Case Management Privacy Notice

1. Relationship to Main Privacy Notice

This notice should be read alongside the Harrison Associates Privacy Notice, which provides overarching information on how personal data is handled.

2. Who We Are

Harrison Associates, a trading name of Jan Harrison Limited, acts as a data controller in the delivery of case management services.

In certain circumstances, where instructed by solicitors, insurers or other parties, Harrison Associates may act as a data processor and will process personal data only in accordance with those instructions.

Contact: info@harrison.associates

3. Purpose of Processing

We process personal data to deliver case management and rehabilitation services, including coordinating care and supporting recovery following injury.

4. The Personal Data We Process

Personal Data

• Name, date of birth, contact details
• Family or representative details
• Education or social context (where relevant)
• Solicitor and instructing party details

Special Category Data

• Medical records and clinical information
• Rehabilitation needs, care plans, and assessments
• Psychological and functional information

Case Data

• Immediate Needs Assessments
• Case notes and correspondence
• Care coordination records

5. Lawful Basis

We process personal data under:

• Article 6(1)(b) – performance of a contract
• Article 6(1)(c) – compliance with legal obligations
• Article 6(1)(f) – legitimate interests (service delivery and coordination)

Special category data is processed under:

• Article 9(2)(h) – provision of health or social care
• Article 9(2)(f) – establishment, exercise or defence of legal claims

Consent is not relied upon as the primary basis for processing.

6. How Data Is Used

• Delivering case management services
• Coordinating multidisciplinary care
• Instructing healthcare professionals
• Preparing reports and assessments
• Communicating with solicitors and stakeholders
• Meeting legal and regulatory obligations

7. Data Sharing

We may share data with:

• Healthcare professionals and treatment providers
• Solicitors, insurers, and instructing parties
• Deputies and authorised representatives
• IT and secure hosting providers

All sharing is limited to what is necessary and subject to appropriate safeguards.

8. Data Retention

Data is retained for:

• Duration of case management
• Applicable legal and regulatory requirements
• Relevant limitation periods for legal claims

Retention may exceed six years where required.

9. Your Rights

You have rights including access, rectification, restriction, objection, and portability.

These rights may be limited where processing is required for:

• Legal claims
• Regulatory obligations

10. Contact and Complaints

Contact: info@harrison.associates

You may complain to the Information Commissioner’s Office.

Last updated: April 2026