Privacy Notice
Our privacy notice sets out our commitment to processing your personal information fairly and transparently.
We believe you should always know what personal information we collect from you and how we use it. ARAG Law is committed to being open and transparent about how we use your personal information.
That is the basic purpose of this Privacy Notice.
ARAG Law is committed to ensuring that your privacy is protected. Whilst providing our services we may be required to collect certain personal data from you. Should we ask you to provide personal data then you can be assured that it will only be used in accordance with this privacy statement.
This Privacy Policy was updated on 26th September 2024.
Data Controller
This Privacy Policy is issued by ARAG Law (referred to as “[ARAG Law “we”, “us” and “our” in this Privacy Notice) which operates in the United Kingdom.
For the purpose of the UK General Data Protection Regulation, the data controller is ARAG Law of Unit 4a, Greenway Court, Bedwas, Caerphilly, CF83 8DW. We are registered on the Information Commissioner's Office Data Protection Public Register with registration number Z3622399.
Typically, ARAG Law acts as a Data Controller which means we are responsible for ensuring that your information is collected, processed, secured and retained in accordance with applicable data protection laws.
What we need
Whilst providing our services we may require personal data. Personal data is information about you from which you can be identified such as your name and contact details. Depending on what services you receive from us, this may include sensitive personal data such as medical information. We will not collect any personal data from you that we do not need to provide our service to you.
The personal information you have provided, or we have received from third parties typically includes:
| Type of personal information | Description |
|---|---|
| Personal details including contact information | Information that identifies or links to you as an individual such as your name, postal address, e-mail address, telephone number, date of birth or age, marital status, gender identification, national insurance number, vehicle registration number and driving licence details |
| Financial | Financial details for the purposes of processing payments and transactions, which may include your card details and / or account information |
| Special Category Data (sensitive information) | We may collect sensitive information such as: • Information revealing racial or ethnic origin; • Information revealing political opinions; • Information revealing religious or philosophical beliefs; • Information revealing trade union membership; • Biometric data (where used for identification purposes or call recordings); • Health information (for example, if you wish to pursue a personal injury claim, we will require details of any injuries you may have sustained and may require medical records); • Information concerning your sex life and / or sexual orientation; • Information collected in order to make reasonable adjustments as a result of a vulnerability, which may include information related to your physical and mental health. |
| Criminal offence data | We may collect information related to any: • Criminal activity; • Allegations; • Investigations; and • Proceedings. For example, motor convictions or information that will help us to prevent or detect crime (including fraud). |
We will either collect information directly from you, your legal expenses insurer (if you have the benefit of a legal expenses insurance policy), your general insurer or broker or letting agent when you:
• Instruct us to act on your behalf in your legal claim;
• Obtain telephone legal advice from our helpline under the benefit of your legal expenses insurance policy;
• Make enquiries or a complaint;
• Use our website;
• Communicate with us by telephone, in writing by post or email, or via online channels.
How we use your information
We will use your information to:
| What we use your personal information for | Type of Information collected | Our Reasons |
|---|---|---|
| Make or defend a legal claim on your behalf or provide you with legal advice | • Personal details such as: | • Performance of a contract with you; |
| Provide you with legal services (this may include sharing information with third party service providers) | • Personal details such as: | • Performance of a contract with you; |
| Parties involved in claims brought by or against our clients | • Personal details such as: | • In order to comply with our legal obligations; |
| Handle complaints | • Personal details such as: | • Performance of a contract with you; |
| Regulatory bodies, auditors and other insurance companies (directly or via shared databases) when required by law and to prevent and detect fraud | • Personal details such as: | • In order to comply with our legal obligations; |
| In the event of a merger, asset sale, or other related transaction | • Personal details such as: | • Performance of a contract with you; |
| Reporting and analytic purposes; training and monitoring purposes (for example by reviewing recorded telephone calls and auditing claims); customer satisfaction surveys. | • Personal details such as: | • Performance of a contract with you; |
| We may indirectly or directly access your information for cyber security monitoring purposes – to ensure the protection of your personal data by monitoring cyber security threats. | • Personal details such as: | • Necessary for our legitimate interests; |
| Making Reasonable Adjustments as a result of vulnerability, this may include information related to your physical and / or mental health. | • Personal details such as: | • Necessary for our legitimate interests; |
| Sharing your personal and / or sensitive information in an emergency situation | • Personal details such as: | • Vital interests; |
The personal information we collect will be used by us and by third parties who process information on our behalf. This includes:
• Your legal expenses insurer, general insurer and / or broker and / or agent;
• Experts for the purposes of obtaining evidence to support your claim;
• Medical agencies (for the purposes of obtaining your medical notes and / or a medical report);
• Courts and Tribunals;
• Barristers;
• Mediators and / or arbitrators;
• Investigation agents and / or the police and / or online tracing and investigation databases;
• Costs draftsmen;
• IT services;
• Document management services;
• Business Support Services;
• Storage within a cloud server;
• Regulators such as the Solicitors Regulation Authority, the Legal Ombudsman and the Information Commissioner’s Office;
• External customer experience agencies;
• Authorised third party providers in the event of a business continuity incident;
• Authorised third party providers for the purposes of financial and / or quality auditing and / or for the purposes of our professional indemnity insurance;
• ARAG UK Group Marketing or other external customer experience agencies.
Transferring your information outside of the UK
Your information may be transferred outside of the UK for claims handling, processing, storage, administration or any other use stated in this notice. The processing of any information outside the UK will comply with UK data protection laws or equivalent.
Where it is necessary to send your personal information outside of the UK steps will be taken to make sure appropriate safeguards are in place to ensure the safety and privacy of your information as set out in this privacy notice.
How long will we retain information about you
Typically we keep your personal information for 7 years after the claim or enquiry has been closed or completed. We will only retain and use your personal information thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. If you would like to learn more about our Data Retention and Disposal Policy please contact us at
Your rights
Under data protection law you may have certain rights we need to make you aware of. The rights available to you depend on our reason for processing your information. These rights are a priority to ARAG Law and may include:
1. The right to be informed (about the collection and use of your personal data).
You have the right to be informed about what personal data we hold and why. This Privacy Notice provides you with that information.
2. The right of access (to your personal data and supplementary information, known as a Subject Access Request).
You the right to request and receive a copy of all the personal data we hold. If you wish to do this please write to us at colp&cofa@araglaw.co.uk.
3. The right to rectification (if your personal data is inaccurate or incomplete)
You have the right to correct inaccurate personal data and complete incomplete personal data we hold.
4. The right to erasure (and removal of your personal data)
You the right to request the deletion of your personal data. We will comply with this request providing there are no legal reasons why we cannot do so.
5. The right to restrict processing (or ‘block’ the use of your personal data).
You can request that we do not process any personal data that we hold. We will comply with this request providing there are no legal reasons why we cannot do so.
6. The right to data portability (to obtain and reuse your personal data for your own purposes across different services)
You can obtain and reuse your personal data for your own purposes across different services which we provide.
7. The right to object (to the processing of your personal data in certain circumstances).
You have the right to object to your personal data being processed for a legitimate interest such as direct marketing or for statistics.
8. Rights in relation to automated decision making and profiling.
You have the right to object to decisions based solely on computer processing and to question the decisions made about you by a computer.
If you have any questions regarding your rights please email
Please note that that there are times when we will not be able to honour your request regarding your personal data. This may be due to us requiring that data to fulfil our legal or regulatory duties or where there is a minimum, statutory period for which we have to keep your information. If we are unable honour your request, we will let you know our reasons.
Right to withdraw consent
Where we rely on your explicit consent to process certain types of personal information or sensitive information (for example, in order to make Reasonable Adjustments), you do have the right to withdraw that consent at any time. You can make this request by contacting the Data Protection Officer at
Please note, these rights are not absolute and there may be times when we cannot do what you ask us to. If that is the case, we will explain why when we reply to you. If you have a question about this Privacy Notice, how we use your personal information, or if you are not happy with how we process your information, please contact the Data Protection Officer at
Data Protection Officer
ARAG Law
Unit 4a
Greenway Court
Bedwas
Caerphilly
CF83 8DW
If you would like to access your personal information, you can request this by using our data request form or by contacting us using the details provided above.
How to make a complaint
If you wish to complain about how we have handled your personal data, or you have any questions/concerns about the way we process your personal information please contact us by emailing:
Data Protection Officer
ARAG Law
Unit 4a
Greenway Court
Bedwas
Caerphilly
CF83 8DW
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office (ICO). You can contact the Information Commissioner’s Office by visiting ico.org.uk or by post to:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
For more information please go to ico.org.uk.
.Updating this privacy notice
ARAG Law may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.