POLICIES

Privacy Policy

Winn Holding Privacy Statement

Who are we?

We are Winn Holding Limited, and we are registered under the Companies Acts, Reg. No. 08027068. Our registered office is:

Brinkburn Street

Byker

Newcastle upon Tyne

NE6 1PL

Companies within Winn Holding use a variety of trading names, including, but not limited to:

Capio Law
North East Clinic
On Engineering
On Group
On Hire
On Insurance
On Insurance Connect
On Limited
On Medical
Onhealth
Winn Assist
Winn Group
Winn Legal
Winn Solicitors
Winns
Winns Wills
Winns: National Accident Specialists

Information about each of the companies, including their respective Privacy Policy, can be obtained from the respective company websites, detailed in 'group websites' below.

Brokers
Engineers/Garages/Repairers
Insurers
Medical Professionals
Leasing Companies
Employers
Appropriate Government Agencies

Key terms

"Winn Group", "Winn Holding", "Winns", "we", "us" mean Winn Holding Limited.

"Personal data" has the same meaning as set out in the UK-General Data Protection Regulation, and in simple terms means any information relating to an "identifiable natural person".

An identifiable natural person is someone who can be identified, either directly or indirectly, by an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

What is this privacy statement about?

To supply our customers with our services and to invite potential employees into our recruitment process, we need to use information about you, and some of that may be personal or private. For example, we may need to know your name and address, or details of how you would like to be contacted (e.g. your mobile phone number or email address).

As we do this, we would like you to take some time to read this privacy statement. It will explain what information we might collect about you, why we collect it, what we may use it for, and who we may give it to. We will also explain your rights towards your information and how we look after it while we have it.

What information do we collect about you?

The information we collect about you may vary based on what service we provide to you. Typically, we need details like:

Your name and address so we know who you are and what services you need from us
Your contact details like phone number or email so that we can keep in touch with you about our services, or your job application
Your CV/work history, and job preferences, including role and salary expectations
Any other work-related information you provide, for example, education or training certificates
A copy of your passport and, in some cases, permits and visas
Your date of birth and National Insurance number
The outcome of criminal record checks and security clearance for certain roles
In certain cases, medical information
References
Financial information, including but not limited to: Payroll details and terms, HMRC data, Pension scheme details, Court orders, and Statutory payments
A log of our communications with you by email and telephone

We only collect information about you that we need to ensure you get the best service from us. We respect your privacy and we try to minimise what we do collect.

What is sensitive personal information?

This category of personal information is more sensitive and relates to, for example, a person’s physical or mental health, race or ethnic origin, political opinions, religious or philosophical beliefs, trade union memberships, their genetic or biometric data and sexual orientation.

We have in place additional measures to protect your sensitive personal information and its confidentiality. We will use your sensitive personal information in order to: meet your requirements in relation to the service we provide to you, meet your requirements in relation to your job application, where it is necessary to protect health and safety or to prevent discrimination contrary to the Equality Act or under general law, or where your consent has been obtained, if required.

We will only disclose your sensitive personal information to third parties as referred to in this Privacy Policy or where Winn Holding considers it is necessary, subject to us putting in place appropriate security or confidentiality obligations.

Why do we collect this information?

We collect your information where processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract with you.

When applying for a vacancy, we collect your information to:

Process the information above, which is collected at the outset of the recruitment process
Establish your right to work in the UK, as we are legally obliged to do so
Prevent discrimination and for equality & diversity monitoring purposes
Comply with our health and safety obligations
Comply with our legal obligations

If we make a formal offer of employment to you and you accept it, we will process your personal data in accordance with our Staff Privacy Notice.

How do we collect information about you?

We prefer to collect the information we need directly from you. That way, you know what we have, and we can be sure you have provided us with the most accurate and up-to-date information. We will usually do this:

When you apply for a vacancy with us
When you contact us for any reason
Where absolutely necessary, we may occasionally collect information about you from other ‘third parties’ such as:

Accident Claims	Dispute Resolution	Wills, Probate & Trusts	Recruitment
Brokers Engineers/Garages/Repairers Insurers Medical Professionals Leasing Companies Employers Appropriate Government Agencies	Brokers Introducers Energy Professionals Utility Suppliers Appropriate Government Agencies	Brokers Introducers Genealogists Identity Verification Organisations Insolvency Organisations Insurers Appropriate Government Agencies	Employment Agencies Job Boards Current and past employers, and/or personal referees (for references)

What do we do with the information we collect about you?

We use your information in various ways, such as to:

Meet the purposes that you provided your information for
Provide you with the services you want
Process your job application, including:
Ensure that your skillset meets the requirements of the advertised vacancy
Keep you informed of available opportunities as they arise
Establish that you have the right to work
Undertake relevant security and criminal record checks as required by us, as permitted by law
Deal with any medical and health and safety issues relating to certain positions
Put in place contractual arrangements and documentation once a role has been secured
Pay you if your application is successful
Administer our relationship, including;
Progressing your claim, including issuing legal proceedings where necessary
Dealing with any problems, enquiries, or complaints you may have
Keep our records accurate and up to date
Comply with any legal and statutory obligations we may have
Where we have a legitimate interest in doing so, such as the protection of our business interests or the prevention of fraud.
Create statistical information, market research, analysis and customer profiling to better manage and run our business

Who might we share your information with?

We appreciate that you have provided your information to us and may not want us to share it with other people or organisations, however sometimes it is necessary for us to do so.

We only share your information where we are permitted or required to by law, or where you have given us your consent to do so. We may share your information with, for example:

Our employees, either:
Regarding your suitability for an advertised role, or
Who will provide you with our services
Employment and recruitment agencies, or past employers, where we require a reference from them
Any of your family, associates, or someone who represents you, where you have asked us to do so
Medical professionals, barristers, courts, insurers/brokers and the Defendant’s solicitors
Carefully selected contractors and specialists to help us provide you with our services
Any person or organisation where we are required to because of a Court order, legal duty, or statutory obligation
Appropriate Government Agencies
Credit reference agencies, fraud prevention agencies, and tracing agents, in order to help prevent and detect fraud, or as part of our non-cooperation or debt collection process

We are careful to minimise such sharing

Although we are a UK company, we may sometimes share your information with an organisation, such as a contractor working on our behalf, who is outside the UK. Such companies may also be outside of Europe. We may do this, but we will only do so where we are permitted to by law.

In all cases, the transfer will be on the basis of a European Commission adequacy decision or we will implement adequate safeguards to protect your personal information, such as the European Commission approved Standard Contractual Clauses.

Whenever we share your information we do everything we can to ensure it is protected from misuse or loss.

How do we look after and secure your information?

When we use information about you we take all reasonable efforts to do so fairly and lawfully.

We think it likely that our customers know we use information about them, and we provide notices of such wherever we can.

We never use information about you unless it is lawful for us to do so and we have a clearly defined need or purpose.

When we collect information about you we ensure that we minimise what we collect. We try to collect enough accurate and up to date information to ensure we provide you with the service you require and no more.

We make every effort to ensure your rights towards your information, which we detail below.

We take appropriate care to secure the information we hold about you. We have robust technical security such as passwords and information encryption. We also have policies and procedures to ensure your information is only available to our employees who need to see it to do their job, and we train those employees on data protection appropriately.

Also, we establish robust procedures and contracts to extend these protections to any other person or organisation we may need to give your information to.

In everything we do with your information we aim to be fair, lawful, and open, and we take seriously our obligations towards your privacy and the protection of information we may hold about you.

How long do we retain your information for?

We do not keep your information for longer than we need it, ensuring that the records we have about you are managed properly and deleted promptly and securely when we no longer require them.

We will hold personal data to comply with legal and regulatory requirements in respect of retention of legal transaction files as follows:

Service	Retention Period
Accident Claims	6 Years from the date the case is closed. If the client is under 18 years of age when the case is closed, the case is retained for 6 years from the client’s 18th birthday.
Dispute Resolution	6 Years from the date the case is closed.
Wills, Probate & Trusts	6 Years from the date the case is closed. If original documents are held by Winn Solicitors, these will be held indefinitely, or for the lifetime of the testator, the settlor or the donor.
Recruitment	6 months from the end of the recruitment process.

We may keep your data for longer where this is necessary for statistical and historical research purposes. However, we will ensure all personally identifiable information is removed at the appropriate time.

On our websites

When visiting our websites, you may also be providing us with certain information via our use of website ‘cookies’. You can find out more about this by reading our Cookie Policy here.

When you enter data into secure areas of our websites, a Secure Socket Layer (SSL) is initiated. An SSL is a security device which ensures that any data which you enter is encrypted during transmission over the internet. Encryption means the data is encoded so that it is not legible until such time as we decode it.

No data transmission over the internet can ever be entirely secure. While we do our best to protect your personal information, we cannot guarantee its security and you must be aware of this when using our websites.

Our websites may contain links to other websites. If you follow a link to any of these websites, please note that these websites have their own Terms & Conditions and privacy policies and that we cannot accept responsibility for their content. This privacy statement applies only to our website.

External Links

Whilst we make every effort to ensure that our websites only include quality, safe and relevant external links, you are advised to adopt a policy of caution before clicking any external web links mentioned throughout our websites.

We cannot guarantee or verify the contents of any externally linked website despite our best efforts. Users should therefore note that they click on external links at their own risk and our website and its owners cannot be held liable for any damages or implications caused by visiting any external links mentioned.

Social Media Platforms

Communication, engagement and actions taken through external social media platforms that our website participates on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.

You are advised to use social media platforms wisely and communicate/engage upon them with due care and caution in regard to their own privacy and personal details. Our websites will never ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.

Our website may use social sharing buttons, which help share web content directly from web pages to the social media platform in question. You are advised before using such social sharing buttons that you do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.

Shortened Links in Social Media

Our website, through our social media platform accounts, may share web links to relevant web pages. By default, some social media platforms shorten lengthy web addresses (URLs), (for example: http://goo.gl/XC61E3).

You are advised to take caution and good judgement before clicking any shortened URLs published on social media platforms via our website. Despite the best efforts to ensure only genuine URLs are published, many social media platforms are prone to spam and hacking, and therefore our website cannot be held liable for any damages or implications caused by visiting any shortened links.

By email and phone

If you have contacted us by email, or provided an email address, we may use that to contact you if we need to.

You should also be aware that information conveyed by email could be deliberately or accidentally intercepted or corrupted. Whilst we make every effort to ensure that emails we send to you are free from viruses, this cannot be guaranteed. We recommend that you scan all emails for viruses with appropriate and frequently updated virus-checking software.

If you have given us your phone number (landline or mobile), we may use it to contact you if we need to, including sending texts. If you contact us, or we contact you, we also record your phone call, for security, compliance and training purposes.

Please let us know if your mobile phone number or email address changes so that we can keep this information up to date.

Your Data Protection Rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. If you think that what we have is not accurate or up to date, please tell us as soon as possible and we will ensure it is corrected without undue delay.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances where we are relying on a legitimate interest or where we are processing your personal data for the purposes of direct marketing.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us using the details below if you wish to make a request.

You have the right to see all the personal information we hold about you

We will handle routine enquiries as part of our usual customer service. If you want to see more of the information that we have about you, you can make a data subject access request.

You can write to us at:

Data Protection Team

Winn Holding Ltd

Brinkburn Street

Byker

Newcastle upon Tyne

NE6 1PL

To help you make your request, we have produced a form which you can find on our website here.

We may reply to you where we need further information to help respond effectively to your request.

To ensure that we only provide your information to you and not someone else, you will need to provide us with two current forms of identification.

We provide your information free of charge. In the case of subsequent or excessive requests from you to provide your information, we may charge a reasonable fee based on administration costs (as we are allowed to by law). We will inform you if this fee is applicable.

Once we receive your written request, any clarifications, identification, and in the case of subsequent or excessive requests your administration fee, we will respond as soon as we can within 28 calendar days.

You have the right to stop us direct marketing to you

We are keen to promote our services and vacancies and may make you aware of products that help with this. Also, from time to time we may tell you about other offers or vacancies we think may interest you.

If you do not want to receive such offers at all, please let us know:

Via email marketing@winngroup.co.uk
by calling 0191 276 1000
or in writing to:

Marketing Team

Winn Holding Ltd

Brinkburn Street

Byker

Newcastle upon Tyne

NE6 1PL

Also, we will not send you these offers by phone if you have registered with the Telephone Preference Service or by mail if you have registered with the Mailing Preference Service.

You have the right to stop us taking ‘automated decisions’ about you

We do not routinely use software to take automated decisions about you.

Winn Holding and data protection

The Data Protection Act 2018 and General Data Protection Regulation ((EU) 2016/679) (GDPR) governs how we may use your personal information. We are registered under the Act and regulated by the Information Commissioner’s Office (ICO).

You can find our registration details here:

Company	Registration Number
Winn Solicitors Ltd	Z6337302
On Hire Ltd	Z1098075
On Medical Ltd	Z1097936

Our Data Protection Officer is Emma Jasarevic.

Changes to this statement

From time to time, we may amend this privacy statement to reflect changes in the law, guidance from the ICO, our experience of handling your information, or for other legitimate reasons. We will do this by posting the amended privacy statement on this website. We therefore suggest you check this statement from time to time to ensure you are aware of the latest version.

This policy was last reviewed on 08/04/2026.

Contact

If you have any questions or ideas, please refer to the Data Protection Team at Winn Holding, who will be pleased to help you. You can contact the team:

by calling 0191 276 1000
by email to DPTeam@winnsolicitors.com
or in writing to:

Data Protection Team

Winn Holding Ltd

Brinkburn Street

Byker

Newcastle upon Tyne

NE6 1PL

How to Complain

If you have any concerns about our use of your personal information, you can contact us on the details above and we will investigate the matter for you. You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO can be contacted at:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline: 0303 123 113

Website: www.ico.org.uk

Group Websites:

Winn Solicitors – Privacy Policy

Winns Wills – Privacy Policy

On Medical – Privacy Policy

On Hire – Privacy Policy

On Insurance – Privacy Policy

Onhealth – Privacy Policy

Privacy Policy

Who are we?

Key terms

What is this privacy statement about?

What information do we collect about you?

The information we collect about you may vary based on what service we provide to you. Typically, we need details like:

We only collect information about you that we need to ensure you get the best service from us. We respect your privacy and we try to minimise what we do collect.

What is sensitive personal information?

Why do we collect this information?

How do we collect information about you?

We prefer to collect the information we need directly from you. That way, you know what we have, and we can be sure you have provided us with the most accurate and up-to-date information. We will usually do this:

What do we do with the information we collect about you?

We use your information in various ways, such as to:

Who might we share your information with?

We are careful to minimise such sharing

Whenever we share your information we do everything we can to ensure it is protected from misuse or loss.

How do we look after and secure your information?

When we use information about you we take all reasonable efforts to do so fairly and lawfully.

We think it likely that our customers know we use information about them, and we provide notices of such wherever we can.

We never use information about you unless it is lawful for us to do so and we have a clearly defined need or purpose.

When we collect information about you we ensure that we minimise what we collect. We try to collect enough accurate and up to date information to ensure we provide you with the service you require and no more.

We make every effort to ensure your rights towards your information, which we detail below.

Also, we establish robust procedures and contracts to extend these protections to any other person or organisation we may need to give your information to.

In everything we do with your information we aim to be fair, lawful, and open, and we take seriously our obligations towards your privacy and the protection of information we may hold about you.

How long do we retain your information for?

On our websites

When visiting our websites, you may also be providing us with certain information via our use of website ‘cookies’. You can find out more about this by reading our Cookie Policy here.

No data transmission over the internet can ever be entirely secure. While we do our best to protect your personal information, we cannot guarantee its security and you must be aware of this when using our websites.

Our websites may contain links to other websites. If you follow a link to any of these websites, please note that these websites have their own Terms & Conditions and privacy policies and that we cannot accept responsibility for their content. This privacy statement applies only to our website.

External Links

Whilst we make every effort to ensure that our websites only include quality, safe and relevant external links, you are advised to adopt a policy of caution before clicking any external web links mentioned throughout our websites.

Social Media Platforms

Communication, engagement and actions taken through external social media platforms that our website participates on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.

Shortened Links in Social Media

Our website, through our social media platform accounts, may share web links to relevant web pages. By default, some social media platforms shorten lengthy web addresses (URLs), (for example: http://goo.gl/XC61E3).

By email and phone

If you have contacted us by email, or provided an email address, we may use that to contact you if we need to.

If you have given us your phone number (landline or mobile), we may use it to contact you if we need to, including sending texts. If you contact us, or we contact you, we also record your phone call, for security, compliance and training purposes.

Please let us know if your mobile phone number or email address changes so that we can keep this information up to date.

Your Data Protection Rights

You have the right to see all the personal information we hold about you

We will handle routine enquiries as part of our usual customer service. If you want to see more of the information that we have about you, you can make a data subject access request.

You can write to us at:

To help you make your request, we have produced a form which you can find on our website here.

We may reply to you where we need further information to help respond effectively to your request.

To ensure that we only provide your information to you and not someone else, you will need to provide us with two current forms of identification.

We provide your information free of charge. In the case of subsequent or excessive requests from you to provide your information, we may charge a reasonable fee based on administration costs (as we are allowed to by law). We will inform you if this fee is applicable.

Once we receive your written request, any clarifications, identification, and in the case of subsequent or excessive requests your administration fee, we will respond as soon as we can within 28 calendar days.

You have the right to stop us direct marketing to you

We are keen to promote our services and vacancies and may make you aware of products that help with this. Also, from time to time we may tell you about other offers or vacancies we think may interest you.

If you do not want to receive such offers at all, please let us know:

NE6 1PL

Also, we will not send you these offers by phone if you have registered with the Telephone Preference Service or by mail if you have registered with the Mailing Preference Service.

You have the right to stop us taking ‘automated decisions’ about you

We do not routinely use software to take automated decisions about you.

Winn Holding and data protection

You can find our registration details here:

Changes to this statement

This policy was last reviewed on 08/04/2026.

Contact

If you have any questions or ideas, please refer to the Data Protection Team at Winn Holding, who will be pleased to help you. You can contact the team:

How to Complain

Group Websites:

Resources & Further Information