Who we are
www.marriottdatabreachclaim.co.uk (the “Website”) is maintained and operated by Case Pilots Limited. Data entered via the ‘Register’ page will be stored by Case Pilots Limited, who are registered as a data controller with the Information Commissioner’s Office under registration number ZA334568.
Case Pilots Limited are instructed by law firm Hausfeld & Co LLP, on behalf of Martin Bryant (who is sometimes referred to on the Website as the Class Representative).
Hausfeld & Co LLP is a New York limited liability partnership authorised and regulated by the Solicitors Regulation Authority in its practice as solicitor in England & Wales under number 513826. Hausfeld & Co LLP is registered as a data controller with the Information Commissioner’s Office under registration number Z1953172.
We take a proactive approach to user privacy and to ensure that the necessary steps are taken to comply with all national laws and best practice requirements for user privacy.
The information we collect
Personal data, or personal information, means any information about an individual from which that person can be identified (“Personal Information”). It does not include data in which identity has been removed (anonymous data).
You are encouraged to visit the Website and engage with its published content. If you register, you will be asked to provide Personal Information including your names, telephone number and email address and any information which you would share with us in the course of the Claim.
You have the right to obtain from us access to the Personal Information that we hold on you, together with information as to whether Personal Information concerning you is being processed by us, what is being processed and where it is being processed. A summary of this information is also below:
Where we store your personal information
All information you provide to us is stored in the Microsoft Azure UK South environment. It may be necessary to securely transfer this information to third party data processors within the European Economic Area to perform certain functions. We have contracts in place with our data processors and regularly audit them for compliance with national data privacy laws. This means that they cannot do anything with your personal information unless we have instructed them to do so.
By registering your interest, you agree to this transfer, storing and processing. We will take all necessary technical and organisational steps to ensure that the processing of your personal information is performed in accordance with the Data Protection Act 2018 and The General Data Protection Regulation (EU) 2016/679 (“GDPR”).
How we use your information
The Personal Information you provide to us will be used for the limited purposes of:
We have a legitimate interest in sending you necessary and proportionate emails as a means of communicating important information and updates about the Claim.
We do not collect more Personal Information than we need in order to fulfil our stated purpose and will not retain Personal Information for longer than is necessary.
We process your data on the basis that we have obtained your consent to do so. You may withdraw this consent at any time.
We will not share any of the information you provide during this process with any third parties for marketing purposes or store any of your information outside of the European Economic Area.
The information you provide will be held securely by us and/or our data processors, whether the information is in electronic or physical format.
Security of data
Any Personal Information you enter on our site is encrypted by the use of security systems with encryption and firewalls, provided on a secure socket layer (SSL), to protect the confidentiality and integrity of your information from unauthorised access and disclosure.
Unfortunately, the transmission of information via the internet is not completely secure. We will take all reasonable care to prevent any unauthorised access to and use of your Personal Information. Although we will do our best to protect your Personal Information, we cannot guarantee the security of the data transmitted to our Website; and transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
We strive to meet the highest standards when collecting and using Personal Information. For this reason, we take any complaints we receive about this very seriously. We encourage users to contact us if they have any reason to believe that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.
To contact us, please email firstname.lastname@example.org
Retention of data
We will retain any data we collect from you in relation to the Claim for a period of six years after the final conclusion of the matter. After this period of time we will either permanently destroy any data we hold or ensure that it is placed outside of daily use by any third party.
Links to other sites
Although we look to include only quality, safe and relevant external links, users are advised to adopt a policy of caution before clicking any external web links. We cannot guarantee or verify the contents of any externally linked website, despite our best efforts. You should therefore note that you click on external links at your own risk and we cannot be held liable for any damages or implications caused by visiting any external links mentioned.
This privacy notice was drafted with the intention of being concise and clear. It does not provide exhaustive detail on all aspects of our collection and use of Personal Information. We are happy to provide any additional information or explanation requested.
To contact us, please email email@example.com
Under GDPR, you have rights as an individual to access your data which you can exercise in relation to the information we hold about you. You can read more about these rights at https://ico.org.uk/your-data-matters.
We try to be as open as it can be in terms of giving people access to their Personal Information. Individuals can find out if we hold any Personal Information by making a ‘subject access request’ under GDPR. You have the right to request that we amend or erase your personal information or restrict processing thereof. If you wish to make a complaint about the way we have processed your Personal Information, you can contact the UK’s Information Commissioner’s Office.
For more information about your data protection rights, please visit www.ico.org.uk.