Premex Services Limited Privacy Notice – Injured Parties
Who We Are
Premex Services Limited are a provider of specialist outsourcing services to the insurance and legal industries.
We have been asked to carry out the following service:
- Facilitate in the creation of an independent medical report following a recent legal claim by which you will be representing yourself.
The following privacy policy explains how we use any personal data we collect about you.
The Purpose for Processing:
We will need to process your personal data, and in particular personal data relating to your health, for the following reasons:
- To facilitate in the fulfilment of the above services. This can include, identifying a suitably qualified medical expert and arranging an assessment for you.
- To provide you with service updates or important notices that we think may impact on our ability to deliver services to you.
- In order to defend any claim that may be brought against us in respect of the work we undertake as a business
- To process your personal data in line with any legal obligations we are required to comply with. This will include our obligations to you in relation to the processing of your personal data.
- To carry out market research to help us improve our services and product offerings, however we will ask for separate consent prior to this.
- To carry out market research and to publish your written testimonial regarding our services alongside your name and location, however this is optional we will ask for separate consent prior to this.
We can assure you that we will only ever process the minimum personal data required to carry out the services identified above.
Lawful Basis for Processing
We will process your personal data in line with the following lawful bases:
Legitimate Interests
We operate on your instructions as an unrepresented claimant. Therefore, you are responsible for ensuring that the correct controls are in place to enable us to lawfully undertake our work.
We operate on the basis that you are already actively aware of our involvement in this process and you fully expect us to provide this service.
Legal Obligations
We may be required to process your personal data to comply with our legal obligations. This can include complying with a subject access request you have made or supplying personal data to public authorities once we have verified a request.
Consent
Where we rely on your consent to process your personal data, this will be obtained via clear and unambiguous affirmative action. You have the right to withdraw your consent at any time, this can be done by using the contact methods shown at the bottom of this policy.
Categories of Personal Data Collected
We will have received the following information at the first point of contact or from a nominated supplier (for example, a relevant medical organisation) during the course of our service provision:
- Your name, basic personal information (address, date of birth) and contact details
- Basic information relating to your claim
- We may also be provided with instructions on the particular type of medical expert.
- Information relating to your health - this can include your medical records and, if applicable, we will also have sight of the medical report produced as part of our service provision.
Through our marketing activities, we will then ask for your consent to obtain:
- Your feedback regarding our service, alongside your name and other details relating to your claim.
- Your written testimonial regarding our service that may be published on our website, alongside your name and location.
If you use the Live Chat functionality on our website, any data provided to us by you and your IP address will be collected.
Categories of Recipients
- We will never share your information with any third parties that intend to use your personal data for their own purposes, other than what they are required to by law.
- We will be required to transfer your personal data to the nominated medical expert as they will need this to be able to create the independent medical report.
- We will also share your personal data with selected third parties who will be required to settle the invoice for the provision of our services.
- We will also allow access to your personal data with a selected outsourcing partner who assist us in our processing activities who are based outside the EEA. As personal data will be processed outside of the jurisdiction of European legislation, the access by the third party in question is subject to appropriate safeguards contained in the contract between us and the supplier. For the avoidance of doubt, your data will remain stored within the UK and any third parties will be accessing this securely through Premex’s IT infrastructure. - All third parties are fully vetted to ensure that your data is only shared and stored with companies that comply with all applicable Data Protection Regulations, including the General Data Protection Regulation and the Data Protection Act.
- Your personal data will not be stored outside the European Economic Area unless we have been specifically instructed to do this by yourself. In these exceptional cases we will ensure that all appropriate safeguards are in place and third parties comply with all applicable Data Protection Regulations, including the General Data Protection Regulation and the Data Protection Act.
Retention Period
As a maximum, we will retain your personal data:
- During the course of our service provision
- For a further 7 years following the settlement of your claim
- Satisfaction survey data will retained for two years.
We will only use your personal data to the extent necessary to comply with our legal obligations (for example for HMRC financial accounting obligations as well as to enable us to defend any claim that may be brought against us in respect of the work we undertake as a business).
Your Rights:
Under the Data Protection Act you have the following rights in relation to your personal data.
- Right to Access - You have a right to request a copy of your personal data.
- Right to Rectification - You have the right to ask us at any time to make any corrections or remove any personal data that you believe is inaccurate.
- Right to Erasure - You have the right to request the erasure of the personal data. However, we may still need to retain personal data to comply with our legal obligations. In the event of a request we will provide you with full details of the personal data that we are required to retain.
- Right to Restriction - You have the right to request a restriction in the processing of your personal data.
- Right to Objection - You have the right to object to the processing of your personal data.
We will aim to respond to any requests relating to your rights without undue delay and in any case within 1 calendar month of receipt of your request. If we are unable to comply with a request for any reason, then we will provide you with a full justification in writing within 1 calendar month of receipt of your request. We may ask you to confirm your identity so that we can validate a request. If you would like to make a request, please email or write to us using the contact details provided below.
As we are processing your data on the instruction of yourself as an unrepresented claimant, we act as a data controller.
Complaints
If you are unhappy about any aspect of our process and you would like to file a complaint, please contact us using the details below.
Alternatively, if you would like to make a complaint or report a concern about the way in which we have processed your personal data you have the right to contact the Information Commissioner’s Office who will be able to provide further assistance.
Changes to our Privacy Policy
We keep our privacy policy under regular review and we will place any updates on this web page. This privacy policy was last updated on 26th April 2023.
Contact Us
If you have any further questions or would like to raise any concerns about the way in which your personal data has been processed, please feel free to contact our Data Protection Officer using the information provided below:
Email: mail@premex.com – Please indicate in the header of the email that the email is intended for the Data Protection Officer.
Write to us:
Data Protection Officer
Legal and Compliance Dept
Premex Services Limited
Premex House
Futura Park Middlebrook
Bolton
BL6 6SX