Privacy Policy
How we collect, use, and protect your information.
Data Controller
Costello Global Technology (Level 5, Carolina Court, Giuseppe Cali Street, Ta’ Xbiex XBX 1425, Malta) is the data controller for information collected through YourSolicitor.com. Legal services are provided by our regulated partner firms, who act as joint controllers for data processed in connection with your legal claim.
What We Collect
We collect the information you provide during registration: your name, email address, phone number (optional), and your responses to the eligibility assessment questions. This includes information about your social media usage, which platforms you used, and the impact on your wellbeing or your child's wellbeing.
Some of this information constitutes special category data under Article 9 of the UK GDPR, specifically data concerning health. We process this data with your explicit consent (Article 9(2)(a)) and because processing is necessary for the establishment, exercise, or defence of legal claims (Article 9(2)(f)).
Why We Collect It
We process your personal data for the following purposes: to assess your eligibility to participate in group litigation proceedings; to categorise and manage your claim; to communicate with you about your case; to share relevant information with our instructed solicitor for legal proceedings; and to share relevant information with litigation funders where applicable.
Legal basis for processing
Our legal bases are: legitimate interest in pursuing litigation on your behalf (Article 6(1)(f)); taking steps at your request before, or performing, a contract for legal services (Article 6(1)(b)); and your explicit consent for special category health data (Article 9(2)(a)).
Who We Share It With
Your data is shared only with: our instructed solicitor firm (regulated by the Solicitors Regulation Authority); litigation funders, where applicable and only with your consent; expert witnesses instructed for the proceedings; and the court, as required by the legal process. We do not sell your data. We do not use it for marketing unless you opt in to receive information about other relevant legal services. We do not share it with any third party not directly connected to your legal claim.
Data Security
Data is encrypted in transit and at rest. Access is restricted to authorised personnel only.
Data Retention
We retain your data for the duration of the legal proceedings and for six years after their conclusion, reflecting the six-year limitation period for contract claims under the Limitation Act 1980. If you withdraw your claim before proceedings are filed, your data is deleted within 30 days of your request.
Your Rights
Under the UK GDPR, you have the right to: access the personal data we hold about you; rectify any inaccurate data; erase your data (subject to our legal obligations); restrict processing; data portability; object to processing; and withdraw your consent at any time. To exercise any of these rights, contact us at privacy@yoursolicitor.com.
Children's Data
Where a parent or guardian submits information on behalf of a child under 18, the parent or guardian provides consent for the processing of the child's data. We process children's data with particular care and in accordance with the ICO's Age Appropriate Design Code.
Complaints
If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Last updated: September 2026