Injury Law Specialists

Privacy Notice

This notice explains what personal information we collect through this website, why we collect it, who we share it with, how long we keep it and what rights you have. It is given under the UK GDPR and the Data Protection Act 2018.

Last updated: 11 October 2026

Information about your health is special category data

Because an enquiry about a personal injury claim will usually describe your injuries, the information you give us may include data concerning your health. Under UK data protection law this is "special category" personal data and is given additional protection. We only ask for what we need to assess your enquiry, and we handle it as sensitive information throughout.

Who is responsible for your information

Injury Law Specialists is a marketing and advertising platform and is not a law firm. The legal services advertised on this website are provided by MB Solicitors, a trading name of MB Legal Solicitors Ltd, which is authorised and regulated by the Solicitors Regulation Authority under SRA ID 8000764. MB Legal Solicitors Ltd is the data controller responsible for the personal information described in this notice.

Data controller
MB Legal Solicitors Ltd
IAG entity
Injury Law Specialists
Registered office
Unit 16, Titan Court, Laporte Way, Luton, England, LU4 8EF
Company number
12281731
SRA ID
8000764
Data protection queries
[DATA PROTECTION EMAIL]

1. What information we collect

We collect the information you choose to give us when you complete the free assessment form on this website or contact us by telephone, email or WhatsApp. From the assessment form, that is:

  • your full name;
  • your telephone number;
  • your email address, if you choose to provide it;
  • the type of accident you have selected;
  • the date the accident happened;
  • a description of the injury you suffered — which may include health information;
  • any explanation you give of why you believe someone else may have been responsible.

We also collect limited technical information automatically when you visit the website, such as your IP address, browser type and the pages you view, as explained in clause 6.

We do not ask for, and do not want to receive, your National Insurance number, bank or payment card details, passwords or one-time security codes through this website. Please do not include them in an enquiry.

2. Why we use it, and our lawful bases

Under the UK GDPR we must have a lawful basis for processing your personal information. We rely on the following:

Legal claims — Article 9(2)(f)

Where your enquiry concerns a potential legal claim, we process the information, including health information, for the establishment, exercise or defence of legal claims. This is the basis on which we handle injury and medical details.

Consent — UK GDPR Article 6(1)(a) and Article 9(2)(a)

Where you explicitly agree to us considering your enquiry, and where you tick any optional marketing box, we rely on your consent. You may withdraw consent at any time.

Legitimate interests — Article 6(1)(f)

For responding to enquiries, keeping records of how enquiries are handled, preventing misuse of our forms and improving our services. We balance these interests against your rights and expectations.

Legal obligation — Article 6(1)(c)

For complying with our legal, regulatory and professional obligations as a regulated firm, including anti-money laundering, complaints handling and record-keeping requirements.

You are not obliged to provide the information we ask for. If you do not provide it, however, we may not be able to assess your enquiry or respond to you.

3. Who we share it with

We share personal information only where it is necessary and only with parties who are subject to appropriate confidentiality and data protection obligations. This may include:

  • solicitors and fee earners at MB Legal Solicitors Ltd who assess and handle enquiries and claims;
  • the providers of the enquiry form and website infrastructure that transmit and store submissions on our behalf;
  • medical experts, medico-legal agencies and rehabilitation providers, where a claim proceeds and medical evidence is required;
  • the defendant, their insurers, their solicitors and the courts or tribunals, as part of pursuing or defending a claim;
  • professional advisers, insurers and auditors, where necessary for the running of the firm;
  • regulators, law enforcement and other authorities, where we are required or permitted by law to disclose.

We do not sell your personal information. We do not share it with third parties for their own marketing purposes. Enquiry details — including the description of your accident and injury — are not passed to advertising or analytics platforms at any time.

Where enquiry details are shared with solicitors in order to assess and progress a matter, that transfer takes place as part of providing the legal services you have asked about, and the recipient is bound by professional duties of confidentiality.

4. How long we keep it

We keep personal information only for as long as necessary for the purposes described in this notice, and in line with our legal and regulatory obligations. In broad terms:

  • Enquiries that do not result in instructions are retained for a limited period so that we can demonstrate how the enquiry was handled, and are then securely deleted;
  • Where a claim is accepted and a solicitor-client relationship is formed, records are retained in accordance with the firm's file retention policy and the requirements of the SRA and its insurers;
  • Records relevant to tax, accounting, anti-money laundering and complaints are kept for the periods required by law.

Specific retention periods are set out in the firm's retention policy and will be confirmed at the point you instruct us. [Retention periods to be confirmed by the firm's compliance officer — commonly six years for unsuccessful enquiries and longer for completed matters.]

5. Your rights

Under the UK GDPR you have the following rights in relation to your personal information. Some are subject to conditions and exemptions — for example, we may not be able to delete information that we must keep for a legal claim or a regulatory obligation, and legal professional privilege may restrict access to material on a live file.

Access

Request a copy of the personal information we hold about you.

Rectification

Ask us to correct information that is inaccurate or incomplete.

Erasure

Ask us to delete information where there is no good reason for us to keep it.

Restriction

Ask us to limit how we use your information while a concern is resolved.

Objection

Object to processing based on legitimate interests, including in some cases profiling.

Portability

Receive information you provided in a structured, commonly used, machine-readable format.

Withdraw consent

Withdraw consent at any time where consent is the basis for processing.

Complain

Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, contact us using the details in clause 8. We will respond within one month, although we may extend that period where a request is complex. Exercising your rights is free of charge in most circumstances.

6. Cookies and website analytics

This website uses cookies and similar technologies. Cookies that are strictly necessary for the website to function — for example, to deliver the site securely and to protect the enquiry form against spam and automated abuse — are used without consent because the website cannot operate without them.

Any non-essential cookies, such as analytics that help us understand how visitors use the website, are not set until you have given consent where consent is required. You can accept or reject non-essential cookies, and change your choice at any time.

We do not pass the content of enquiry forms — your name, contact details, description of the accident, injury details or anything else you write — to analytics or advertising platforms as event data. Full details of the cookies used and how to manage them are set out in our Cookie Notice.

7. How we keep it secure

We take the security of your information seriously, particularly given that it may include health information. Information submitted through our enquiry form is transmitted over an encrypted connection and is protected by anti-spam measures. Access to enquiry data is restricted to those who need it to assess and respond to your enquiry.

We minimise what we collect, avoid unnecessary third-party scripts on form data, and keep enquiry content out of analytics events. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Please avoid sending highly sensitive information by email or through the website form where it is not necessary to do so, and never send us passwords, bank details or security codes.

Where we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO and, where required, inform you without undue delay.

8. How to contact us, and how to complain

If you have any question about this notice, or wish to exercise any of your rights, please contact us:

  • Data protection enquiries[DATA PROTECTION EMAIL]
  • PostMB Legal Solicitors Ltd, Unit 16, Titan Court, Laporte Way, Luton, England, LU4 8EF
  • Telephone01582 415836

If you are unhappy with how we have handled your information, you have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator, at ico.org.uk or on 0303 123 1113. We would appreciate the opportunity to address your concern first.

If your complaint concerns the legal service you received, rather than how your information has been handled, please see our Complaints Procedure.

9. Transfers outside the UK

Your information is generally stored and processed within the United Kingdom. Where a service provider processes information outside the UK — for example, a cloud hosting provider with servers elsewhere — we take steps to ensure the transfer is lawful, using an adequacy regulation or the International Data Transfer Agreement or Addendum approved under UK law, together with any additional safeguards required.

[To be confirmed by the firm: list any named processors located outside the UK and the specific transfer mechanism relied upon, so this clause reflects the firm's actual arrangements.]

10. Changes to this notice

We may update this notice from time to time to reflect changes in the law, our practices or the services we provide. The current version is always published on this page, with the "last updated" date shown at the top. Where a change is material, we will take reasonable steps to bring it to your attention.

Questions about how we handle your information?

Our team can explain how your information is used when you make an enquiry, before you decide whether to provide anything.