Who is the controller?
Raeburn Welfare Advocates is a trading style of THE RAEBURN HOLDING GROUP LIMITED (Company No. 17361231), registered in England and Wales. Registered office: 82a James Carter Road, Bury St. Edmunds, England, IP28 7DE. The company is the controller for personal information processed through this service unless we tell you otherwise in writing.
Information we may collect
Depending on the service, this may include identity and contact information, benefit and financial information, correspondence, deadlines, household and family information, health and disability information, supporting records, payment and accounting records, complaint information and information you provide about representatives, clinicians, carers or other relevant people.
Please provide only information that is relevant to the matter. If you provide information about another person, you should have a lawful reason to do so and avoid unnecessary sensitive detail.
Why we use information
We use information to respond to enquiries, take steps at your request before a contract, decide whether we can accept work, perform an agreed service, communicate with you, organise evidence and case materials, administer payments and records, manage complaints, meet legal obligations and establish, exercise or defend legal rights where necessary.
Article 6 lawful bases
The applicable lawful basis depends on the activity and may include steps requested before entering a contract, performance of a contract, compliance with a legal obligation and legitimate interests such as administering and protecting the business. We do not rely on one legal basis for every purpose.
Health and other special-category data
Health information is special-category data under UK data-protection law. Before processing it, we must have both an Article 6 lawful basis and an applicable Article 9 condition. The condition depends on the purpose and circumstances. We will not treat the fact that information was sent to us as automatically making every use lawful. We apply data minimisation, access controls and appropriate security to sensitive case material and will not collect more than is reasonably needed for the agreed purpose.
Who information may be shared with
We do not sell personal information. Where necessary and lawful, information may be shared with service providers supporting hosting, secure IT, storage, communications, accounting or professional services; with public bodies, tribunals or other third parties where you authorise or instruct us to do so and it is within scope; or where disclosure is required by law or necessary to protect legal rights. Providers acting for us are expected to handle information only for the relevant purpose and subject to appropriate safeguards.
Website technical data, cookies and external services
The public website is hosted on Vercel and does not currently use an advertising network, behavioural advertising SDK, client account system or analytics SDK. The site uses Google Fonts, which means a visitor's browser may make requests to Google's font infrastructure and transmit ordinary technical request information such as IP address and browser data. We do not use that request to profile visitors.
We do not intentionally set non-essential marketing or analytics cookies through this website. If the site's technology changes so that consent is required for non-essential cookies or similar tracking, this notice and the consent mechanism must be updated before that tracking is enabled.
How long we keep information
We keep information only for as long as reasonably necessary for the purpose collected, taking account of service delivery, accounting and tax records, complaint handling, legal obligations, limitation periods and the establishment or defence of legal claims. Different categories of information may have different retention periods. Information that is no longer needed should be securely deleted or anonymised where appropriate.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to access your information, correct inaccurate information, request erasure or restriction, object to certain processing and obtain portable information. Some rights are not absolute and may not apply where information must be retained for a legal reason. You may also complain to the Information Commissioner's Office.
Security, incidents and contact
We use proportionate organisational and technical safeguards designed to protect personal information, including limiting unnecessary collection and access. No internet or email system can be guaranteed completely secure. If we become aware of a personal-data breach, we will assess and handle it in accordance with applicable UK data-protection obligations.
Privacy enquiries and data-rights requests can be sent to contact@theraeburngroup.com. We may need to verify identity before disclosing personal information.