Privacy Policy

Last updated: 23rd April 2026.

Hallbrook Partners Limited trading as Hallbrook (“we”, “us”, “our”) is committed to protecting your personal information and respecting your privacy. This policy explains how we collect, use, store, share and protect your personal information when you use our services or visit our website.

www.hallbrook.claims

1. Who we are

Hallbrook is a trading style of Hallbrook Partners Ltd, a claims management company authorised and regulated by the Financial Conduct Authority (FCA).

Our registered office is:

C/O Atkinson Evans
The Old Drill Hall
10 Arnot Hill Road
Nottingham
NG5 6LJ

If you have any questions about this Privacy Policy or how we use your personal data, you can contact us at:

Email: info@hallbrook.claims
Telephone: 0115 822 1850

2. What personal data we collect

We may collect and process the following categories of personal information:

• Contact information: name, address, email address, phone number.
• Identification information: date of birth, proof of identity, proof of address.
• Financial information: details about your car finance agreement(s), lender details, payment history, bank details if required for settlement.
• Case information: information you provide to us about your claim and correspondence between you, us, your lender, or the Financial Ombudsman Service.
• Technical information: when you visit our website, we may collect your IP address, browser type, and cookies (see Section 9).

3. How we use your personal data

We use your personal data to:

• Provide our claims management services to you.
• Assess your eligibility to bring a claim.
• Communicate with you about your claim.
• Comply with legal and regulatory obligations.
• Improve our website and services.
• Carry out internal business reporting and quality assurance.

4. Our lawful basis for processing

We rely on the following lawful bases under the UK GDPR to process your data:

• Contract – processing is necessary to perform our contract with you.
• Legitimate interests – to pursue our business interests, such as verifying your identity, preventing fraud, and providing claims services efficiently.
• Legal obligations – where we are required to comply with law or regulation.
• Consent – in limited cases, such as where you agree to receive marketing communications.

5. Who we share your personal information with

We may share your personal data with:

• Our panel law firms and solicitors who progress your claim.
• Service providers, professional advisers, IT and system administrators who support our operations.
• Regulators, ombudsman schemes, government bodies or courts where legally required.
• Valid8 IP Ltd for the provision of a soft credit search to locate your car finance agreements and identity information which may include Equifax Ltd, Experian Ltd, TransUnion with no impact on your credit score.

You can access Valid8 IP’s privacy policy and the Credit Reference Agency Information Notice (CRAIN):

• TransUnion CRAIN
• Equifax CRAIN
• Experian CRAIN

We will never sell your personal data to third parties.

6. How long we keep your personal data

We will keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, regulatory, accounting or reporting requirements.

Typically, we retain claim-related data for up to six years after your case is closed.

7. International transfers

We generally store your personal data within the UK or European Economic Area (EEA). Where we use service providers outside the UK/EEA, we will ensure appropriate safeguards are in place (such as UK-approved standard contractual clauses).

8. Your rights

You have the following rights under data protection law:

• Right to access – request a copy of your personal data we hold.
• Right to rectification – correct inaccurate or incomplete data.
• Right to erasure – request deletion of your data in certain circumstances.
• Right to restrict processing – limit how we process your data.
• Right to data portability – receive your data in a portable format.
• Right to object – object to processing based on legitimate interests or direct marketing.
• Right to complain – to the Information Commissioner’s Office (ICO) if you are unhappy with how we use your data.

9. Cookies and website data

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. At the bottom of this policy, we have included a table, setting out what cookies we use, and the purposes for which we use them.

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org.

To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaopto

Cookies we use, and the purposes we use them for

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a new “last updated” date.