Last updated: 27 September 2026
Data Controller
PIPexpert is operated by Karol Slusarczyk trading as Benefits Expert, a self-employed sole trader registered with HMRC in the United Kingdom. As a sole trader, Karol Slusarczyk is the data controller for the purposes of UK GDPR.
Business address: Redditch, United Kingdom. Contact: support@pipexpert.co.uk.
We are registered with the UK Information Commissioner's Office (ICO) under the Data Protection (Charges and Information) Regulations 2018. Our ICO registration number is ICO:00014179042. You can verify our registration on the ICO public register.
What Data We Collect
When you use our report generator, you enter your name, health conditions and a description of how they affect your daily life. If you purchase a paid plan, we also collect your email address (via Stripe) to deliver your report.
If you choose to provide your email address in our free preview tool, our Mandatory Reconsideration letter generator, our free PDF downloads, our answer checker, our Carer's Allowance check, our PIP review reminder, our decision letter translator, our CRMR1 form filler or another of our free tools that asks for it, we collect that email so we can send you the requested guidance and occasional follow-up PIP tips. Giving us your email is optional: the free preview, the answer checker, the Carer's Allowance check, the PIP review reminder, the decision letter translator and the CRMR1 form filler all work without one.
The Carer's Allowance check runs in your browser and sends nothing unless you ask us to email you the result. If you do, the result shown on screen is sent to our server once so we can email it to you. It includes the answers that decide the result, such as the benefit the person being cared for gets, the hours of care, the carer's earnings and the decision date. We use it only to send that email: it is not stored on our website servers, it is not copied into the notification we receive when someone signs up and it is not added to our mailing lists. Like any email we send, the sent message stays in our Zoho mailbox, and we delete it if you ask.
The PIP review reminder works out your dates in your browser and sends nothing unless you ask us to email them. If you do, only dates are sent: your award end date and, where it applies, your review date (the one from your letter, or the 10-year review point of an ongoing award). Our server works out the reminder date from them. We keep your email address and these dates in Zoho Campaigns to send you the reminder on that date and occasional PIP guidance. Together they show that you, or someone you help, get PIP, so we treat them as health-related information and ask for your explicit consent first. We keep the dates until the reminder has been sent and your award end date, if you gave one, has passed, or until you unsubscribe if that is sooner. The dates are also copied into the notification we receive when someone signs up, so we can check that your reminder has been set up, and the email we send you with your dates stays in our Zoho mailbox like any email we send. We delete both if you ask.
The decision letter translator runs in your browser: what you paste is never sent to us or stored. If you ask us to email the explanation, we send only the list of explanations shown, the type of letter, your country and the letter date you entered, never the text you pasted. We use them only to write that email: they are not stored on our website servers, not copied into the notification we receive and not added to our mailing lists.
The CRMR1 form filler runs in your browser, and the completed form is made on your device: your name, National Insurance number, address, phone numbers and anything you write in the form are never sent to us or stored. If you ask us to email you what to do next, we receive your email address and only three things from the tool: the date on your decision letter, whether you are asking after the usual month and whether you are filling in the form for someone else. We use them only to write that email: they are not stored on our website servers, not copied into the notification we receive and not added to our mailing lists. Like any email we send, the sent message stays in our Zoho mailbox, and we delete it if you ask.
The paid Carer's Allowance Pack is made from the answers in the Carer's Allowance check and a few details you add for the letter: your name and the name of the person you care for (both optional), the award dates and any hospital stays, breaks in caring, other jobs or trips abroad you choose to list and the email address for your copy. If you tick the box before paying, your check answers are kept in your own browser tab (session storage) while you are on the payment page, so you do not have to type them again. They stay on your device, and the page deletes them once the pack is made. When you press "Make my pack", and only after you tick the consent box, the answers and details are sent to our generation system to write the pack's wording. The two names are added to the pack in your browser and are not sent to the generation processor. The finished pack is emailed to you from our Zoho mailbox. Nothing is stored on our website servers; the sent email stays in our Zoho mailbox like any other, and we delete it if you ask. Stripe handles the payment, as for our other products.
Our website also automatically captures limited technical context when you submit a form: the page you were on, the website that referred you to PIPexpert and any tracking parameters in the URL (such as UTM tags or ad-click identifiers). This helps us understand which content and channels are useful to claimants. No browser fingerprinting, no cross-site tracking.
Special Category Data
The health information you provide is special category personal data under Article 9 of the UK GDPR. We process this data under Article 9(2)(a) - explicit consent, which you give by ticking the consent box before we generate your report, analyse your decision letter scores in our decision analyser, email you your Carer's Allowance check result (which names the benefit the person being cared for gets), email you the explanation of your decision letter, email you the next steps for your CRMR1 form, keep your PIP review dates to send you a reminder or make your Carer's Allowance Pack. If the information is about someone else, please make sure they are happy for you to share it.
You can withdraw consent at any time by emailing support@pipexpert.co.uk. Withdrawal does not affect processing already carried out.
How We Process Your Data
Your data is sent over HTTPS to our generation system and used solely to produce your personalised guidance. Your inputs are not retained or used for any further purpose, and we do not share them with anyone except the processors listed below.
Marketing Communications (Opt-In Only)
If you provided your email address in our free preview tool, our Mandatory Reconsideration letter tool, our free PDF downloads, our answer checker, our Carer's Allowance check, our PIP review reminder, our decision letter translator or another of our free tools that asks for it, we may send you occasional emails containing PIP form tips, descriptor explanations, evidence checklists and updates about our paid products. We process your email under Article 6(1)(a) of the UK GDPR - consent, which you give by entering your email address into the form (alongside the on-page notice that explains what you will receive).
We never share, sell or rent your email to anyone else. You can unsubscribe at any time by:
- Replying "unsubscribe" to any email we send you, or
- Emailing support@pipexpert.co.uk with "unsubscribe" in the subject line.
If you have not interacted with any of our emails for 24 months, we will automatically remove your address from our list to avoid emailing inactive contacts.
Third-Party Processors
- Stripe (payment) - handles card payments; we never see card details.
- Report generation processor - your personalised guidance text is generated using Anthropic's commercial API. Under its commercial terms your inputs are not used to train AI models, are retained by the provider only for a strictly limited period and are handled under a data processing agreement that requires confidential handling, prohibits any further use and incorporates the safeguards UK GDPR requires for transfers outside the UK. Questions about this arrangement are welcome at support@pipexpert.co.uk.
- Zoho Mail (email) - delivers your report and stores support correspondence.
- Zoho Campaigns (email lists) - holds the email addresses you opt in to give us and sends our occasional PIP tips emails.
- Vercel (hosting) - serves the website and keeps short-term request logs (typically 30 days).
- Google Analytics & Google Ads (optional, only with cookie consent) - usage statistics and advertising performance.
- Microsoft Advertising (optional, only with cookie consent) - advertising performance.
What We Don't Do
We do not sell your data. We do not share it with third parties for marketing. We do not use the health information you enter into the generator for any purpose other than producing your guidance and supporting you afterwards. Email addresses you opt in to give us are used only by PIPexpert to send you PIP-related guidance and product updates - never passed to anyone else.
Cookies
Essential cookies keep the site working. If you choose "Accept all" on the cookie banner, Google Analytics, Google Ads and Microsoft Advertising load. Analytics tags never load without your explicit consent. Change your preference by clearing this site's local storage.
Our homepage has an embedded YouTube video that loads only when you press play, using YouTube's privacy-enhanced mode. Until then, nothing is loaded from YouTube or Google. When you press play, YouTube (Google) receives your IP address and may set cookies, under Google's privacy policy.
Data Retention
Your input (conditions, description, National Insurance Number if entered) is not retained on our application servers after the report is generated.
Generated reports are sent only to your email address - we do not BCC, archive or otherwise keep a copy on our side.
Stripe retains payment records for 7 years for UK financial regulations. Vercel request logs are typically kept for 30 days and contain no report content. Support emails you send us remain in our Zoho mailbox until you ask us to delete them.
Email addresses you opt in to give us (via the free preview, the MR letter tool, the free PDF downloads, the answer checker, the Carer's Allowance check, the PIP review reminder, the decision letter translator or another of our free tools) are kept in our Zoho mail folders and Zoho Campaigns mailing lists until you unsubscribe, or for a maximum of 24 months from your last interaction with our emails - whichever comes first. If you asked for a PIP review reminder, your email address and dates are kept until the reminder has been sent and your award end date, if you gave one, has passed, which can be more than 24 months away, unless you unsubscribe first. The copies of those dates in our Zoho mailbox (the sign-up notification and the email we sent you) are deleted if you ask.
Your Rights Under UK GDPR
You have the right to:
- Access your personal data (Subject Access Request)
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Port your data to another service
- Object to processing
- Withdraw consent at any time
To exercise any of these rights, email support@pipexpert.co.uk. We will respond within one month.
Complaints
If you believe we have mishandled your data, you can complain to the Information Commissioner's Office (ICO):
Changes to This Policy
We may update this policy as the service evolves or as regulations change. Significant changes will be communicated by email to active users and announced on the homepage.