packs.

Government and employment-related data (where relevant): National Insurance number,

employer details, employment dates, address history.

Family/household data (where relevant): spouse/partner information and children’s details

(for example names and dates of birth where required for eligibility/claim checks).

Account and usage data: logins, pages/features used, claim packs generated/unlocked,

downloads/prints (where trackable), and support interactions.

Technical data: IP address, device type, browser, operating system, timestamps, and

diagnostic data.

Payment data: we do not store full card details. Payments are processed by our payment

provider (Stripe). We receive identifiers such as transaction IDs, subscription status, and

billing history.

Support communications: emails and WhatsApp messages you send to us and our

responses.

Guarantee/refund evidence (where applicable): documents/screenshots showing rejection

decisions and related information needed to assess the 100% Money‑Back Guarantee.

We do not intentionally collect bank account details through our questionnaires. Do not send

bank details to us unless we specifically request them for a lawful purpose.

Data about other people (spouse/partner/children)

If you provide information about another person (for example your spouse/partner or children),

you confirm you have the right to provide that information and to share it with us. You should

only provide the minimum information necessary and ensure it is accurate.

4. Where we get your data from

We collect personal data from:

You directly (when you complete forms, create an account, purchase a plan, contact

support, or upload evidence).

Your use of the website and Services (usage and technical data).

Our service providers (for example, Stripe transaction identifiers and subscription status).

5. How we use your data and our lawful bases

We use your data for the purposes below. UK GDPR requires a lawful basis for each purpose:

5.1 To provide the Services and perform our contract with you (Contract)

Create and manage your account and deliver access to your plan.

Run eligibility checks/questionnaires and generate claim packs based on your answers.

Maintain your credit ledger/activity log (claim pack generation/unlock events).

Provide customer support and service communications.

5.2 To manage payments, subscriptions and accounting (Contract / Legal obligation)

Process payments and manage renewals/cancellations through Stripe.

Keep records required for accounting, tax and audit purposes.

5.3 To improve, secure and operate the Services (Legitimate interests)

Monitor performance, troubleshoot issues and maintain service availability.

Protect against fraud, misuse, abusive behaviour and security incidents.

Maintain logs needed to resolve disputes, chargebacks and complaints.

Our legitimate interests include running a secure, reliable service, preventing fraud/abuse, and

improving our platform. Where we rely on legitimate interests, we balance our interests against

your rights.

5.4 Analytics and advertising measurement (Consent)

We use Google Analytics to understand how visitors use our website and to improve our

content and user experience. We also use the Meta (Facebook) Pixel to measure advertising

performance and to help show relevant ads.

Where required, we will ask for your consent before placing analytics/marketing cookies or

similar technologies on your device. You can withdraw consent at any time (see section 8).

5.5 Marketing communications

We may send service messages that are necessary for your account (for example, confirmations,

important product notices, and billing messages). Where we send marketing messages (for

example offers or promotions), we will do so in accordance with applicable marketing laws and

will provide an opt-out.

5.6 Guarantee and refunds (Contract / Legitimate interests)

Assess and process refund requests and 100% Money‑Back Guarantee claims, including

verifying rejection evidence.

Prevent fraudulent refund/guarantee claims and maintain records to resolve disputes.

6. Automated eligibility indicators (profiling)

We use your questionnaire answers to generate automated eligibility indicators (for example,

“may qualify”, “may not qualify”, or “more information needed”). This is a rules-based

assessment designed to help you prioritise claim types and does not guarantee outcomes.

These indicators are not intended to have legal or similarly significant effects on you. You

remain responsible for deciding what to submit. You can update your answers at any time, and

you can contact us if you believe an indicator is wrong.

7. Who we share your data with

We may share personal data with trusted service providers who help us deliver the Services,

including:

Stripe (payments and subscription management).

EUKhost (website hosting).

Google Workspace/Gmail (email and internal communication).

WhatsApp/Meta (support messaging, if you contact us via WhatsApp).

Google Analytics (website analytics) and Meta Pixel (advertising measurement) via

cookies/online identifiers (where consent is given).

We do not sell your personal data.

We do not share your claim data with HMRC or other authorities because we do not submit

claims for you.

We may disclose information if required by law, to enforce our Terms, or to protect our rights,

customers or the public (for example to address fraud or security incidents).

8. Cookies, analytics and similar technologies

We use cookies and similar technologies to operate the website, remember preferences, and

understand usage. Some cookies are essential for the site to work; others (such as analytics and

advertising cookies) are optional.

Google Analytics: helps us understand website usage and improve performance.

Meta Pixel: helps us measure advertising and improve relevance of ads.

Where required, we will show a cookie banner that allows you to accept or reject optional

cookies. You can also control cookies through your browser settings.

9. International transfers

Some of our service providers (including Google and Meta/WhatsApp) may process data outside

the UK. Where this occurs, we take steps to ensure appropriate safeguards are in place, such as

the UK International Data Transfer Agreement (IDTA), an adequacy decision, or other approved

transfer mechanisms.

10. How long we keep your data (retention)

We keep personal data only for as long as necessary for the purposes set out in this policy,

including providing the Services, handling support requests, maintaining security logs, and

meeting legal, accounting and dispute-resolution requirements.

Minimum retention baseline: we generally retain account and service records for at least 2

years.

Typical retention periods include:

Account and service data (including questionnaire answers, eligibility indicators,

credit/activity logs and claim pack history): kept while your account is active and for at least

2 years after closure or last activity, and longer if needed for disputes, fraud prevention or

legal obligations.

Transaction and billing records: typically kept for at least 6 years for accounting and tax

purposes.

Support communications: typically kept for at least 2 years and longer if needed to resolve a

complaint, dispute or chargeback.

Guarantee/refund evidence: typically kept for at least 30 months (aligned to the guarantee

longstop) and longer if required for disputes or legal obligations.

11. Security

We use appropriate technical and organisational measures to protect your personal data,

including access controls, secure hosting, encryption in transit where available, and limiting

access to authorised personnel.

No system is completely secure. You should keep your password confidential and notify us

immediately if you believe your account has been compromised.

12. Your rights

Under UK data protection law, you may have rights including:

Access: request a copy of your personal data.

Rectification: ask us to correct inaccurate or incomplete data.

Erasure: ask us to delete your data (where applicable).

Restriction: ask us to restrict processing in certain circumstances.

Objection: object to processing based on legitimate interests (including direct marketing).

Portability: request transfer of certain data to another provider.

Withdraw consent: where we rely on consent (for example optional cookies), you can

withdraw it at any time.

To exercise your rights, contact us at info@claimitmyself.co.uk. We may need to verify your

identity before responding.

Account deletion requests

If you wish to request deletion of your account, email info@claimitmyself.co.uk from the email

address on your account. We may retain certain records where required for legal obligations,

accounting, fraud prevention, or dispute handling.

Complaints

If you are unhappy with how we handle your data, you can complain to the UK Information

Commissioner’s Office (ICO). We encourage you to contact us first so we can try to resolve your

concern.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The version published on our website will

apply from the date it is posted. If we make material changes, we will take reasonable steps to

notify users (for example by email or in-account notice).