Privacy Notice for Claim PCP Today

Claim PCP Today is a claims management company authorised and regulated by the Financial Conduct Authority (FCA) for claims management activity relating to vehicle finance and PCP agreements. We are also registered with the Information Commissioner's Office (ICO) as a data controller - our ICO registration is held on the public register maintained by the Information Commissioner's Office, and you can verify it at ico.org.uk. Where your enquiry is referred to a partner law firm to progress, that firm will be separately authorised by its own regulator and will provide you with its own regulatory information at that point.

For any questions about how we handle your personal information, or to exercise any of your rights described in this notice, you can contact us by email at the complaints address shown in the regulatory summary on this page, or by writing to our registered office, the address for which is available on the Companies House public register and on request.

This privacy notice applies to all personal information collected by Claim PCP Today through the claimpcptoday.co.uk website (including all pages and sub-pages) and through any enquiry form, telephone number, email address, or live-chat function operated by us in connection with the website.

Claim PCP Today is the data controller for the personal information described in this notice. Being a data controller means we determine the purposes and means of processing your personal information. In some contexts - for example when we pass your information to a partner solicitor or claims partner firm to progress your PCP finance claim - that partner firm will become an independent data controller in respect of their own processing, and their own privacy notice will apply to their activities.

This notice does not cover websites operated by third parties that you may reach by following links from our site. Please check the privacy notices of any third-party sites you visit.

This notice was last reviewed in 2025. We will update it when our practices change and will communicate updates as described in the section on changes to this notice below.

We collect personal information in the following ways.

Information you give us through our enquiry form: When you submit an initial PCP claim enquiry on Claim PCP Today, we ask for your full name, mobile telephone number, email address, home postcode, and details about the vehicle finance or PCP agreement you believe may give rise to a claim (which may include the lender's name, approximate loan amount, and dates of the agreement). We also ask for your contact preferences so we know how you would like us to get in touch.

Information your device sends automatically: When you browse our website, our servers and analytics tools collect technical information including your IP address, device type, operating system, browser type and version, the web page or advertisement that referred you to our site, the pages you visit, and the time and duration of your visit. This information is used for website security, performance monitoring, and - with your consent - to improve our marketing.

Information from third parties: To assess eligibility for a PCP mis-selling or hidden-commission claim, we may receive information about you from identity-verification providers and, where necessary and permitted by law, credit-reference agencies. We may also receive updated contact details or claim-relevant information from our partner solicitors, claims partners, or from the Financial Conduct Authority and Financial Ombudsman Service if they are involved in resolving a complaint or claim in which you are a party.

We use your personal information for the following purposes, and we rely on the lawful bases listed alongside each.

Assessing your PCP claim enquiry and checking eligibility: We use your name, contact details, vehicle finance details, and any identity-verification data to determine whether your enquiry is suitable to progress as a PCP mis-selling or hidden-commission claim. The lawful basis is the performance of a contract (or steps taken at your request before entering a contract) under UK GDPR Article 6(1)(b).

Contacting you about your enquiry: We use your mobile number, email address, and stated contact preferences to get in touch with you to discuss your enquiry, provide case updates, and request additional information. The lawful basis is Article 6(1)(b) (contract) for essential communications and Article 6(1)(f) (legitimate interests) where we need to follow up in ways not strictly required by the contract.

Passing your enquiry to a regulated partner: We share your information with a partner solicitor or claims management partner so they can take your matter forward. This is necessary for the performance of the contract under Article 6(1)(b).

Internal record-keeping and regulatory compliance: We maintain records of enquiries, decisions, and case outcomes to meet our obligations as an FCA-regulated claims management company and to demonstrate compliance with FCA rules and ICO requirements. The lawful basis is Article 6(1)(c) (legal obligation).

Fraud prevention and identity verification: We carry out checks to prevent fraudulent or duplicated claims and to verify your identity. The lawful basis is Article 6(1)(f) (legitimate interests), and we consider these interests proportionate given the risk of harm to genuine claimants and to lenders.

Marketing communications about similar PCP finance claim opportunities: Only if you have expressly opted in, we may send you information about related services. The lawful basis is Article 6(1)(a) (consent). You can withdraw consent at any time as described in the section on your rights below.

We share your personal information only with the categories of recipient listed below, and only to the extent necessary for the purposes described in section 4.

Partner solicitors and claims partners: Your enquiry details are passed to a regulated solicitor firm or FCA-authorised claims management partner who will conduct or oversee your PCP finance claim. That partner firm becomes an independent data controller once they receive your information, and they will provide you with their own privacy information.

Identity-verification and credit-reference providers: To verify your identity and check eligibility for a claim, we may share limited personal details with specialist identity-verification services and, where necessary, credit-reference agencies. These providers act as our data processors or as independent controllers depending on the service.

IT, hosting, and case-management software providers: We use cloud-based software and hosting services to store and process case information securely. These providers act as our data processors under written data-processing agreements.

Mailing, telephony, and messaging providers: We use third-party providers to send emails, SMS messages, and, where relevant, recorded telephone calls. These providers process your contact details on our behalf under processor agreements.

Marketing technology providers: Only where you have given consent, we may use marketing platforms and audience-matching tools to send relevant communications. We do not sell your personal data.

Regulators, courts, and ombudsman schemes: We may share information with the Financial Conduct Authority, the Information Commissioner's Office, the Financial Ombudsman Service, or a court if we are legally required to do so or if it is necessary to defend or exercise a legal claim.

Claim PCP Today is based in the United Kingdom and we aim to keep your personal data within the UK wherever possible. Some of the third-party software providers and service partners we use may store or process data on servers located in countries outside the UK, including in countries within the European Economic Area and, in some cases, in the United States or other countries.

When we transfer personal data outside the UK, we rely on one or more of the following safeguards: the UK government's adequacy regulations (where the destination country has been assessed as providing an adequate level of protection), UK International Data Transfer Agreements or standard contractual clauses approved for UK use, and supplementary technical and organisational measures such as encryption and pseudonymisation where additional protection is appropriate.

You can request further information about the specific safeguards in place for any particular transfer by contacting us at the address shown in the regulatory summary on this page.

We keep personal information for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal and regulatory obligations.

Active and closed PCP claim records: Where your enquiry progresses to an active claim, we retain your full case file for a minimum of six years from the date the claim is concluded. This reflects our obligations as an FCA-regulated claims management company and aligns with the standard limitation period under the Limitation Act 1980.

Financial and tax records: Where records relate to financial transactions (for example, any fee arrangements), we retain those records for at least six years from the end of the relevant tax year in accordance with HMRC requirements, which may mean retention beyond the six-year claim period.

Unsuccessful or withdrawn enquiries: Where you submit an enquiry that does not progress - for example because you are not eligible, you withdraw your enquiry, or we cannot reach you - we retain your basic contact and enquiry details for up to two years. We do this to prevent duplicate enquiries, for quality-assurance purposes, and to respond to any later queries or complaints.

Marketing consent records: If you consent to marketing, we retain a record of that consent for as long as we continue to use it and for a further period of three years thereafter, so we can demonstrate compliance with our obligations.

When the applicable retention period expires, we securely delete or anonymise your personal information.

Cookies are small text files placed on your device when you visit a website. Claim PCP Today uses cookies and similar tracking technologies for the following purposes.

Strictly necessary cookies: These cookies are essential for the website to function - for example, maintaining your session while you complete an enquiry form or ensuring the site loads correctly. Because they are strictly necessary, they are placed without your consent, but you can block them in your browser settings (note that doing so may prevent the website from working properly).

Functional cookies: These remember your preferences - for example, language settings or whether you have dismissed a notification banner. They rely on our legitimate interests in providing a consistent user experience.

Analytics cookies: With your consent, we use analytics tools (such as those provided by commonly available web analytics platforms) to understand how visitors navigate the site, which pages perform well, and where visitors exit. This helps us improve the website and the clarity of information about PCP claims. Analytics data is aggregated wherever possible.

Marketing and tracking cookies: With your consent, we and our marketing partners may place cookies that help us measure the effectiveness of advertisements and show relevant PCP claims-related content on other websites you visit. You can withdraw this consent at any time using the cookie consent banner on our website or by adjusting your browser settings.

You can manage or delete cookies through your browser settings at any time. Most browsers allow you to refuse cookies or to be notified before a cookie is placed. Detailed guidance on managing cookies in the most commonly used browsers is available at the ICO's website (ico.org.uk) and at www.allaboutcookies.org.

When you submit an enquiry through Claim PCP Today, we will contact you using the details and preferences you provide. The channels we use are described below.

Email: We use email for enquiry confirmations, case updates, requests for further information, and, where you have opted in, marketing messages about related services. Please check your spam folder if you are expecting a message from us.

SMS (text message): We may send you brief updates or appointment reminders by text message to the mobile number you provide. Marketing text messages are sent only with your express consent.

Telephone: A member of our team or a representative of our partner solicitor or claims partner may call you on the mobile or telephone number you provide to discuss your PCP claim enquiry. Calls may be recorded for training, quality-assurance, and regulatory compliance purposes. Recorded calls are stored securely and subject to the same retention periods as other case records.

Postal mail: On occasion we may send documents or formal correspondence by post to the address associated with your enquiry.

Other messaging channels: Where you expressly opt in to a specific messaging channel (for example a messaging app), we may use that channel to send case updates. We will only do so on the basis of your consent and you can withdraw that consent at any time.

Marketing communications are sent only where you have given your clear, prior consent. Every marketing message we send includes a straightforward way to unsubscribe or opt out. Withdrawing marketing consent does not affect the essential communications we need to send you in connection with your claim enquiry.

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights in relation to your personal information.

Right of access: You can request a copy of the personal information we hold about you. We will respond within one calendar month of receiving your request.

Right to rectification: If the information we hold about you is inaccurate or incomplete, you can ask us to correct it.

Right to erasure: In certain circumstances you can ask us to delete your personal information. This right is not absolute - for example, we may need to retain information to comply with our FCA regulatory obligations or to defend a legal claim.

Right to restriction: You can ask us to restrict how we use your information in certain circumstances - for example while we investigate a dispute about accuracy.

Right to data portability: Where our processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal information in a structured, commonly used, machine-readable format.

Right to object: You have the right to object at any time to processing based on our legitimate interests, including profiling for marketing purposes. We will stop the processing unless we can demonstrate compelling legitimate grounds.

Rights in relation to automated decision-making: We do not make decisions about you that are based solely on automated processing and that produce legal or similarly significant effects without human review. If this position changes, we will update this notice and offer you the protections required by law.

Right to withdraw consent: Where our processing is based on your consent (for example for marketing), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Right to complain to the ICO: If you believe we have not handled your personal information lawfully, you have the right to lodge a complaint with the Information Commissioner's Office. You can contact the ICO by telephone on 0303 123 1113, by post at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or online at ico.org.uk. We would, however, appreciate the opportunity to address your concerns before you contact the ICO, so please get in touch with us first.

If at any point you provide us with personal information about another person - for example a joint account holder on a PCP finance agreement, or a family member acting on your behalf - please make sure that person is aware you are sharing their information with us and that they have had the opportunity to read this privacy notice.

If you are acting on behalf of another person in relation to a PCP claim, please tell us at the point you submit the enquiry. We may ask you to provide evidence of your authority to act (for example a letter of authority). We will process the other person's personal information only to the extent necessary to manage the claim enquiry, and we will apply the same data protection standards to their information as we do to yours.

The Claim PCP Today website and its services are intended for adults aged 18 and over. PCP finance agreements are only available to adults, and claims relating to such agreements are only relevant to adults. We do not knowingly market to, or collect personal information from, anyone under the age of 18.

If you believe that a child has submitted personal information to us without appropriate parental or guardian consent, please contact us immediately using the contact details shown in the regulatory summary on this page. We will investigate promptly and, where we confirm that personal information has been provided by a child, we will delete that information as quickly as possible.

We take the security of your personal information seriously and we implement a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure.

Our technical measures include: encryption of personal data in transit using TLS (transport layer security); encryption or strong access controls for data stored on our systems; firewalls and intrusion-detection systems; and regular security patching of our software and hosting environments.

Our organisational measures include: restricting access to your personal information to staff and contractors who need it to carry out their duties; training staff on data protection obligations; conducting due-diligence assessments of our data-processing suppliers before we engage them; and maintaining written data-processing agreements with all suppliers who handle personal data on our behalf.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of it, as required by UK GDPR, and we will notify you directly if the breach is likely to result in a high risk to you.

You also have a part to play in keeping your information safe. Please do not share the details of any correspondence you receive from us, your reference numbers, or any login credentials with third parties, and be alert to unsolicited contacts claiming to be from Claim PCP Today.

We review this privacy notice regularly to make sure it remains accurate and reflects any changes in how we process your personal information, as well as any changes in UK data protection law or FCA regulatory guidance.

When we make material changes - for example changes to the types of data we collect, the purposes for which we use it, or the parties with whom we share it - we will update the 'last reviewed' date shown at the top of this notice and, where we hold your contact details and the change is significant, we will notify you directly by email or other appropriate channel.

For minor or administrative updates (for example correcting a typographical error or updating a contact address), we will update the notice on the website without individual notification.

We encourage you to revisit this page periodically. The version published on the Claim PCP Today website at the time you use the site is the version that applies to your use.