“We,” “Us,” and “Our” refer to Evanshaw Ltd, located at Suite 105, Highfield House, Cheadle Royal Business Park, Cheadle, England, SK8 3GY.
Company Number: 14799332 | HMRC Agent Services Ref: FARN0054948 | PAYE Agent Ref: IA6537 | Self-Assessment Agent Ref: 3004NQ
For the purpose of the Data Protection Legislation and this notice, we are the “data controller”; we are responsible for deciding how we hold and use personal data about you. We are required under the Data Protection Legislation to notify you of the information contained in this privacy notice.
Our Data Protection Officer is our point of contact and will be responsible for enquiries in relation to this privacy notice or our treatment of your personal data. Should you require any information regarding how we collect and process your data or have any privacy-related query, you can do so using the contact details listed at Contact us below.
This notice describes how we collect and use personal data about you, in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and any other national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK (“Data Protection Legislation”).
This includes our services in relation to Home Responsibilities Protection (HRP) claims and related State Pension correction / underpayment reviews, National Insurance record or qualifying-year corrections, State Pension award / forecast requests, and linked Pension Credit effects where relevant to your case.
This notice applies to the information that we obtain or when you otherwise interact with our services.
Please read the following carefully to understand our practices regarding your personal data and how we will treat it.
We obtain personal data about you, for example, when:
The information we collect and process about you may include the following:
We may process your personal data for purposes necessary for the performance of our contract with you (for example to assess, prepare, submit and progress your Claim) and to comply with our legal obligations.
This includes acting as your authorised agent or representative with HMRC and the Department for Work and Pensions (DWP) in relation to the Claim. Any State Pension arrears, underpayments, uplifts, deferred lump-sums, one-off payments, back payments and/or linked Pension Credit arrears arising from the Claim are paid by DWP directly to you (not to Evanshaw). Under no circumstances will HMRC make a payment to any agent in relation to an HRP claim.
We may contact you by phone, SMS, or email for purposes related to the administration and verification of your Claim.
We may process your personal data for the purposes of our own legitimate interests provided that those interests do not override any of your own interests, rights and freedoms which require the protection of personal data. This includes processing for business development, statistical and management purposes.
We may process your personal data for certain additional purposes with your consent. For example, we will only send electronic marketing where permitted (e.g., valid consent or soft opt-in), and every message will include a clear opt-out. We do not sell your personal data.
Please note that we may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data.
We may use your personal data in order to:
This includes processing personal data related to the assessment, submission and management of Claims, requesting and reviewing information from HMRC and DWP, reviewing State Pension award/forecast information and DWP outcome or payment information where relevant, calculating success fees using arrears information you provide to us or DWP provides under your authority, issuing invoices, collecting our Success Fee, and keeping appropriate records to support fee calculation, compliance and customer support.
In some circumstances we may anonymise or pseudonymise the personal data so that it can no longer be associated with you, in which case we may use it without further notice to you.
If you refuse to provide us with certain information when requested, we may not be able to perform the contract we have entered into with you. Alternatively, we may be unable to comply with our legal or regulatory obligations.
We may also process your personal data without your knowledge or consent, in accordance with this notice, where we are legally required or permitted to do so.
We will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.
For Claims, this may be until the Claim is fully resolved and any arrears paid, or until your agreement with us is terminated. We retain Advanced Electronic Signature (AES) evidence and audit trails for 6 years from the later of (a) closure of your case, or (b) when any arrears are paid.
When assessing what retention period is appropriate for your personal data, we take into consideration:
Where we need to use your personal data for similar or new purposes, other than for the purpose for which we collected it, we will notify you and communicate the legal basis which allows us to do so before starting any new processing.
We will share your personal data with third parties where we are required by law, where it is necessary to administer the relationship between us or where we have another legitimate interest in doing so.
“Third parties” includes third-party service providers.
The following activities are carried out by third-party service providers: IT and cloud services, professional advisory services, administration services, marketing services, postal services and banking services.
All of our third-party service providers are required to take commercially reasonable and appropriate security measures to protect your personal data.
We only permit our third-party service providers to process your personal data for specified purposes and in accordance with our instructions.
We may share your personal data with other third parties, for example in the context of the possible sale or restructuring of the business.
We may also need to share your personal data with a regulator or to otherwise comply with the law.
We will share your personal data with HMRC and with the DWP for the purpose of submitting and managing your Claim and any associated corrections, adjustments, uplifts or underpayment reviews relating to your National Insurance record, State Pension, HRP, NI credits or qualifying years, State Pension award/forecast information and any linked Pension Credit effect where relevant to your case. Any State Pension arrears, underpayments, uplifts, deferred lump-sums, one-off payments, back payments and/or linked Pension Credit arrears arising from the Claim are paid by DWP directly to you (not to Evanshaw). Under no circumstances will HMRC make a payment to any agent in relation to an HRP claim.
We may ask you for information about any arrears, underpayment, uplift, deferred lump-sum, one-off payment, back payment or linked Pension Credit arrears you receive so we can calculate our Success Fee accurately and issue an invoice.
We may also share identity documents or AML verification data with HMRC or other relevant authorities where legally required to comply with fraud prevention or money laundering regulations.
In limited circumstances, where HMRC or DWP withdraws, removes or refuses to recognise our authority to act on your behalf for the Claim, Evanshaw Ltd may help you instruct an alternative agent so that your Claim can continue without additional cost to you.
Our designated alternative agent is:
Where relevant, the alternative agent may be Arkay Accountancy Services Ltd or another agent authorised to act with HMRC and/or DWP that we agree with you at the time. If such a transfer is proposed, we will always explain who the alternative agent is, how they will be paid, how they will use your personal data, and provide you with their Terms and Conditions and privacy information. You are not obliged to accept any alternative agent and may choose instead to stop your Claim.
If you choose to proceed with an alternative agent, you will be asked to sign a new Conditional Fee Agreement (CFA), DWP Letter of Authority (where required), and HMRC Form 64-8 (where required) with that agent before they can act for you. Any new CFA with the alternative agent will come with its own 14-day cooling-off period, which will be explained to you at the time.
We will not transfer your Claim or share your personal data with the alternative agent for them to act on your behalf without your explicit consent.
If we transfer personal data outside the UK, we will use a valid transfer mechanism under the UK GDPR, such as UK adequacy regulations, the ICO International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and we will complete a transfer risk assessment where required.
We have put in place commercially reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
In addition, we limit access to your personal data to those who need it for business purposes.
They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
We may be required to use your data due to a legal requirement which is placed upon us; this includes our regulatory requirements such as financial record keeping, staff training and monitoring, in addition to complaint handling. We will always inform you if this is the case.
We rely on one or more of the following lawful bases under Article 6 UK GDPR:
We do not normally seek special category data. If limited special category data is provided and is strictly necessary for a Claim, for example health or disability-related information relevant to a caring-responsibility / HRP issue, we will process it only where a valid UK GDPR condition applies.
It is important that the personal data we hold about you is accurate and current. Should your personal information change, please notify us of any changes of which we need to be made aware by contacting us, using the contact details below.
Under certain circumstances, by law you have the right to:
To exercise these rights, contact dpo@evanshaw.co.uk.
Where we rely on your consent to process your data (e.g., for direct marketing), you may withdraw that consent at any time by emailing dpo@evanshaw.co.uk. Once we receive your withdrawal, we will stop processing your data for that purpose, unless we have another lawful basis to do so.
Evanshaw uses cookies to improve your online experience. These may include:
You can manage cookie preferences in your browser. See All About Cookies or our Cookie Policy for more info. Please note that we do not control tracking technologies used by third parties such as Facebook, Google, or Microsoft. These third parties may collect and process personal data according to their own privacy policies. We recommend reviewing their respective privacy notices for more information.
To make a complaint, contact:
Data Protection Officer
Evanshaw Ltd
Suite 105, Highfield House, Cheadle Royal Business Park, Cheadle, England, SK8 3GY
Email: dpo@evanshaw.co.uk
If you remain dissatisfied, you may contact the Information Commissioner’s Office (ICO) at ico.org.uk or call 0303 123 1113.
Any changes we may make to our privacy notice in the future will be located at: https://www.evanshaw.co.uk/privacypolicy
If you have any questions regarding this notice or how we handle your data, please contact us at: dpo@evanshaw.co.uk
