Data Breach Advisors Website Privacy Notice

1. Introduction

DataBreachAdvisors.co.uk is a trading name of Cavis Ltd. This Privacy Notice ("Notice") explains how Cavis Ltd ("Cavis," "we," "our," or "us") collects, processes, and protects personal data in the course of providing our services and conducting business operations. It also outlines the rights and choices available to you regarding your personal data

We acknowledge the importance of privacy and commit to keeping this Notice up to date to reflect any changes in our data handling practices or policies.

2. Who We Are

Cavis Ltd is a company registered in England & Wales (Company No. 16130455), with its registered office at 100 Barbirolli Square, Manchester, M2 3AB. We are registered with the Information Commissioner's Office (ICO) under registration number ZB842978.

3. How We Collect and Use Personal Data

We process personal data from the following categories of individuals:

  • Clients
  • Visitors to our website
  • Individuals engaging with our marketing activities

5. Clients & Potential Clients

If you are a client or potential client, we collect personal data to assess eligibility for services and facilitate communication and where eligible, to introduce you to our partner law firm

Information We Collect:

  • Contact details (name, address, email, phone number)
  • Case-specific details (other claim-related information as required)

Purpose:

  • To determine your eligibility for legal services and introduce you to a trusted law firm partner if applicable.

Legal Basis for Processing

We will process your personal data under one or more of the following lawful bases:

  • Article 6 (1) (a) - consent
  • Article 6(1)(f) UK GDPR – legitimate interests in assessing potential claims
  • If we process special category data (e.g., health information), we rely on Article 9(2)(f) UK GDPR – processing necessary for the establishment or defence of legal claims and Article 9 (2) (a) Explicit Consent

7. Website Visitors

When you visit our website, we collect:

  • Standard web analytics (via third-party tools)
  • Information you submit via contact forms or email

We process this data solely for responding to inquiries and improving our website. Optional cookies are only set with your consent.

Legal Basis for Processing

  • Article 6(1)(a) UK GDPR – consent (for non-essential cookies).
  • Article 6(1)(f) UK GDPR – legitimate interests in managing inquiries and website improvements.

8. Marketing Data

We collect and use personal data for marketing communications with individuals who have expressed interest in our services.

How We Collect Data:

  • Direct interactions (e.g., service enquiries)
  • Third-party referrals
  • When you choose to receive marketing communications from us

How We Use Data:

  • To send relevant updates about our services
  • To manage marketing preferences

Legal Basis for Processing

  • Article 6(1)(f) UK GDPR – legitimate interests in promoting our services.

You can opt out of marketing communications at any time.

9. Data Sharing

We may share personal data with:

  • Trusted law firms (where applicable in respect of potential claims) with your consent
  • Internal staff requiring access for service delivery all of whom have received data protection training
  • Professional advisors (e.g., legal, financial, insurance consultants)
  • Third-party IT, marketing, and cloud service providers
  • Any entity involved in a sale or restructuring of our business

10. International Transfers

Some data may be processed outside the UK or EEA, such as when using cloud services. We will always ensure such transfers comply with UK and EU data protection laws using appropriate safeguards.

11. Automated Decision-Making

We do not use automated decision-making to process personal data.

12. Data Security

We implement physical, technical, and organizational security measures to protect personal data and provide ongoing staff training on data protection responsibilities.

13. Data Storage & Retention

  • Data is securely stored on cloud servers and physical archives.
  • We retain data only for as long as necessary to fulfil business and legal obligations.
  • For specific retention periods, please contact us at info@cavis.co.uk.

14. Your Rights & Contact Information

You have the right to:

  • Request access to your personal data
  • Correct inaccurate data
  • Request data deletion (subject to legal restrictions)
  • Withdraw consent where applicable
  • Object to processing under certain circumstances
  • Re

    To exercise your rights, or if you have any concerns about how we process your personal data, please contact us at complaints@cavis.co.uk.

    If you wish to make a complaint about how we handle your personal data please contact us at the email address above. If you are dissatisfied with our response, you have a right to complain to the Information Commissioner's Office (ICO):

    ICO Contact Details: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

    Phone: 0303 123 1113

    Website: www.ico.org.uk

    Last Updated: March 2025

    Revision History

    VERSION DATE

    NO. ISSUED

    V1.0 March 2025 Document approved and issued