Privacy
Introduction
Williams Pitt Ltd (“we”, “us”, “our”) is committed to protecting the privacy and security of personal data.
This Privacy Policy explains how we handle personal data in the course of our business, including when we act as a data processor on behalf of insurer clients and when we act as a data controller in our own right.
We comply with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Our Roles Under Data Protection Law
Acting as a Data Processor
In the majority of cases, when providing loss adjusting services, we act as a data processor on behalf of insurer clients.
In this role:
The insurer is the data controller.
- We process personal data only on their instructions
- We do not determine the purpose of processing
Acting as a Data Controller
In certain circumstances, we act as a data controller where we determine the purpose and means of processing personal data.
This includes (but is not limited to):
- Our internal business operations (e.g. HR, accounts, supplier management)
- Complaints relating to our services
- Legal and regulatory obligations
- Defending legal claims
Personal Data We Process
We may process:
- Name, address and contact details
- Policy and claim information
- Property and incident details
- Financial or verification information where relevant
- Communications and correspondence
Sources include:
- Insurers and brokers
- Policyholders and beneficiaries
- Contractors and professional advisers
- Fraud prevention agencies
- Public or external data sources
How We Use Personal Data
As a Data Processor
We process personal data on behalf of insurers to:
- Manage and assess claims
- Communicate with relevant parties
- Investigate and validate claims
- Prevent and detect fraud
As a Data Controller
Where we act as controller, we process personal data for:
- Running our business
- Complying with legal obligations
- Protecting our legal rights
- Improving our services
Sharing Personal Data
Depending on our role, we may share personal data with:
- Insurers (data controllers)
- Brokers and intermediaries
- Contractors and suppliers
- Professional advisers
- Fraud prevention agencies
- Law enforcement or regulators
We only share data where lawful and necessary.
International Transfers
We do not transfer personal data outside the UK unless appropriate safeguards are in place and such transfer is lawful.
Data Security
We implement appropriate technical and organisational measures, including:
- Secure systems and access controls
- Encryption where appropriate
- Staff confidentiality obligations
- Physical security measure
Data Retention
We retain personal data:
- In line with insurer instructions (when acting as processor)
- In accordance with legal and regulatory requirements (when acting as controller)
Your Rights
Where we act as Data Processor
You should contact your insurer (the data controller) to exercise your rights, including:
- Access to your data
- Correction or deletion
- Restriction or objection
We will assist the insurer in responding to such requests.
Where we act as Data Controller
You may contact us directly to exercise your rights.
Complaints
If you are not satisfied, you may contact the Information Commissioner’s Office (ICO).
Changes to this Policy
We may update this policy from time to time.
Contact
Williams Pitt Ltd
George House
84 Richardshaw Lane
Pudsey
Leeds
LS28 6BN
Email: claims@williamspitt.co.uk