Privacy Policy

Last updated: April 2026

This privacy policy explains how Brilliance Crest collects, uses, stores, and protects your personal information when you use our services or visit our website.

Who We Are

Brilliance Crest is a professional benefits assistance service operating in the United Kingdom. Our office is located at 14 Wellington Place, Leeds, LS1 4AP. We can be contacted at [email protected].

We are the data controller for the personal information we process about you. This means we determine how and why your data is handled.

Information We Collect

When you engage our services, we collect information necessary to assist with your benefits claims. This typically includes:

• Your name, address, date of birth, and contact details
• National Insurance number and other identification information
• Financial information including income, savings, and expenditure
• Employment history and current employment status
• Health information relevant to disability or health-related benefit claims
• Family circumstances including dependents and household composition
• Details about your housing situation
• Information about existing benefit claims and decisions
• Correspondence with government agencies regarding your benefits

When you visit our website, we automatically collect certain technical information including your IP address, browser type, pages visited, and time spent on pages. This helps us understand how people use our site and improve its functionality.

How We Use Your Information

We use your personal information exclusively for the purposes of providing benefits assistance services. Specifically, we use it to:

• Assess your eligibility for various benefits and social payments
• Prepare and submit benefit applications on your behalf
• Represent you in appeals and tribunal proceedings
• Communicate with the DWP, HMRC, local authorities, and other agencies
• Provide you with updates about your case progress
• Maintain accurate records of our work on your behalf
• Comply with legal and regulatory obligations
• Improve our services through anonymized analysis

We will not use your information for marketing purposes without your explicit consent. We will not sell your data to third parties under any circumstances.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract performance: We need your information to fulfill our service agreement with you
• Legitimate interests: We have legitimate business reasons to process certain information, balanced against your rights
• Legal obligation: Some processing is required by law or regulation
• Consent: For certain processing activities, we obtain your explicit permission

For sensitive information such as health data, we rely on your explicit consent or legal necessity for benefits claims purposes.

Sharing Your Information

We share your personal information only when necessary for your benefits claims:

• Government agencies including the DWP, HMRC, and local councils when handling your claims
• Tribunal services when representing you in appeals
• Medical professionals when requesting evidence for health-related claims
• Legal professionals when your case requires specialist representation

We will always inform you before sharing your information and obtain your consent where legally required. We never share data with third parties for their marketing purposes.

Data Security

We take security seriously and implement appropriate measures to protect your information:

• All electronic files are encrypted and stored on secure servers
• Physical documents are kept in locked cabinets with restricted access
• Our staff receive regular training on data protection and confidentiality
• Access to your information is limited to advisors working on your case
• We use secure communication channels when transmitting sensitive information
• Regular backups ensure data is not lost

While we implement robust security measures, no system is completely impervious to risk. We cannot guarantee absolute security but continuously work to minimize vulnerabilities.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

• Active case files are maintained for the duration of our engagement
• Closed case files are retained for six years following case completion
• Financial records are kept for seven years to comply with tax regulations
• Information required for ongoing legal obligations is retained as necessary

After retention periods expire, we securely delete or destroy your information. You can request earlier deletion in certain circumstances, subject to our legal obligations.

Your Rights

Under UK data protection law, you have several rights regarding your personal information:

• Access: You can request copies of your personal data
• Rectification: You can ask us to correct inaccurate information
• Erasure: You can request deletion of your data in certain circumstances
• Restriction: You can ask us to limit how we use your information
• Portability: You can request your data in a transferable format
• Objection: You can object to certain types of processing
• Withdrawal: You can withdraw consent where we rely on it

To exercise these rights, contact us at [email protected]. We will respond within one month. Some rights have limitations, particularly where processing is necessary for legal obligations or legitimate interests.

Cookies and Website Analytics

Our website uses cookies to enhance functionality and understand visitor behavior. Essential cookies are necessary for the site to work properly. Analytics cookies help us improve the site experience. You can manage cookie preferences through the banner displayed on your first visit.

For detailed information about cookies we use, see our separate Cookies Policy.

Third-Party Services

Our website may contain links to external sites. We are not responsible for the privacy practices of third-party websites. When you leave our site, we encourage you to review the privacy policies of any sites you visit.

Children's Privacy

Our services are designed for adults. We do not knowingly collect information from children under sixteen without parental consent. When assisting with child benefit claims or other matters involving minors, we collect information from parents or guardians acting on their behalf.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will notify existing clients by email. The updated policy will be posted on our website with a new effective date.

Questions and Complaints

If you have questions about this privacy policy or concerns about how we handle your information, contact us at [email protected] or write to us at 14 Wellington Place, Leeds, LS1 4AP.

You also have the right to lodge a complaint with the Information Commissioner's Office, the UK's data protection regulator. Visit ico.org.uk or call 0303 123 1113 for information about making a complaint.