This Privacy Notice explains how MSL Legal Expenses Limited (“MSL”, “We”, “Us”) collects, uses and protects the personal data of all current and new MSL policyholders. MSL Legal Expenses Limited is the Data Controller and is registered with the Information Commissioner’s Office (registration number: Z6610288). This notice is issued in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies alongside the Data Protection and Privacy Notice contained within our policy wordings.
Last reviewed: 04/09/2026. If we make material changes to this notice, we will publish the updated version on this page.
We, MSL Legal Expenses Limited, act as the Data Controller of Your personal data. How We use and look after Your personal information is set out below.
Your personal information may be used by Us, and by Our agents and service providers, for the purposes of insurance administration, underwriting, claims handling, fraud prevention and statistical analysis. We rely on the following lawful bases for this processing:
Where We process special categories of personal data, such as information about Your health, or information relating to criminal convictions or offences, We do so where it is necessary for insurance purposes in accordance with the Data Protection Act 2018, or with Your explicit consent.
The personal data You have provided, We have collected from You, or We have received from third parties may include Your:
We will not pass Your information to third parties except where necessary to administer Your policy, process Your claim, prevent fraud, or comply with legal and regulatory requirements. In these cases, We may share Your information with:
Your personal data is processed within the UK and the European Economic Area (EEA). If it is ever necessary to transfer Your personal data outside of these territories, We will ensure appropriate safeguards are in place as required by UK data protection law.
We will not use Your information to market further products or services to You, or pass Your information to any other organisation for sales and marketing purposes, without Your consent.
We will retain Your personal data for seven years from the latest of: the expiry or cancellation of Your policy, the resolution of any complaint, or the settlement of any claim. This period reflects the time within which legal proceedings relating to Your policy or claim could be brought, and Our legal and regulatory record-keeping obligations.
At the end of this period, Your personal data will be securely deleted or anonymised, unless We are required to retain it for longer to comply with a legal obligation or in connection with ongoing or anticipated legal proceedings.
Your personal data is protected by legal rights under UK data protection law. You have the right to:
Some of these rights are subject to legal limits. For example, We may need to continue holding Your personal data where We have a legal or regulatory obligation to do so, or in connection with an ongoing claim.
We do not make decisions about You based solely on automated processing.
To exercise any of these rights, please contact Us using the details in the “How to Contact MSL Legal Expenses Limited” section below. We will respond within one month of receiving Your request.
If You are not satisfied with how We handle Your personal data or Your request, You have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
You also have the right to complain directly to Us about how We handle Your personal data. We will acknowledge Your complaint within 30 days and respond without undue delay.
MSL Legal Expenses Limited (“MSL”, “we”, “us”) is the Data Controller of the personal data you supply to us via this website. We are committed to protecting your privacy. This notice explains what information we collect about you through the website, how we use it, how you can limit that use, and the procedures we have in place to safeguard your privacy. It is issued in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We use the personal data you supply through this website to respond to your enquiries and to provide you with information about our services and products. Where we respond to an enquiry you have made, the lawful basis for processing is our legitimate interest in dealing with your request. Where we send you marketing information, the lawful basis is your consent, which you may withdraw at any time by contacting us. We may also process your personal data where necessary to comply with a legal obligation.
We process the following personal data about website users:
For details of the cookies and similar technologies used on this website, please see our Cookie Policy.
We do not sell your personal data, and we will not share it with third parties for their own marketing purposes without your consent.
We use trusted service providers to help us operate this website and our business, such as website hosting and IT support providers. These providers act on our instructions under contract and are not permitted to use your personal data for their own purposes.
Some of our service providers may process personal data outside of the UK. Where this happens, we ensure appropriate safeguards are in place, such as an adequacy decision or the use of approved contractual clauses, to protect your personal data to the standard required by UK law.
We take the security of your personal data seriously and have put in place appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration or disclosure.
These measures include encryption of data transmitted through this website, access controls that limit who within our organisation can view your personal data, and internal procedures governing the storage, access and disclosure of your information. Where we use third-party providers to host or support our systems, we require them to maintain equivalent standards of security.
Please be aware that no transmission of information over the internet can be guaranteed to be completely secure. While we do our best to protect your personal data, any information you send to us online is transmitted at your own risk.
We keep your personal data only for as long as we need it for the purpose for which it was collected.
Where you make an insurance claim or take out a policy with us, the retention periods set out in our policyholder Privacy Notice apply instead.
Your personal data is protected by legal rights, which include your rights to:
You can request to see what data we hold about you, there is no charge for this service.
If we change our Privacy Policy we will post the changes on this page, and may place notices on other pages of the website, so that you may be aware of the information we collect and how we use it at all times. We will also email you should we make any changes so that you may consent to our use of your information in that way.
Continued use of the service will signify that you agree to any such changes.
You also have the right to complain directly to Us about how We handle Your personal data. We will acknowledge Your complaint within 30 days and respond without undue delay.