Privacy Policy

  1. WHO WE ARE

Last updated: 28/07/2026 at 9:28am

Medical Claim Direct is a trading name of NJS Law Limited, a company registered in England and Wales, company number 15170704. Registered office: St George Chambers, St Georges Place, Macclesfield, Cheshire, SK11 8BT.

NJS Law Limited is authorised and regulated by the Solicitors Regulation Authority, SRA members 8006550. The professional rules that apply to us are the SRA Standard and Regulations, available at www.sra.org.uk

In this policy, ‘‘we’’, ‘‘us’’ and ‘‘our’’ mean NJS Law Limited trading as Medical Claim Direct. ‘‘You’’ means anyone whose personal data we handle - including website visitors, people who make an enquiry, and our clients.

This policy explains how we collect and use personal data through our website at medicalclaimdirect.co.uk and in connection with the enquiries and services that follow from it. You can contact us about anything in this policy by email at medicaldirectclaims@njslaw.co.uk, or by post at the address above.

2.THE INFORMATION WE COLLECT

The information you give us

  • Identity and contact details - your name, date of birth, postal address, email address and telephone number.

  • Details of your enquiry - the treatment you received, where and when you received it, who provided it, what you believe went wrong, and how it has affected you.

  • Health and medical information - your medical history, symptoms, diagnosis, the treatment complained of, subsequent treatment, your recovery and any ongoing effects. This is central to a claim of this kind rather than incidental to it.

  • Financial information - loss of earnings, treatment costs, care costs, expenses and, where relevant, bank details for the payment of compensation.

  • Correspondence - the content of emails, letters, web forms, text messages and notes of telephone calls between us. Calls may be recorded for training, quality and record keeping purposes; where they are, we will tell you at the start of the call.

  • Marketing preferences - whether you have asked to receive marketing from us, and any preferences you have set.

With your written authority, we obtain and hold copies of your medical records. These may include GP records, hospital records, dental records, imaging, test results, prescribing records and nursing records, from both NHS and private providers, covering the treatment complained of and treatment before and after it.

In some claims we also handle medical records relating to another person - for example, in a birth injury claim we may hold records for both mother and baby, and in claim following a death we may hold the records of the person who died. Where we do, this policy applies to that information too.

Medical records

When you visit our website we may collect your IP address, device and browser type, operating system, and limited information about your visit. Because of the restriction described in section 4.5, we deliberately collect less of this than most websites do. See section 9.

Information we collect automatically

Where relevant to your enquiry or claim, we may receive information about you from NHS trusts, health boards, GP practices, dental practices and private healthcare providers; from independent medical experts instructed on your claim; from NHS Resolution, medical defence organisations and other parties to the claim; from the courts and, in fatal cases, from the coroner; and from other legal professionals previously instructed by you.

Information we receive from others

Information we receive from others

Almost everything we hold about a claim of this kind is special category data - information about health, and sometimes about sex life or reproductive health. The law gives it additional protection and so do we. Access is restricted to the people working on your matter, and as set out in section 4.5 we never use it for marketing or allow it to reach an advertising platform in any form.

3.WHY WE USE YOUR INFORMATION, AND OUR LAWFUL BASIS

What we use it for

Responding to your enquiry and assessing whether we may be able to help

Providing legal services and pursuing your claim

Obtaining, reviewing, and using medical records and expert evidence

Meeting our regulatory, professional and legal obligations, including SRA rules, anti-money-laundering checks, conflict checks and record retention

Managing complaints, disputes and insurance matters

Marketing our services to you

Measuring and improving our website and services

Keeping our systems, premises and information secure

Our lawful basis

Steps taken at your request before entering into a contract; our legitmate interests in responding to enquiries

Performance of our contract with you

Article 9(2)(f) UK GDPR - necessary for the establishment, exercise or defence of legal claims

Compliance with a legal obligation; substantial public interest (DPA 2018, Schedule 1)

Our legitimate interests in defending our position; establishment, exercise or defence of legal claims

Your consent (for cookies and similar technologies); our legitmate interests in understanding what works

Your consent, or our legitimate interests in promoting our services to existing and former clients - see section 4.

Our legitimate interests in protecting our business and the people we hold data about

Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights. You can ask us for details of that assessment at any time, and you have the right to object - see section 8.

4.1 Marketing our own services

4.MARKETING

We may use your name, contact details, and marketing preferences to tell you about our legal services, guides, updates and offers that we think may be relevant to you. We may do this by email, text message, telephone, post and through online and social media advertising.

  • If you are an existing or former client, or you have enquired about our services, we may send you marketing about similar legal services unless you tell us not to. We will always give you a clear opportunity to opt out when we first collect your details, and in every marketing message we send.

  • In all other cases we will only send you electronic marketing where you have given us your consent.

  • We will not make marketing calls to you if your number is registered with the Telephone Preference Service, unless you have told us we may.

You can opt out at any time, at no cost, by using the unsubscribe link in any marketing email, replying STOP to any marketing text, or contacting us using the details in section 1. We will action your request promptly. Opting out of marketing will not affect any device or service we are providing to you.

4.2 Marketing analysis

We look at how our marketing performs so that we can improve it. On this website we do that only at a level that cannot reveal anything about an individual - for example, the total number of visits or the total number of enquiries received. See section 4.5 for what we do not do.

4.3 Marketing our own services

Where we share your personal data with these providers, we do so on strict terms.

To run our marketing we use specialist third-party providers. These may include email and SMS platforms, customer relationships management systems, marketing agencies and online advertising platforms.

  • They act only on our instructions. They are engaged as our processors and may use your data solely for the purposes we specify.

  • They may not use your data for their own purposes or their own commercial benefit. They are contractually prohibited from doing so.

  • They may not sell, rent, licence or otherwise disclose your data, or use it to market their own products and services, or the products and services of anyone else.

  • They must keep your data secure and apply appropriate technical and organisational measures.

  • They must delete or return your data when our instructions end, and may not retain copies except where the law requires it.

We do not sell your personal data. We do not share it with third parties so that those third parties can market to you on their own behalf, and we do not pass your details to other claims companies, claims management companies or law firms for the purpose if them marketing to you.

4.4 Advertising platforms

Some advertising and social media platforms - for example Meta and Google - act as controllers in their own right for certain aspects of the advertising services they provide. Where that is the case, we cannot restrict their use of data to our instructions alone, and their own privacy policies will also apply. We only share data with these platforms where you have consented, we limit what we share to contact identifiers, and the restrictions in section 4.5 apply without exception.

This is the most important commitment in this policy

4.5 Nothing about your health reaches an advertising platform

Every service on this website concerns medical treatment. That means even the fact of which page you have looked at can reveal something about your health. We therefore apply the following restrictions across the whole website, and they apply whether or not you have consented to advertising or analytics cookies:

  • We do not send the address of our services pages to any advertising or analytics provider. Page paths are removed or replaced before any measurement data leave this site.

  • We do not use pages viewed on this site to build advertising audiences, retargeting lists, lookalike audiences or targeting criteria of any kind.

  • We do not combine anything you tell us about your health, condition or treatment with any advertising or analytics data.

  • We do not pass information about your condition, symptoms, diagnosis, treatment or medical records to any advertising platforms, in any form, including hashed or encoded form.

  • We do not use your medical records for any purpose other than your claim and the professional and regulatory obligations that go with it.

Apart from the marketing providers described in section 4, we may share your personal data with:

  • Independent medical experts instructed to give an opinion on your care, and the agencies that arrange those reports.

  • Barristers, costs draftsmen, translators and other professionals instructed in connection with your claim.

  • The healthcare providers you are claiming against and their representatives - which may include NHS trusts and health boards, NHS Resolution, medical defence organisations such as the MDU, MPS or MDDUS, private healthcare providers, and their solicitors and insurers.

  • The courts and tribunals, and in fatal cases the coroner, where this is necessary to pursue your claim.

  • Our own IT, case management, document storage, telephony and cyber-security suppliers, who host or support the systems we use.

  • Our professional indemnity insurers, auditors, accountants, bank and professional advisers.

  • Our regulators and other authorities, including the Solicitors Regulation Authority, the Legal Ombudsman, the Information Commissioner’s Office, HM Revenue & Customs, the police and law enforcement, where we are required or permitted to do so by law.

  • Litigation funders and providers of after-the-event insurance, where this is relevant to how your claim is funded and we have discussed it with you.

  • A purchaser or successor, if our business or part of it is transferred, in which case your data would remain protected by this policy or an equivalent one.

Sharing your medical records with the other side is a normal and necessary part of bringing a claim, and we will explain what is being disclosed and why before it happens. Everything we hold about our clients is also protected by our professional duty of confidentiality as solicitors. We will not disclose confidential client information to anyone outside out firm except where you have consented, where it is necessary to act for you, or where we are required to do so by law or by our regulator.

Some of our suppliers store or process data outside the United Kingdom. Where they do, we ensure appropriate safeguards are in place - either the country has been formally recognised by the UK government as providing adequate protection, or we put in place the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional measures needed.

You can request a copy of the safeguards we use by contacting us using the details in section 1.

We keep personal data only for as long as we need it.

7.HOW LONG WE KEEP YOUR INFORMATION

Our retention periods are set by reference to the requirements of the Solicitors Regulation Authority, the limitation periods that apply to claims, the requirements of our professional indemnity insurers, and our legal, accounting and tax obligations. Files relating to children and to people who lack capacity to conduct their own claim are held for considerably longer, because the time limit for bringing a claim does not begin to run in the usual way.

We keep a record of your marketing preferences and any opt-out for as long as we hold your details, so that we can continue to honour your choices.

When we no longer need your personal data, we delete it securely or anonymise it so that you can no longer be identified. Medical records are destroyed securely.

You have a number of legal rights over the personal information held by us:

  • The right to access your personal information;

  • The right to correct or update any personal information

  • The right to object to further processing. You have an absolute right to object to direct marketing at any time, and if you do we will stop;

  • The right to restrict the processing of your personal information;

  • The right to ask us to delete your personal information (please note we will only be able to accommodate this request where it no longer necessary for the purpose(s) for which it was provided or where we no longer have a lawful basis to process your personal information);

  • The right to receive the personal information we hold about you in a portable format, however this need only be provided in limited circumstances where the processing has been done by automated means; and

  • The right to withdraw your consent at any time, where we rely on your consent. This will not affect anything we did before you withdrew it.

You can contact us should you wish to have access to this information or to update or complete any of our records pertaining to your personal information.

Please note that a request to correct your medical records should be made to the healthcare provider who created them, as we hold copies rather than the originals. We can tell you who to approach. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would ask that you contact us first so that we have the opportunity to put things right.

Our website uses cookies and similar technologies. Cookies that are strictly necessary for the site to work are always active. All other cookies are only set where you have give consent through our cookie banner.

Because of the restriction in section 4.5, we use fewer cookies on this website than most sites do, and those we do use operate in a limited form.

You can change or withdraw your cookie consent at any time using the cookie settings link on our website. Full details are set out in our [Cookie Policy].

We may update this policy from time to time. The date at the top shows when it was last changed. Where changes are significant, we will bring them to your attention.

5.WHO ELSE WE SHARE YOUR INFORMATION WITH

6.SENDING INFORMATION OUTSIDE THE UK

8.YOUR RIGHTS

9.COOKIES

10.CHANGES TO THIS POLICY