This privacy notice tells you what to expect us to do with your personal information.

• Contact details
• What information we collect, use, and why
• Third Party data processors
• Lawful bases and data protection rights
• Where we get personal information from
• How long we keep information
• How to complain

Contact details

Post: LawCare, PO Box 576, Newton Abbot, Devon, TQ12 9NN

Office: 07939 010 739

Email: [email protected]

What information we collect, use, and why

When you call the LawCare helpline or contact us for support by email or live chat, we may note information you voluntarily and freely give us, including:

• your name.  You can remain anonymous if you would prefer.
• telephone number.  Unless withheld by you your telephone number may be available to our agents and we may note this to better assist you and to ensure accurate record keeping
• email address
• work circumstances (We do not record the names of firms, employers, or third parties)
• brief notes regarding the issue you have contacted us about which may include details of your health and personal circumstances.
• Call recordings.  Our welcome message / whisper message warns callers that they may be recorded for training and monitoring purposes.

Other information you may hold that you freely give us:

• Gender
• Pronoun preferences
• Address

We also collect or use the following special category information, where it is freely given.  This information is subject to additional protection due to its sensitive nature:

• Racial or ethnic origin
• Health information

We collect or use the following information to receive donations or funding and organise fundraising activities:

• Names and contact details
• Addresses
• Donation history
• Tax payer information (for Gift Aid purposes)

We collect or use the following personal information for service updates or marketing purposes:

• Names and contact details
• Addresses
• Marketing preferences

Third Party Data Processors

We use a number of trusted third-party services to help us operate effectively.  These organisations act as data processors on our behalf, meaning they handle personal data only on our instructions and are contractually bound to keep it secure.  Below is a summary of the key processors we use and why.

Beacon CRM — We store and manage data about our donors, volunteers, event attendees, and other contacts in Beacon, a CRM platform.  We use Beacon to maintain contact records, manage events, and process Gift Aid submissions.  Beacon acts as our data processor under a Data Processing Schedule forming part of their terms and conditions.  All data is hosted on UK-based servers (Amazon Web Services and Google Cloud Platform).  For more information, see Beacon’s privacy policy.

Mailchimp — We use Mailchimp, provided by Intuit Inc., to send marketing emails and newsletters to supporters who have given their consent to hear from us.  Only contact information necessary for sending communications (such as name and email address) is shared with Mailchimp.  Mailchimp processes data on servers based in the United States.  Intuit participates in the UK-US Data Bridge, providing an appropriate safeguard for this international transfer.  For more information, see Mailchimp’s privacy policy.

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information.  There is a list of possible lawful bases in the UK GDPR.  You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below:

• Your right of access – You have the right to ask us for copies of your personal information.  You can request other information such as details about where we get personal information from and who we share personal information with.  There are some exemptions which means you may not receive all the information you ask for.  Read more about the right of access.

• Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.  Read more about the right to rectification.

• Your right to erasure – You have the right to ask us to delete your personal information.  Read more about the right to erasure.

• Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information.  Read more about the right to restriction of processing.

• Your right to object to processing – You have the right to object to the processing of your personal data.  Read more about the right to object to processing.

• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.  Read more about the right to data portability.

• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.  Read more about the right to withdraw consent.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide services and goods, including delivery and third party referrals are:

• Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone.  All of your data protection rights may apply, except the right to portability.
• We may also collect special category data under Article 9.2(d) to better assist service users and ensure that we are reaching all sections of the legal community. We will ask for your consent to collect this data.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information to receive donations or funding and organise fundraising activities are:

• Consent – we have permission from you after we gave you all the relevant information.  All of your data protection rights may apply, except the right to object.  To be clear, you do have the right to withdraw your consent at any time.

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

• Consent – we have permission from you after we gave you all the relevant information.  All of your data protection rights may apply, except the right to object.  To be clear, you do have the right to withdraw your consent at any time.

Where we get personal information from

Directly from you.

How long we keep information

LawCare retains personal data relating to users of its support service for three years from the date of our last contact with them, after which time they will be securely destroyed.

Other data relating to employees/volunteers is retained for seven years from the date the employment/the voluntary arrangement ceases, for example, names and addresses of staff and volunteers, after which time they will be securely destroyed.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

This privacy notice was last updated

16/04/2026