Privacy notice

Privacy Policy

This policy explains how UndoFraud collects, uses, stores, and shares personal information when you use this website, submit a claim enquiry, upload evidence, or contact us.

Last updated: 10 June 2026

Our privacy approach

We collect information to assess fraud-related claim enquiries, contact people who ask for help, handle evidence, refer eligible enquiries to a solicitor, meet our regulatory duties, and keep the website working properly.

We do not sell your personal information. We share it only where needed to provide the service, manage your enquiry, comply with law or regulation, improve the website, or protect the service.

Who we are

UndoFraud is operated for the website service by Select Claims Limited. Select Claims Limited is a claims management company authorised and regulated by the Financial Conduct Authority, FCA Registration No. 835838. The company is registered in England and Wales under Company No. 05967813.

Our registered office is 254 Bradford Road, Manchester, Lancashire, M40 7BT, United Kingdom. For personal information collected through this website, claim enquiry forms, contact forms, and related communications, Select Claims Limited is the data controller unless we tell you otherwise.

Where we introduce you to a solicitor, including Consumer Rights Solicitors, that solicitor will usually act as an independent data controller for the legal services they provide to you.

Information we collect

We collect information you choose to give us when you check a claim, contact us, upload evidence, or otherwise communicate with us.

  • Identity and contact details, including title, name, email address, phone number, preferred contact method, best time to contact you, date of birth, address, city, postcode, and country.
  • Claim and scam details, including claim type, amount lost, payment method, bank, when the scam happened, whether it happened within the last six years, whether you have complained to your bank, whether you have received a Financial Ombudsman Service decision, and whether you reported the matter to the police or Action Fraud.
  • Personal circumstances relevant to your enquiry, including employment status, vulnerability information you choose to provide, how you were contacted, where the funds came from, and your description of what happened.
  • Evidence files you upload, such as bank statements, screenshots, emails, WhatsApp messages, bank complaint responses, ombudsman letters, PDFs, images, or documents.
  • Contact form information, including your name, email address, phone number, reason for enquiry, message, and consent to be contacted.
  • Technical and tracking information, including landing page, referrer, browser user agent, submitted date and time, UTM parameters, and advertising click IDs such as gclid, gbraid, wbraid, fbclid, ttclid, taboola_click_id, and msclkid.

How we use your information

We use your personal information to run the website, assess claim enquiries, contact you about your enquiry, prepare information for a potential solicitor referral, manage uploaded evidence, respond to messages, maintain records, and comply with legal and regulatory duties.

We may also use limited technical, form, and page interaction data to understand how people use the website, measure campaign performance, improve the claim journey, detect errors, protect the service, and report on lead submissions.

Our lawful bases

We rely on different lawful bases depending on how we use your information. These may include your consent, taking steps at your request before entering into an agreement, our legitimate interests in operating and improving the service, and complying with legal or regulatory obligations.

If information you provide reveals health, vulnerability, or other special category information, we only use it where necessary for your enquiry and where data protection law allows us to do so, such as with your explicit consent or where it is needed in connection with legal claims or regulatory obligations.

We only use your information for marketing where you have agreed to receive it or where the law otherwise allows it. You can withdraw marketing consent at any time.

Who we share information with

We share personal information only where it is necessary for the purposes described in this policy.

  • Solicitors or legal partners we recommend to review or progress your claim, including Consumer Rights Solicitors where applicable.
  • Technology and storage providers used to run the claim process, including website hosting, Supabase storage and database services, Google Workspace or Google Sheets, and email delivery providers.
  • Analytics and form improvement providers, including PostHog, Microsoft Clarity, and Zuko where analytics is enabled.
  • Regulators, ombudsman services, law enforcement agencies, courts, insurers, banks, payment providers, professional advisers, or other third parties where required by law, regulation, fraud prevention, complaint handling, or claim progression.

Consumer Rights Solicitors contact information

Where legal support is required, UndoFraud may work with Consumer Rights Solicitors.

  • Postal address: Consumer Rights Solicitors, Undo Fraud Department, Peter House, SPACES, Oxford Street, Manchester, M1 5AN.
  • Website: crsolicitors.co.uk
  • Email: info@crsolicitors.co.uk
  • Phone: 0161 464 3509

Website analytics, storage, and cookies

The website may use browser storage to remember claim form progress and to capture landing page and campaign information during your visit. This helps us understand which page or advert brought you to the website and prevents you having to re-enter information unnecessarily.

Where analytics is enabled, we may use PostHog, Microsoft Clarity, and Zuko to record page views, claim journey events, contact form events, CTA clicks, form step progress, validation errors, evidence upload counts, and similar service performance information. Microsoft Clarity and Zuko may also provide session replay or form interaction analysis.

We design analytics events so that detailed claim descriptions, evidence files, and raw sensitive information are not intentionally sent to analytics tools. Claim details and evidence are handled through the claim submission and storage systems instead.

Evidence uploads

If you upload evidence, we store the uploaded file details and the file itself so your enquiry can be reviewed. The website currently accepts a limited number of files and file types, including PDF, JPG, PNG, DOC, and DOCX files.

Please only upload information that is relevant to your potential claim. If a document includes information about another person, you should only upload it where you are allowed to share it with us.

International transfers

Some of the technology providers used to run the website, store information, deliver email, or provide analytics may process information outside the United Kingdom. Where this happens, we expect appropriate safeguards to be used, such as contractual protections or other transfer mechanisms recognised by data protection law.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes described in this policy. Claim enquiry records may be kept for the lifetime of the enquiry, any related referral or claim, and any legal, regulatory, accounting, complaint handling, or limitation periods that apply.

Contact messages are kept for as long as needed to respond to and manage the enquiry. Evidence files are kept for as long as needed to assess, refer, progress, audit, or defend the related claim or enquiry. Analytics information is kept in line with the settings and retention controls of the relevant analytics provider.

How we protect information

We use technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, or disclosure. Access to claim information is limited to people and service providers who need it for the purposes described in this policy.

No website or storage system can be guaranteed completely secure. If you believe information you have sent to us has been compromised, please contact us as soon as possible.

Your rights

Under data protection law, you may have the right to ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing, objection to processing, data portability, and withdrawal of consent where we rely on consent.

These rights are not absolute and may depend on the circumstances, including whether we need to keep information for legal, regulatory, complaint handling, or claim-related reasons. We may need to verify your identity before responding to a rights request.

You also have the right to complain to the Information Commissioner's Office if you are unhappy with how your personal information is handled.

Changes to this policy

We may update this privacy policy from time to time to reflect changes to the website, claim process, technology providers, or legal requirements. The latest version will be published on this page.

Contact us about privacy

To ask a privacy question or exercise your data protection rights, email hello@undofraud.com. You can also write to Select Claims Limited at 254 Bradford Road, Manchester, Lancashire, M40 7BT, United Kingdom.

If you are unhappy with our response, you can complain to the Information Commissioner's Office.