Privacy Policy
Epiq Systems, Ltd and its related entities (“Epiq”) are committed to the protection of your personal information. This privacy policy describes how the personal information you provide by mail or in connection with the website on which this privacy policy is posted or linked, and how this information may be used, shared and safeguarded.
Scope Of Policy
Epiq, as a data processor acting on behalf of and under the direction of our client, Walter Merricks CBE, may collect, use, and disclose personal information related to claims (the “claims data”), in order to provide claims management services on behalf of Walter Merricks CBE. This privacy policy has been designed to comply with General Data Protection Regulation (GDPR) and other applicable privacy laws relating to the protection of personal information (collectively, “privacy legislation”). By visiting this website or otherwise providing us with personal information, you are consenting to the collection, use and disclosure of your personal information as described in this privacy policy.
Changes to the Privacy Policy
This privacy policy may be modified or supplemented at any time. If changes are made, notifications will be posted with the updated policy and the “Last Updated” date will be revised. Where legally required, we will provide advance notice, including by email.
Claims Data Collected
During the normal course of business, claims data and other “personal information” (as defined under privacy legislation) may be collected from claimants, clients, and third parties. The claims data collected on behalf of clients may include, but is not limited to:
- identity information, such as name, address, email address, and other contact information for claimants and other related parties;
- banking and financial account information;
- publicly available information about you, related parties, and other related information related to your Claim(s);
- the IP address from which you access this website; and
- other information that you may disclose to or share online with this site, over the phone, or otherwise related to your Claim(s).
How We use the Information
The claims data and other personal information collected are generally used for the following purposes:
- To initiate, process, review, investigate, assess, validate, settle, finalize, and otherwise administer Claims, according to the terms and conditions of the Class Action Settlement Agreements as approved by the Courts;
- For reporting, auditing, and analytics purposes, including to provide with reports on Claims and to audit Claims on behalf of its clients;
- To communicate with you regarding your Claim(s);
- To verify your identity;
- For fraud detection and verification purposes, and to otherwise protect us, clients and others from fraud, error, and other harm;
- To improve services and operations that are used to provide claims management and related services, and to provide training to relevant personnel;
- In order to comply with the law, a judicial proceeding, court order, or other legal process, such as in response to a court order or a subpoena; and
- For any other purposes identified by clients.
Lawful Basis of Processing
Personal information is processed based on the following lawful bases:
- Consent: Where you have given clear consent to process your personal data for one or more specific purposes.
- Legal Obligation: Where the processing is necessary to comply with the law (not including contractual obligations).
- Legitimate Interests: Where the processing is necessary for legitimate interests or the legitimate interests of a third party, provided your interests and fundamental rights do not override those interests.
How We Share Your Information
Your personal information will not be disclosed to any non-affiliated third party without your prior consent, except as provided below. In carrying out the activities and purposes described above on behalf of its clients, claims data may be processed by Epiq, including other affiliated Epiq entities, who perform services or provide support relating to the Claims Management Services. Claims data may also be disclosed to third parties as set forth below:
- Adjusters, assessors, valuators, and service providers engaged by Epiq to perform services or functions related to the Claims Management Services;
- Authorized representatives, consultants, research firms and other third-party service providers acting on our behalf, including cloud storage providers, data analytics providers, research partners, background check providers, consultants, lawyers, accountants, and other professional services provider related to Claims Management Services.
Epiq will also disclose the claims data to its clients, who have control over the claims data. In certain situations, clients may be government authorities subject to different privacy laws. Epiq’s privacy policy does not apply to the practices of its clients or any third parties and Epiq does not assume any responsibility for such practices.
The right to disclose your personal information is reserved as required or permitted by law, in response to legal or regulatory process and law enforcement requests by government authorities that have asserted a lawful right to access such information, to legal counsel, or as necessary to protect the property, interests and rights of Epiq. If Epiq or substantially all of Epiq’s assets are acquired, or in the unlikely event Epiq were to go out of business or enter bankruptcy, claimant data or other personal information may be transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of Epiq may continue to use your personal information as set forth in this privacy policy (as it may be amended from time to time).
Consent
Your consent to the collection, use, or disclosure of your personal information can be expressed through written, electronic, or any other method. The choice to provide your consent is always yours, however, your decision to withhold such consent may limit the ability to provide you with certain services.
Cookies
Epiq may also use cookies and other mechanisms to collect personal information about individuals when they visit or interact with us online. Cookies are unique identifiers, which are used to customize your website experience. The Claims website allows you to manage your cookie preferences and decide whether to accept them. The information in cookies is used to help improve the website and services, and for fraud detection and verification purposes. If you do not accept a cookie, there may be limitations on your use of some site functions.
Analytics
Automated devices and applications operated by third parties are used, including Google Analytics(http://www.google.com/intl/en/policies/privacy/) to evaluate the usage of this website and services, in order to improve the website and services’ performance and user experiences. These third parties may use cookies and other tracking technologies to perform their services. Your personal information is not shared with these third parties, but they may collect your IP address as part of their services.
Limiting Use, Disclosure, And Retention
Personal information will not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Claims data will be retained for as long as necessary to fulfill our obligations under the claims process, comply with legal requirements, or as directed by our clients. Once no longer needed, data will be securely deleted or anonymized.
Safeguards
Epiq has implemented measures designed to secure personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All personal information is stored on secure servers behind firewalls. Epiq’s security measures include:
- Education and training to relevant staff to ensure they are aware of privacy obligations when handling personal data.
- Administrative and technical controls to restrict access to personal data on a ‘need to know’ basis.
- Technological security measures, including firewalls, multi-factor authentication, encryption, and anti-virus software.
- Physical security measures, including access control systems with biometric authentication, surveillance cameras, on-site security personnel and multiple layers of perimeter security to prevent unauthorized access.
- Reasonable precautions for the disposal or destruction of personal information that may consist of securely shredding physical documents and deleting electronically stored information in a manner that prevents it from being readily recovered.
In the event of a breach of security safeguards, appropriate notification procedures as required by applicable law will be followed.
Your Data Privacy Rights
As a data subject, you have the following rights regarding your personal data:
- Right to Be Informed – You have the right to be informed about how we collect, use, store, and share your personal data. This is provided through our privacy notice.
- Right of Access – You can request access to the personal data we hold about you and receive a copy of your information.
- Right to Rectification – If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or update it.
- Right to Erasure ("Right to Be Forgotten") – You can request that we delete your personal data under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected or if you withdraw consent.
- Right to Restrict Processing – You have the right to request that we limit the processing of your personal data under specific conditions, such as when you contest its accuracy or object to its processing.
- Right to Data Portability – You can request to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller where technically feasible.
- Right to Object – You have the right to object to the processing of your personal data when it is based on legitimate interests, direct marketing, or for statistical/research purposes.
To exercise any of these rights, you can contact us by submitting your request here. Because we are acting for and on behalf of our client, we will provide them with your request and will work with them as needed to respond to your request.
Cross-Border Transfers
In the course of providing our services, we may transfer your personal data to countries outside of the European Economic Area (EEA), including but not limited to the United States. These transfers are conducted to fulfill our contractual obligations to our clients and support our legitimate business operations. We are committed to ensuring that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws. We participate in the EU-U.S. Data Privacy Framework (DPF), ensuring compliance with recognized data protection standards for transfers to the United States. Additionally, where required, we rely on other legally recognized mechanisms such as the Standard Contractual Clauses (SCCs) approved by the European Commission or other applicable transfer mechanisms.
Contacting Us
Epiq has designated a privacy officer who is responsible for our compliance with this policy. Any inquiries, complaints or questions regarding this policy should be directed in writing to our privacy officer as follows:
Epiq Systems, Ltd
ATTN: Privacy Director
110 Bishopsgate Salesforce Tower, 15th Floor
London, EC2N 4AY
United Kingdom
privacy@epiqglobal.com
If you believe the privacy legislation relating to the protection of your personal information or this privacy policy have not been respected, you may file a complaint with the privacy officer at the address listed above. Epiq will investigate all complaints. If, after an investigation, your complaint is deemed justified, Epiq will take appropriate steps to correct the situation, including, if necessary, amending their policies and practices. If you are not satisfied with the outcome, you may exercise the remedies available under law by contacting the UK Information Commissioner's Office (ICO). You can email them at casework@ico.org.uk or call them on 0303 123 1113 or you can send a letter to them at the following address:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
SK9 5AF