Privacy Policy
Your privacy is protected by law and by us. This policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you have over it — in plain English.
Last updated: July 2026 · Version 3.0
Data Controller
Legal Disputes UK Limited
Trading as: FixMyFile UK
Company No: 17321196
Incorporated: 5 July 2026
Registered Office: 66 Paul Street, London, England, EC2A 4NA
Regulatory Details
ICO Registration: ZC189761
Data Protection Act 2018 compliant
UK GDPR compliant
Data Protection Officer: privacy@fixmyfile.co.uk
Jurisdiction: England & Wales
1. Introduction & Data Controller
FixMyFile UK is a trading name of Legal Disputes UK Limited (Company No. 17321196), incorporated in England and Wales on 5 July 2026, with its registered office at 66 Paul Street, London, England, EC2A 4NA.
Legal Disputes UK Limited is the data controller responsible for your personal data within the meaning of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our ICO registration number is ZC189761.
Prior to 5 July 2026, FixMyFile UK operated under different ownership. All data held has been transferred to and is now processed by Legal Disputes UK Limited in accordance with the lawful basis of legitimate interests and business reorganisation.
This policy applies to all personal data we collect through our website (fixmyfile.co.uk), our client portal, our case management systems, and any communication you have with us including via WhatsApp, telephone, email, or post.
2. Personal Data We Collect
Identity & Contact
- • Full name, title, date of birth
- • Email address and phone number
- • Postal address
- • Nationality and marital status
Case & Financial
- • Credit file and financial records
- • Bank account and institution details
- • CIFAS marker and default information
- • Case correspondence and evidence
Identification Documents
- • Passport or driving licence
- • Proof of address (utility bill, bank statement)
- • Signed Letters of Authority (LOA)
- • Digital signatures
Technical & Usage
- • IP address and browser type
- • Device and operating system information
- • Page views and session duration
- • Cookies and tracking data
3. How We Use Your Data
We process your personal data for the following purposes:
Providing Our Services
To assess eligibility, prepare case files, draft submissions, and manage your document drafting or dispute case from start to finish.
Communication
To contact you about your case, send updates, request documents, and respond to your enquiries via your preferred channels.
Payment Processing
To process payments, issue invoices, manage payment plans, and verify transactions through our payment processors.
Legal & Regulatory Compliance
To meet our obligations under UK law, including anti-money laundering checks, identity verification, and data protection requirements.
Case Documentation
To prepare, store, and submit legal documents including Letters of Authority, complaints, and escalation packs to institutions and regulators.
Service Improvement
To analyse usage patterns, improve our website and services, and develop new features that benefit our clients.
Security & Fraud Prevention
To protect against fraud, unauthorised access, and to maintain the security and integrity of our systems and your data.
4. Legal Basis for Processing
Under UK GDPR Article 6, we rely on the following legal bases:
Contract
Processing is necessary to perform a contract with you or to take steps before entering into one (Article 6(1)(b)). This covers all case-related work.
Legal Obligation
Processing is necessary to comply with a legal obligation (Article 6(1)(c)), such as identity verification and AML checks.
Legitimate Interests
Processing is necessary for our legitimate interests (Article 6(1)(f)), such as fraud prevention and service improvement.
Consent
Where we process data based on your consent (Article 6(1)(a)), such as marketing communications or non-essential cookies.
For special category data (e.g. health-related information affecting financial circumstances), we rely on the substantial public interest condition under Article 9(2)(g) of UK GDPR.
6. International Data Transfers
Your personal data is primarily stored and processed within the United Kingdom and the European Economic Area (EEA). Where any data is processed outside the UK/EEA (for example, by cloud service providers with global infrastructure), we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK government, or we rely on a recognised adequacy decision.
You may request a copy of the safeguards we use for international transfers by contacting our Data Protection Officer.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes set out in this policy:
| Data Type | Retention Period |
|---|---|
| Active case files | Duration of case + 7 years |
| Identity documents | 6 years post-case closure |
| Payment records | 7 years (tax/legal requirements) |
| Correspondence | 7 years post-case closure |
| Website/usage data | 24 months |
| Marketing consent records | Until withdrawal of consent |
| Case access logs | 3 years |
After the retention period, data is securely deleted or permanently anonymised.
8. Data Security
We implement industry-standard technical and organisational measures to protect your personal data:
256-bit TLS Encryption
All data in transit is encrypted end-to-end.
Encrypted Storage
Data at rest is encrypted using AES-256.
Access Controls
Role-based access with multi-factor authentication.
Regular Audits
Security assessments and penetration testing.
Activity Monitoring
All access to personal data is logged and monitored.
Staff Training
Mandatory GDPR and data protection training for all staff.
In the event of a data breach, we will notify the ICO within 72 hours and affected individuals without undue delay, as required by UK GDPR.
10. Your Data Protection Rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights:
Right of Access
Request a copy of the personal data we hold about you (Subject Access Request).
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing
Request that we limit how we use your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
Rights re: Automated Decisions
Not be subject to decisions based solely on automated processing without human intervention.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email privacy@fixmyfile.co.uk with your request. We respond to all valid requests within one month (extendable by two months for complex requests, in which case we will inform you of the extension within the first month).
11. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a person under 18, please contact us immediately at privacy@fixmyfile.co.uk and we will take steps to delete such data.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you by email. We encourage you to review this page periodically.
13. Complaints & Regulator
If you have a concern about how we handle your personal data, we want to hear from you. Please contact us first at privacy@fixmyfile.co.uk and we will investigate promptly.
You also have the right to complain to the UK's independent data protection regulator:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would appreciate the opportunity to address your concerns before you approach the ICO.
14. Contacting Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Data Protection Officer
Email: privacy@fixmyfile.co.uk
General: info@fixmyfile.co.uk
Phone: 0800 009 6089
WhatsApp: 020 8050 8711
Registered Office
Legal Disputes UK Limited
66 Paul Street
London, England
EC2A 4NA
United Kingdom