Privacy notice

Version evenpay-v1.11, 22 October 2026. Approved wording from the Site Wording and Policy Pack (evenpay-v1.1, 3 September 2026), with the advertising cookies section added, Google added as a second advertising recipient on 14 September 2026, the anonymous count of visits to each step added on 17 September 2026, the record we keep of anyone who asks us to stop contacting them added on 21 September 2026, and the reference your browser keeps once you have filled in the first screen of the details form added on 23 September 2026. On 23 September 2026 it also says that we record whether the emails and texts we send about your claim are delivered, opened and clicked. On 30 September 2026 TikTok was added as a third advertising recipient, and on 1 October 2026 the fourth cookie TikTok’s pixel sets was named. On 22 October 2026 Reddit was added as a fourth advertising recipient.

Who we are

EvenPay is a trading style of Solvo Solutions Ltd, a claims management company authorised and regulated by the Financial Conduct Authority (FRN 1013195). We are registered in England and Wales (company no. 14760023); our registered office is Office 116 Regents Pavilion, Moulton Park Industrial Estate, Northampton, NN3 6BJ. Our ICO registration number is ZB675050.

Solvo Solutions Ltd is the data controller for the information you give us on this site. Our data protection lead is Reece Bailey. Contact compliance@solvosolutions.co.uk.

What we collect

Only what is needed to check your eligibility and, if you proceed, for Harcus Parker Limited to act for you: which supermarket you work or worked for; whether your role was hourly-paid and in-store; whether you still work there or when you left; where you live; your title, name, date of birth, email address, mobile number and address. We also record how you arrived at this site and the details of your consent: the date and time, your IP address, the page you were on, your device type, and the version of the wording you agreed to. Separately, we count which steps of the check and the signing page each visit reaches, without cookies and without recording who you are (see “Counting visits”). If we email or text you about your claim, we also record whether each message was delivered, opened and clicked.

We do not collect any special-category data, and we do not ask you about anything else.

Why we use it, and on what basis

To check your eligibility and refer you to Harcus Parker Limited, with your consent (UK GDPR Article 6(1)(a)), which you give by ticking the consent box on the form. You can withdraw it at any time (see “Your rights”).
To keep the site secure and prevent fraud: our legitimate interests (Article 6(1)(f)).
To keep the records the law and our regulators require: our legal obligations (Article 6(1)(c)).
To measure our advertising and reach people who have visited this site, only if you accept advertising cookies on the banner (consent, Article 6(1)(a)). See “Advertising cookies” below.
To count how many visits reach each step of the check and the signing page, so we can see where people stop and fix what is not working: our legitimate interests (Article 6(1)(f)). See “Counting visits” below.
To keep a record of anyone who asks us to stop contacting them, so that we do not contact them again: our legal obligations (Article 6(1)(c)).
To see whether the emails and texts we send about your claim reach you and are read, so that we stop sending what is not being read: our legitimate interests (Article 6(1)(f)). An email carries a small image that loads when it is opened, and its links pass through our email provider so that the click can be counted.

We use your information only to complete your claim journey. We do not use it for marketing. We will not add you to any marketing list, and we will not contact you about anything other than your claim.

Who we share it with

Harcus Parker Limited, solicitors (SRA No. 653501), who assess and, if you instruct them, run your claim. Once you instruct them they become the data controller for your claim, and their own privacy notice applies.
Service providers who work for us, for example the hosting of this site and the sending of our emails and texts about your claim, under written contracts that require them to process your information only on our instructions and to keep it secure.
Regulators, courts or law enforcement, where the law requires.
Meta Platforms Ireland Limited, which runs Facebook and Instagram, only if you accept advertising cookies. See “Advertising cookies” below for exactly what Meta receives.
Google Ireland Limited, which runs Google, YouTube and Gmail, only if you accept advertising cookies. See “Advertising cookies” below for exactly what Google receives.
TikTok Technology Limited and TikTok Information Technologies UK Limited, which run TikTok, only if you accept advertising cookies. See “Advertising cookies” below for exactly what TikTok receives.
Reddit, Inc., which runs Reddit, only if you accept advertising cookies. See “Advertising cookies” below for exactly what Reddit receives.

We do not sell your information, and we do not share it with anyone else.

Cookies

We use essential cookies and fraud-prevention technology to verify the legitimacy of enquiries and to record how you arrived at this site. Your browser also keeps your cookie choice (evenpay_consent) so we do not ask again, your request not to be counted (evenpay_nocount) if you make one, during the signing step, the answers you gave in the check until you close the tab, and, once you have filled in the first screen of the details form, a reference to that save until you close the tab, so a link we send you can bring you back to where you stopped. These are needed for the site to work and are not used for anything else.

Counting visits

When a page of the check or the signing step loads, our site gives that visit a random number that lasts only until you leave the page and is never saved on your device. As you go through, the page tells our own server which step the visit reached: for example which option was picked for a question, that it reached the form, that the form could not be sent because a field was missing, or that it stopped because the rules did not fit. It also records which of our adverts or messages the visit came from, and the name of the website the visit arrived from, if any (the site’s name only, never the page you were on there).

It does not record your name, your contact details, your date of birth, anything you type, your IP address or your browser type, so it cannot be linked to you and it is not used to recognise you on another visit. Nothing is sent to Meta, Google, TikTok or Reddit. We keep these counts for 13 months, then delete them.

You can switch this off at any time with “Don’t count my visits” in the footer of the check and the signing page, or here: . Your browser remembers the request. If your browser sends the Global Privacy Control signal, we treat that as the same request.

Advertising cookies

When you first visit, a banner offers two choices of equal standing: Reject non-essential, and Accept all. Nothing is set until you choose, and you can change your choice at any time from the “Cookie choices” link in the footer of any page.

If you choose Accept all, Meta’s pixel sets two advertising cookies in your browser, _fbp and _fbc, which last up to 90 days and let Meta recognise the browser that clicked one of our adverts. Our own site also remembers, for 7 days, which of our adverts you last clicked (evenpay_ad), so that if you come back by typing our address we still know which advert brought you. It holds the advert's name and the click reference the advertising platform added to the link, nothing about you, and Reject non-essential removes it. We then tell Meta when someone visits, starts the check, completes it, or signs the funding agreement. For completing the check and for signing, our server also sends Meta a scrambled (hashed) form of your email address, mobile number, name, town and postcode, together with those cookie values, your IP address and your browser type. Meta uses these to match the event to its own users so that we can measure which adverts work and show our adverts to people who have visited this site. We receive nothing back about you personally, only counts.

If you choose Accept all, Google’s tag also sets advertising cookies beginning _gcl_, which let Google recognise the browser that clicked one of our adverts on Google, YouTube, Discover or Gmail. We then tell Google when someone completes the check. Google receives the fact that a check was completed, the identifier of the advert click that brought you here, and a one-off reference number for that submission so the same completion is never counted twice. We do not send Google your name, email address, mobile number or postcode: Google’s enhanced conversions feature, which would do that, is switched off on our account. We receive nothing back about you personally, only counts.

If you choose Accept all, TikTok’s pixel also sets advertising cookies (_ttp, ttclid, ttcsid and _tt_enable_cookie), which last up to 13 months and let TikTok recognise the browser that clicked one of our adverts on TikTok. We then tell TikTok when someone visits, starts the check, completes it, or signs the funding agreement. With each of these TikTok receives the address of the page, which supermarket was chosen, and a one-off reference number so the same event is never counted twice, together with your IP address and browser type, as any site you load content from does. We do not send TikTok your name, email address, mobile number or postcode. Automatic advanced matching, a TikTok feature that would collect them from the form, is switched off for our pixel. We receive nothing back about you personally, only counts.

If you choose Accept all, Reddit’s pixel also sets advertising cookies (_rdt_uuid and _rdt_cid), which last up to 90 days and let Reddit recognise the browser that clicked one of our adverts on Reddit. We then tell Reddit when someone visits, starts the check, completes it, or signs the funding agreement. With each of these Reddit receives the address of the page and a one-off reference number so the same event is never counted twice, together with your IP address and browser type, as any site you load content from does. We do not send Reddit your name, email address, mobile number or postcode. Automatic advanced matching, a Reddit feature that would collect them from the form, is switched off for our pixel. We receive nothing back about you personally, only counts.

If you choose Reject non-essential, no advertising cookie is set and nothing is sent to Meta, Google, TikTok or Reddit, from your browser or from our server. If you change from Accept all to Reject, those cookies are removed and no further events are sent. Meta’s own handling of the data it receives is described in its privacy policy at facebook.com/privacy, Google’s at policies.google.com/privacy, TikTok’s at tiktok.com/legal/page/eea/privacy-policy/en, and Reddit’s at reddit.com/policies/privacy-policy.

Where it is kept and how it is protected

Your record is held in Solvo’s own systems in the United Kingdom. It is encrypted in transit and at rest, and access is limited to named, trained staff on a need-to-know basis. If a breach affecting your information ever occurs, we will notify the Information Commissioner’s Office within 72 hours where required and inform Harcus Parker within 24 hours.

How long we keep it

If you are referred to Harcus Parker: six years from the referral. If your enquiry is incomplete or you are not eligible: twelve months, after which it is deleted.

If you ask us to stop contacting you, we keep a record of that request, with your email address and mobile number, after the rest of your information is deleted. Without it we could not be sure we never contact you again.

Your rights

You can ask us for a copy of your information, ask us to correct or delete it, object to or restrict how we use it, and withdraw your consent at any time. Where your request concerns Harcus Parker’s handling of your claim, we will pass it to them within one business day. Contact compliance@solvosolutions.co.uk.

You also have the right to complain to the Information Commissioner’s Office: ico.org.uk · 0303 123 1113.

Changes to this notice

This is version evenpay-v1.10, dated 1 October 2026. If we change it, the version number changes and the new version is published on the site.