Privacy Policy

1. Who We Are

Harrison Associates is the trading name of Jan Harrison Limited, registered in England and Wales.

Registered office: Speed Medical House, Matrix Park, Chorley, Lancashire, PR7 7NA
Email: info@harrison.associates

Harrison Associates acts as a data controller in relation to personal data processed as part of its services.
In limited circumstances, Harrison Associates may act as a data processor on behalf of an instructing party, in which case processing is carried out strictly in accordance with their instructions.

2. Purpose of This Notice

This notice explains how personal data is collected, used, shared, stored, and protected in connection with:

• Case Management services
• Expert Witness services
• Professional and business operations
• Website and enquiry handling

Due to the nature of our work, this includes processing of sensitive health data and information connected to legal proceedings.

3. The Personal Data We Collect

Website Users

• Name, email address, telephone number
• Information submitted through enquiries
• Technical data (e.g. IP address, browser type, cookie preferences where applicable)

Clients, Patients and Injured Parties

• Name, date of birth, contact details
• Case and claim information
• Health and medical data, including records and reports
• Rehabilitation, care and treatment information
• Case notes and correspondence

Solicitors, Insurers and Professional Contacts

• Names and business contact details
• Instructions, case references and correspondence
• Billing and administrative information

Associates, Experts and Suppliers

• Professional details, qualifications and registrations
• CVs and work history
• Availability and service delivery information
• Contractual and payment information

4. Where Personal Data Comes From

Personal data may be obtained:

• Directly from individuals
• From solicitors, insurers and instructing parties
• From healthcare professionals and treatment providers
• From experts and multidisciplinary teams
• From publicly available professional sources
• Through website, email, or telephone contact

5. Special Category Data

We process special category data, including health information, where necessary for:

• Article 9(2)(h) – provision of health or social care
• Article 9(2)(f) – establishment, exercise or defence of legal claims

This data is handled with strict access controls and confidentiality safeguards.

6. Lawful Bases for Processing

We process personal data under the following lawful bases, depending on context:

• Article 6(1)(b) – performance of a contract or steps prior to contract
• Article 6(1)(c) – compliance with legal obligations
• Article 6(1)(f) – legitimate interests (service delivery and operations)

Expert Witness Activities

Where acting as an expert witness, processing is additionally grounded in:

• Legal obligations and duties to the Court under Civil Procedure Rules Part 35
• The establishment, exercise or defence of legal claims

Consent is not relied upon as the primary lawful basis in medico-legal service delivery.

7. How Personal Data Is Used

Personal data is used to:

• Deliver case management, rehabilitation, and expert witness services
• Prepare reports, including Immediate Needs Assessments and expert reports
• Coordinate care with healthcare professionals and multidisciplinary teams
• Communicate with solicitors, insurers, deputies, and stakeholders
• Maintain accurate clinical and operational records
• Manage professional relationships and service delivery
• Handle queries, complaints, and disputes
• Meet legal, regulatory, and professional obligations
• Maintain system security and integrity

8. Data Sharing

Personal data may be shared where necessary with:

• Solicitors, insurers, and instructing parties
• Courts, tribunals, and legal representatives
• Healthcare professionals and treatment providers
• Expert witnesses and professional consultants
• Associates and contractors engaged in service delivery
• IT providers and secure hosting services
• Auditors, regulators, and professional advisers

All third parties are required to process data in accordance with UK data protection law and appropriate contractual safeguards.

We do not sell personal data.

9. International Transfers

We seek to keep personal data within the United Kingdom.

If data is transferred outside the UK, appropriate safeguards will be implemented in accordance with UK GDPR.

10. Data Retention

Personal data is retained for as long as necessary, including:

• Duration of engagement or legal proceedings
• Regulatory and professional record-keeping requirements
• Applicable limitation periods for legal claims

Retention periods in medico-legal contexts will typically exceed six years where required.

Data is securely deleted or anonymised when no longer required.

11. Data Security

We implement appropriate technical and organisational measures, including:

• Role-based access controls
• Secure and encrypted systems
• Confidentiality obligations
• Controlled access to sensitive data
• Governance policies and procedures

12. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure (where applicable)
• Restrict processing
• Object to processing based on legitimate interests
• Data portability (where applicable)

These rights may be limited where processing is required for:

• Legal proceedings
• Compliance with legal obligations
• Establishment or defence of legal claims

To exercise your rights, contact: info@harrison.associates

You have the right to lodge a complaint with the Information Commissioner’s Office.

13. Requirement to Provide Information

Where personal data is required to progress a case or service, failure to provide relevant information may prevent Harrison Associates from delivering services effectively.

14. Automated Decision-Making

Harrison Associates does not carry out solely automated decision-making that produces legal or similarly significant effects.

15. Cookies and Website Use

The website uses cookies to support functionality, security, and user experience.

Non-essential cookies are used only with consent and can be managed via cookie settings.

16. Changes to This Notice

This notice may be updated from time to time. The latest version will always be available on the website.

17. Complaints

If you have concerns about how personal data is handled, contact us in the first instance.

You may also complain to the Information Commissioner’s Office.

Last updated: April 2026