How Kensbridge Handles Your Personal Data
This privacy policy explains how Kensbridge collects, uses, shares and protects your personal information when you use our services in connection with HRP, National Insurance, State Pension and related claims or enquiries.
Version: v2.0 (August 2026)
Key Information
- Kensbridge Ltd acts as a data controller.
- Your data may be used to assess, prepare, submit and manage your Claim.
- We may act as your authorised agent or representative with HMRC and DWP.
- Payments arising from State Pension claims are paid by DWP directly to you.
- We do not sell your personal data.
- You can contact our Data Protection Officer at dpo@kensbridge.co.
About Us
“We,” “Us,” and “Our” refer to Kensbridge Ltd, located at: Houldsworth Business & Arts Centre, Houldsworth Street, Stockport, England, SK5 6DA .
Company Number: 16583492
HMRC Agent Services Ref: WARN0057394
PAYE Agent Ref: IA8537
Self-Assessment Agent Ref: 3150RW
For the purpose of the Data Protection Legislation and this notice, we are the data controller. We are responsible for deciding how we hold and use personal data about you and for providing you with the information contained in this privacy notice.
Our Data Protection Officer is our point of contact for enquiries about this privacy notice or our treatment of your personal data. You can contact the Data Protection Officer using the details at the end of this notice.
The Purpose and Scope of This Notice
This notice describes how we collect and use personal data about you in accordance with the UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025 and other applicable UK data protection legislation, as amended or updated from time to time (“Data Protection Legislation”).
This includes our services in connection with investigating, preparing and managing claims or enquiries relating to Home Responsibilities Protection (HRP) and related State Pension correction or underpayment reviews, National Insurance (NI) credits or qualifying-year corrections affecting State Pension, widow's/widower's/surviving spouse or inherited State Pension entitlement, marriage-based State Pension uplift, deferred or delayed State Pension entitlement, and any linked Pension Credit effect where relevant to your case (together, the “Claim”).
This notice applies to information we obtain when you use or otherwise interact with our services. Please read it carefully to understand our practices regarding your personal data and how we will treat it.
How We Get the Personal Information and Why We Have It
-
You register a Claim with us. This includes providing information to assess your circumstances and to prepare the relevant claim or authority documents where needed, for example our Conditional Fee Agreement (CFA), HMRC Form 64-8, any National Insurance Statement of Account Request & Consent, and any DWP Letter of Authority or information request where used.
Where we ask you to sign a document electronically, you will be shown the final completed version before signing. We retain the signed document and associated electronic signing or submission records available from the signing platform.
-
You engage us to provide our services and during the provision of those services.
-
You contact us by email, telephone, SMS, post, social media or another communication channel, for example when you have a query about our services or your Claim.
-
We receive information from third parties and/or publicly available resources, for example HMRC, DWP, identity verification providers or other sources relevant to your Claim.
The Type of Personal Information We Collect and Process
The information we collect and process about you may include:
- Your personal details, such as your name, address, contact details, National Insurance number, date of birth, employment-related information and State Pension information.
- Information relevant to your Claim, which may include Child Benefit or caring history, working history, NI credits or qualifying years, marital or civil-partnership status, spouse or late-spouse details, widow/widower/surviving-spouse status, State Pension award or forecast information, deferred or delayed State Pension information, and linked Pension Credit effects where relevant.
- Details of contact we have had with you in relation to the provision, or proposed provision, of our services.
- Details of services you have received from us.
- Information about complaints and enquiries you make to us.
- Information from research or customer surveys where you choose to participate.
- Information received from HMRC, DWP, identity verification providers or other relevant sources.
- Documents used to support or manage your Claim, which may include CF411 forms, HMRC Form 64-8, NI statements, Statement of Account requests and responses, DWP Letters of Authority, DWP pension information requests, State Pension award letters, pension forecasts or statements, calculation breakdowns, formal decision or outcome notices, arrears breakdowns, payment information and revised pension-rate information.
- If your Claim is successful, details of any arrears, underpayment, uplift, deferred lump-sum, one-off payment, back payment or linked Pension Credit arrears you receive, and where available a copy of the relevant DWP award, outcome or arrears breakdown, so we can calculate our Success Fee accurately and issue an invoice.
- If HMRC later issues PAYE correspondence relating to arrears, for example a P800, information you choose to provide so we can help reconcile any tax adjustment relevant to the payment.
- Proof of identity and proof of address, and related verification information, where required for identity, fraud-prevention or compliance checks.
- Information about payment support, payment methods and payment plans where needed to manage invoicing or customer support.
How We Use the Personal Data We Hold About You
We may process your personal data where necessary to perform our contract with you, to assess, prepare, submit and progress your Claim, and to comply with our legal obligations.
This includes acting as your authorised agent or representative with HMRC and/or the Department for Work and Pensions (DWP), where applicable to your Claim.
Any State Pension arrears, underpayments, uplifts, deferred lump-sums, one-off payments, back payments and/or linked Pension Credit arrears arising from the Claim are paid by DWP directly to you, not to Kensbridge. Under no circumstances will HMRC make a payment to any agent in relation to an HRP claim.
We may contact you by phone, SMS, email, post or other agreed communication channels for purposes related to the administration and verification of your Claim, documents, updates and fee or invoice matters.
We may process personal data for our legitimate interests where those interests are not overridden by your rights and freedoms. This can include case management, service administration, fraud prevention, business reporting and improving our services.
We may process personal data for additional purposes with your consent where consent is required. We will only send electronic marketing where permitted by law, and you can opt out at any time.
We do not sell your personal data.
We may rely on more than one lawful basis depending on the specific purpose for which we are using your information.
Situations in Which We Will Use Your Personal Data
We may use your personal data in order to:
- Carry out our obligations arising from agreements entered into between you and us.
- Assess, prepare, submit and manage your Claim and request or review relevant information from HMRC and DWP.
- Review State Pension award or forecast information, NI records, DWP decisions and outcome or payment information where relevant to your Claim.
- Calculate our Success Fee using arrears information you provide or information DWP provides under your authority, issue invoices and collect any Success Fee due.
- Provide you with information about our services that you request from us.
- Seek your thoughts and opinions on the services we provide where appropriate.
- Notify you about changes to our services, documents or processes.
- Keep appropriate records to support Claim management, fee calculation, compliance, complaints handling and customer support.
In some circumstances we may anonymise or pseudonymise personal data so that it can no longer be associated with you, in which case we may use it without further notice to you.
If you refuse to provide certain information when requested, we may not be able to perform the contract we have entered into with you or we may be unable to comply with legal or regulatory obligations.
We may also process personal data without your knowledge or consent where we are legally required or permitted to do so.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, taking account of legal, regulatory, contractual and operational requirements.
For Claims, this may be until the Claim is fully resolved and any arrears paid, or until your agreement with us is terminated.
We retain signed documents and associated electronic signing or submission records available from the signing platform for 6 years from the later of:
- The date your Claim is concluded or closed; or
- The date any Arrears are paid.
This is unless a longer period is required by law or for regulatory or compliance reasons.
When deciding how long to retain information, we take into account:
- The requirements of our business and the services provided.
- Any statutory, legal, regulatory, tax or accounting obligations.
- The purposes for which we originally collected the personal data.
- The lawful grounds on which we rely for processing.
- The nature, amount and sensitivity of the personal data.
- The potential risk of harm from unauthorised use or disclosure.
- Whether the purpose of the processing could reasonably be fulfilled by other means.
Change of Purpose
Where we need to use your personal data for a new purpose that is not compatible with the purpose for which it was collected, we will provide appropriate information about the new purpose and the lawful basis for that processing before it begins, unless the law permits or requires otherwise.
Data Sharing
Why might you share my personal data with third parties?
We may share personal data with third parties where required by law, where necessary to administer our relationship with you or your Claim, where necessary to provide our services, or where we have another lawful basis to do so.
Which third-party service providers process my personal data?
Third-party service providers may include IT and cloud providers, identity verification providers, professional advisers, administration providers, postal providers, payment or banking service providers, and communications service providers where used.
We require service providers to use appropriate security measures and to process personal data only for specified purposes and in accordance with our instructions.
What about other third parties?
We may share personal data with other third parties where necessary in connection with a possible sale, restructuring or reorganisation of the business, or with regulators, public authorities or other bodies where required by law.
We will share relevant personal data with HMRC and DWP for the purpose of submitting and managing your Claim and associated corrections, adjustments, uplifts or underpayment reviews relating to your National Insurance record, State Pension, HRP, NI credits or qualifying years, widow/widower/surviving-spouse or inherited State Pension entitlement, marriage-based State Pension uplift, deferred or delayed State Pension entitlement, State Pension award or forecast information and any linked Pension Credit effect where relevant to your case.
Any State Pension arrears, underpayments, uplifts, deferred lump-sums, one-off payments, back payments and/or linked Pension Credit arrears arising from the Claim are paid by DWP directly to you, not to Kensbridge.
We may ask you for information about a payment you receive, or use payment information DWP provides under your authority, so we can calculate our Success Fee accurately and issue an invoice.
We may also share identity or verification information with HMRC or other relevant authorities where legally required for fraud-prevention, compliance or related purposes.
Alternative Agent
In limited circumstances, where HMRC or DWP withdraws, removes or refuses to recognise our authority to act on your behalf for the Claim, Kensbridge may help you instruct an alternative agent so that your Claim can continue.
If an alternative agent is proposed, we will explain who the agent is, how the arrangement will work, how the agent will use your personal data, and provide you with the relevant terms and privacy information.
You are not obliged to accept an alternative agent and may choose instead to stop your Claim.
If you choose to proceed, the alternative agent must obtain its own proper authority before acting, including a fresh HMRC Form 64-8 where HMRC authority is required and/or a fresh DWP authority where applicable.
Any new Conditional Fee Agreement will have its own 14-day cooling-off period.
We will not transfer your Claim to an alternative agent, or share your personal data with an alternative agent for them to act on your behalf, without your explicit consent.
International Transfers
If we make a restricted transfer of personal data outside the UK, we will use a lawful transfer mechanism and appropriate safeguards where required under UK data protection law.
These may include UK adequacy regulations, the ICO International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or another permitted safeguard, together with any required transfer risk assessment.
Data Security
We use commercially reasonable and appropriate technical and organisational measures designed to prevent personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
We limit access to personal data to people and service providers who need it for legitimate business purposes. They are required to process personal data only as authorised and are subject to appropriate confidentiality obligations.
We have procedures to deal with suspected personal data breaches and will notify affected individuals and the Information Commissioner where the law requires us to do so.
Legal Requirements
We may need to use or disclose personal data to comply with legal or regulatory requirements, including financial and accounting record keeping, fraud prevention, complaint handling and other compliance obligations.
What Is Our Legal Basis for Processing?
Depending on the purpose, we may rely on one or more of the following lawful bases under Article 6 UK GDPR:
- Contract – where processing is necessary to assess, submit and manage your Claim and administer our contractual relationship with you, including corresponding with HMRC/DWP, issuing invoices and collecting our Success Fee where due.
- Legal obligation – where processing is necessary to comply with a legal requirement, for example tax, accounting, fraud-prevention or data-protection obligations.
- Legitimate interests – for example case management, communications with HMRC/DWP, fraud prevention, service administration and internal reporting, provided those interests are not overridden by your rights and freedoms.
- Consent – where consent is required, for example certain electronic marketing or another processing activity for which we specifically ask for consent.
We do not normally seek special category data. If limited special category data is provided and is strictly necessary for a Claim, for example health or disability-related information relevant to a caring-responsibility or HRP issue, we will identify an applicable Article 6 lawful basis and an appropriate condition under Article 9 UK GDPR before processing it.
Rights of Access, Correction, Erasure and Restriction
Your duty to inform us of changes
It is important that the personal data we hold about you is accurate and current. Please tell us if relevant personal information changes while we are handling your Claim.
Your rights in connection with personal data
Depending on the circumstances, you may have the right to:
- Request access to your personal data.
- Request correction of inaccurate or incomplete personal data.
- Request erasure of personal data in certain circumstances.
- Object to processing or request restriction of processing in certain circumstances.
- Request the transfer of personal data to you or another organisation where the right to data portability applies.
- Withdraw consent at any time where we rely on consent.
To exercise your rights, contact dpo@kensbridge.co.
Right to Withdraw Consent
Where we rely on consent to process your personal data, you may withdraw that consent at any time by emailing dpo@kensbridge.co.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn, and we may continue processing where another lawful basis applies.
Cookies
Kensbridge may use cookies and similar technologies to improve your online experience. These may include functionality cookies, analytics cookies and third-party marketing cookies where used.
You can manage cookie preferences through the website controls or your browser settings. Third-party providers may process information under their own privacy notices.
Complaints
If you have a concern or complaint about how we use your personal data, please contact our Data Protection Officer at dpo@kensbridge.co.
We maintain a data-protection complaints process and will acknowledge a data-protection complaint within 30 days and respond without undue delay.
If you remain dissatisfied, you have the right to complain to the Information Commissioner's Office (ICO). Information about making a complaint is available from the ICO website , or you can call 0303 123 1113.
Changes to This Notice
Any changes we make to this privacy notice will be published at https://www.kensbridge.co/privacypolicy .
Where appropriate, we may also notify you of material changes by another reasonable method.
Contact Us
If you have any questions regarding this notice or how we handle your personal data, please contact:
Data Protection Officer
Kensbridge Ltd
Houldsworth Business & Arts Centre
Houldsworth Street
Stockport
England, SK5 6DA
Email:
dpo@kensbridge.co
General email:
info@kensbridge.co
Telephone:
0161 241 6339