Privacy Policy
Last Updated: August 2026
Introduction
This Privacy Policy explains how grand-wave collects, uses, stores, and protects your personal information when you use our website or engage our services.
We are committed to protecting your privacy and handling your data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information We Collect
We collect and process the following types of personal information:
- Contact details including name, email address, and postal address
- Information about your benefits or pension circumstances that you provide during consultations
- Financial information relevant to your claims
- Correspondence between you and our consultants
- Technical data including IP address, browser type, and device information when you visit our website
How We Use Your Information
We use your personal data for the following purposes:
- Providing legal consultation services for benefits and pension claims
- Communicating with you about your case
- Maintaining records of our professional advice and services
- Complying with legal and regulatory obligations
- Improving our website and services
- Responding to your inquiries and requests
Legal Basis for Processing
We process your personal data based on:
- Contract performance: to provide the services you have requested
- Legitimate interests: to operate our business effectively and improve our services
- Legal obligation: to comply with regulatory requirements and legal processes
- Consent: where you have given explicit permission for specific processing activities
Data Sharing and Disclosure
We may share your information with:
- Government departments and agencies when necessary for your benefits or pension claims
- Professional advisors including legal counsel and auditors
- Service providers who assist us in delivering our services, under strict confidentiality agreements
- Law enforcement or regulatory authorities when legally required
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, typically for the duration of our professional relationship plus six years following case closure, in accordance with legal and regulatory requirements.
After this period, we will securely delete or anonymize your information unless we are legally required to retain it for longer.
Your Rights
Under data protection law, you have the following rights:
- Right to access: request copies of your personal data
- Right to rectification: request correction of inaccurate information
- Right to erasure: request deletion of your data in certain circumstances
- Right to restrict processing: request limitation of how we use your data
- Right to data portability: receive your data in a structured, commonly used format
- Right to object: object to processing based on legitimate interests
- Right to withdraw consent: where processing is based on consent
To exercise any of these rights, please contact us at [email protected].
Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission, secure storage systems, and restricted access to personal information.
Cookies and Tracking
Our website uses cookies to enhance your browsing experience. For detailed information about our use of cookies, please refer to our Cookies Policy.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a revised date.
Contact Information
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
grand-wave
142 Kingsland Road
London, E2 8DY
United Kingdom
Email: [email protected]
Supervisory Authority
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.