Skip to main content
Policy • Version 2.0

Privacy Policy

How ProMediate collects, uses and protects your personal information.

Document control

Document title
Privacy Policy
Version
2.0
Last updated
July 2026
Next review
July 2027
Document owner
Directors, ProMediate (UK) Limited

We know privacy matters. This policy explains what information we collect, why we need it and how we keep it safe — in plain English, with nothing hidden in the small print.

1. Who We Are

ProMediate (UK) Limited is an independent Alternative Dispute Resolution provider accredited under the Digital Markets, Competition and Consumers Act 2024.

  • Company Number: 09328473
  • VAT Number: 214254050

ProMediate acts as the Data Controller for personal information processed through the ADR Scheme. This means we are responsible for deciding how and why your personal data is used, and for ensuring it is handled lawfully and securely.

2. Information We Collect

To administer the ADR process, we may collect and process the following types of information:

Name
Address
Telephone number
Email address
Complaint information
Correspondence
Documents and evidence
Photographs
Trader information
Representatives' details

We collect this information directly from you, from the trader involved in the dispute, or — where relevant and lawful — from third parties such as insurers, expert witnesses or regulatory bodies.

3. Why We Collect It

We use your personal information for the following purposes:

  • Administer ADR — to receive, register and progress your dispute through the ADR process.
  • Assess jurisdiction — to confirm that the dispute falls within the scope of our ADR Scheme.
  • Communicate — to contact you, the trader and any appointed representatives about the case.
  • Investigate complaints — to review evidence, ask questions and reach a fair outcome.
  • Issue ADR outcomes — to deliver the final decision or proposed settlement to both parties.
  • Improve services — to analyse trends, train staff and enhance our ADR procedures.
  • Comply with legal obligations — including reporting to regulators where required.

Our legal basis for processing is typically performance of a contract (the ADR agreement) and, in some cases, legal obligation or legitimate interests balanced against your rights.

4. Sharing Information

We respect the confidentiality of your dispute. Information is shared only where necessary and proportionate:

  • The other party — we share relevant complaint details and evidence with the trader (or their representative) so they can respond fairly.
  • ADR Officials — case handlers and adjudicators within ProMediate who need access to the file to assess the dispute.
  • Professional advisers — such as legal experts or technical specialists appointed to assist with a specific case.
  • Regulators — where required by law, we may share information with bodies such as the Office for Product Safety and Standards (OPSS) or Trading Standards.

We never sell your personal information for marketing purposes, and we do not share data for commercial gain.

5. Retention

Case files are retained in accordance with our Data Retention Policy to meet legal, regulatory and operational requirements.

Once the retention period has expired, personal data is securely deleted or anonymised so it can no longer be linked to an identifiable individual. Retention periods vary depending on the nature of the dispute and any ongoing regulatory or legal obligations.

If you would like to know the specific retention period that applies to your case, please contact us.

6. Security

We take the security of your personal information seriously. We use appropriate technical and organisational measures to protect it from unauthorised access, loss, misuse or alteration.

These measures include:

  • Encrypted data transmission and storage
  • Access controls and role-based permissions
  • Regular security reviews and staff training
  • Secure disposal of physical and electronic records

While no system is entirely risk-free, we continually review and improve our security practices to keep your data safe.

7. Your Rights

Under data protection law, you have the right to:

Access

Request a copy of the personal information we hold about you.

Correction

Ask us to correct inaccurate or incomplete information.

Deletion

Request deletion of your data where appropriate.

Restriction

Ask us to limit how we use your data in certain circumstances.

Objection

Object to processing based on legitimate interests.

Portability

Receive your data in a structured, commonly used format.

To exercise any of these rights, please contact us using the details below. We will respond within the statutory timeframe and may ask you to verify your identity before proceeding.

8. Contact

If you have any questions about this Privacy Policy, or if you wish to exercise your data protection rights, please get in touch:

Email: enquiries@promediate.co.uk

Telephone: 0203 621 3908

Post: ProMediate (UK) Limited, Brow Farm, Top Road, Frodsham, Cheshire, WA6 6SP

9. Updates

This Privacy Policy may be updated periodically to reflect changes in our practices, legal requirements or the way we deliver our ADR services.

When we make significant changes, we will update the date at the top of this page and, where appropriate, notify registered users. We encourage you to review this policy from time to time so you remain informed about how we protect your information.

Last updated: July 2026

Version History

Version history of the ProMediate Privacy Policy
VersionLast updatedNext reviewSummary of changes
2.0July 2026July 2027Updated for the Consumer ADR Scheme under the DMCC Act 2024 and linked to the Data Retention Policy.
1.02018First issue under UK GDPR.

This policy is reviewed at least annually.