What data is collected when you apply for the Capture Redress Scheme: a guide to how your information is used, stored and your rights

Applying for the Capture Redress Scheme involves sharing information to help assess your claim, process payments, and ensure the scheme operates fairly and securely. This guide explains what data may be collected, how that data is used, where it is stored, and what rights you have regarding your information.

What data is collected

When you submit an application to the Capture Redress Scheme, the scheme’s administrator may collect a range of information to identify you, assess your eligibility, and manage your claim. Typical categories include:

– Identity and contact details
– Full name, date of birth, national insurance or equivalent identifier (where applicable)
– Postal address, email address, and phone number
– Any previously used aliases or alternative contact details

– Application and incident information
– Details of your claim, including dates, incident descriptions, and the sequence of events
– Reference numbers or identifiers related to the matter
– Names of organisations or individuals involved, where relevant

– Supporting evidence and documents
– Copies of documents you submit to support your claim (e.g., correspondence, forms, receipts, statements)
– Any written statements, notes, or timelines you provide as part of the application

– Financial information
– Bank account details or other information needed to process any payments or reimbursements
– Information about financial losses or costs incurred as part of the claim

– Communications and service records
– Records of correspondence and communications with the scheme, including notes from calls or meetings
– Audit trails showing when and by whom information was accessed or changed

– Technical and access data (if you use online services)
– Log-in details, IP addresses, device information, and other data generated by using the online application portal
– Web analytics or usage data, such as pages visited and features used, kept no longer than necessary

– Special categories of data (where necessary and lawful)
– In some cases, sensitive information may be needed to assess the claim (for example, health information or data about disabilities) if it is directly relevant to eligibility or the impact of the incident
– Processing of such data will be limited to what is necessary and will be governed by appropriate legal safeguards and consents where required

Sources of data
– Information you provide directly in your application and supporting documents
– Data supplied by third parties (for example, partner organisations involved in administering the scheme or professional advisers, where you have authorised disclosure)
– Information generated by the scheme’s systems during your application (for example, timestamps of submissions and access logs)

How the data is used

The data collected is used to enable the proper operation of the Capture Redress Scheme and to protect the rights of all parties involved. Key uses include:

– Identity verification and eligibility assessment
– Confirm your identity and ensure you meet the scheme’s eligibility criteria
– Processing and administering your claim
– Validate information, manage your application, and determine outcomes
– Communication and service delivery
– Respond to your enquiries, share decisions, request additional information, and provide updates about your claim
– Decision-making and evidence handling
– Review evidence, apply policy rules, and document the rationale for decisions
– Compliance, audit, and reporting
– Maintain records for regulatory, legal, and governance purposes; produce aggregated or anonymised statistics
– Fraud prevention and safety
– Detect and prevent fraudulent activity and protect the integrity of the scheme
– Legal obligations
– Meet statutory or contractual duties, including data-sharing where required by law or by competent authorities

Where the data is stored

Personal data collected for the scheme is stored in secure systems operated by the scheme’s administrator. This may include:

– Databases and document repositories hosted on secure servers
– Cloud storage solutions with appropriate security controls
– Physical security measures for any on-site data storage
– Backups and disaster recovery arrangements to protect data integrity

Data may be stored or processed in locations outside your country of residence where necessary, but always under appropriate safeguards to protect your rights, in line with applicable data protection laws (for example, standard contractual clauses and privacy notices).

Security and access controls

– Access to your data is restricted to authorised personnel who need it to administer your claim
– Data is protected with appropriate technical and organisational measures, such as encryption in transit and at rest, strong authentication, and rigorous access management
– Regular reviews and audits help ensure compliance with data protection requirements

Sharing data with third parties

– Service providers and partners who support the administration of the scheme (e.g., IT, payroll, legal, or claims handling services) may access your data under data processing agreements
– Data may be shared with regulators or other authorities where required by law or to protect the rights and safety of individuals
– In all cases, data sharing is governed by legal bases and safeguards to protect your information

Your rights

You have rights over your personal data under applicable data protection laws. These rights typically include:

– Right of access
– You can request a copy of the personal data the scheme holds about you
– Right to rectification
– You can ask to correct inaccurate or incomplete data
– Right to erasure (the right to be forgotten)
– In certain circumstances, you can request deletion of your data; this may be subject to statutory retention requirements
– Right to restrict processing
– You can request that processing be restricted in certain situations
– Right to data portability
– You can request a copy of your data in a commonly usable format to transfer to another organisation
– Right to object
– You can object to processing in some contexts, such as direct marketing or when processing is not legally required
– Right to withdraw consent
– If processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal
– Right to lodge a complaint
– You can raise concerns with the Information Commissioner’s Office (ICO) or the appropriate supervisory authority if you believe your rights have been violated

Exercising your rights

– Contact details and process for exercising rights are provided in the scheme’s privacy notice. You can typically submit requests in writing or via the scheme’s secure portal
– The scheme will confirm receipt of requests and respond within statutory timeframes, usually within one month, with possible extensions for complex requests

Retention and deletion

– Data is retained for as long as necessary to administer your claim and to comply with legal and regulatory requirements
– After the retention period ends, data is securely deleted or anonymised
– You may request earlier deletion where no legitimate reason exists to retain the data and where permitted by law

Changes to this handling of data

– The privacy notice for the Capture Redress Scheme explains current practices and any changes
– You will be notified of material changes that affect how your data is used or your rights

If you have privacy-related questions or concerns

– Refer to the privacy notice for the most accurate and up-to-date information
– Contact the data protection officer or privacy team using the contact methods provided in the privacy notice
– For complaints about how your data is handled, you can also contact the ICO or the relevant supervisory authority

This guide is intended to help you understand the data landscape around applying for the Capture Redress Scheme. For specific questions about your application or about how your data is handled in your country or region, consult the scheme’s privacy notice or reach out to the privacy team.

January 21, 2026 at 01:06PM
指南：Capture Redress Scheme 隐私通知

在您申请 Capture Redress Scheme 时将收集哪些数据、这些数据将如何使用、存放在哪里，以及您拥有的权利。

阅读更多中文内容： 申请 Capture Redress Scheme 时的数据收集、用途、存储与您的权利