Data Protection Policy

Purpose

We take data protection seriously and apply strict controls to how personal data is collected, used, stored, and shared.

About us

Sold Short (Marketing) Ltd is an independent introducer service. We connect individuals who believe they may have a professional negligence claim against their solicitor with specialist professional negligence lawyers. We act as the Data Controller for all personal data processed in the course of providing this service.

Data controller contact details

Email: help@soldshort.co.uk
Phone: 0800 887 0123
Post: Sold Short (Marketing) Ltd, 17 Burghfield, Epsom, Surrey, KT17 4ND
Website: soldshort.co.uk
Company number: 17238504
ICO registration number: ZC156644

Principles we follow

• lawful, fair, and transparent use
• collected only for specific and legitimate purposes
• limited to what is necessary for those purposes
• accurate and kept up to date
• stored only as long as required
• kept secure at all times

Types of data we process

• identity and contact details including name, phone number, and email address
• details of the legal matter that is the subject of the potential claim
• information about the solicitor or firm involved
• financial details where relevant to assessing the nature of a claim
• communication records relating to your enquiry

We only collect information that is necessary to connect you with an appropriate specialist solicitor.

Lawful basis for processing

• performance of a contract, or steps taken at your request prior to entering one
• legal obligation
• legitimate business interests
• consent, where required

Data security

• restricted access to personal data on a need-to-know basis
• secure digital systems and communication channels
• staff obligations of confidentiality
• secure handling and storage of documents and records

We review our security practices regularly and update them as required.

Data sharing

• specialist professional negligence solicitors to whom we refer your enquiry
• regulatory bodies where required by law
• service providers who support our operations and who are contractually bound by data protection obligations

We do not sell personal data. All third parties with whom we share data are required to meet data protection standards consistent with our own.

Data retention

• up to 7 years after the conclusion of an introduction or enquiry
• longer where required by applicable law or regulation

Your rights

• access your personal data
• request corrections to inaccurate data
• request deletion of your data where applicable
• restrict or object to processing in certain circumstances
• request your data in a portable format

To exercise any of these rights, please contact us at help@soldshort.co.uk. We will respond within the timeframe required by law.

Data breaches

Any personal data breach will be assessed promptly. Where a breach meets the threshold for mandatory reporting, we will notify the Information Commissioner's Office within 72 hours and inform affected individuals as required by law.

Complaints

If you believe we have mishandled your personal data, you have the right to raise a complaint with the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

Policy review

This policy is reviewed regularly and updated to reflect changes in the law, regulatory guidance, or our own business practices. The current version is available on our website.