PRIVACY POLICY

This Privacy Policy demonstrates that Commercial Recoveries (UK) Ltd takes General Data Protection Regulation (GDPR) very seriously and offers guidance as to our use of the personal information we may hold about you, as well as an understanding of our legal right to process your data, and your rights as a data subject.

Who we are:

Commercial Recoveries (UK) Ltd t/a Commercial Recoveries services your account on behalf of its client, your data controller, and receives personal data about you, along with your business data, when its client instructs Commercial Recoveries to act on their behalf with regard to commercial debt collection. Commercial Recoveries is the data processor.

What data do we process?

As we act on a client’s behalf as a Servicer, we use your information only for the purposes of commercial debt collection and debt administration.

  • Names, titles and aliases
  • Contact details such as telephone numbers, addresses and email addresses
  • Account information, such as records of payments to Commercial Recoveries in relation to debt recovery

How do we use your personal data?

  • For the purposes of commercial debt collection services, including establishing location and verification of aforementioned contact details
  • For administration and client updates
  • To maintain our own accounts and records

What is the legal basis for processing your personal data?

Our processing of this information is based on the legitimate interests we pursue as a commercial debt collection agency.

Sharing your personal data:

We do not disclose your personal data except in the following limited circumstances:

We may employ carefully vetted third party organisations to:

  • facilitate our Service
  • provide the Service on our behalf
  • perform Service-related services, for example, a reputable firm of solicitors for legal services
  • assist us in managing your account and/or maintaining accuracy of the information we hold
  • provide us with specialised services to assist in the running of our business, such as third parties for printing and sending letters or digital communications and providing efficient and secure IT support

Our website contains links to third party websites. These websites have their own respective privacy policies, and as such, we do not accept responsibility or liability for their privacy policies.

Lastly, we may also disclose your personal information to third parties if we are under a legal obligation to do so, or in order to enforce or apply our terms of use to protect or rights, property or safety.

How long do we keep your personal data?

We will keep some records permanently if we are legally required to do so. We may keep other records for an extended period of time. For example, it is current best practice to keep financial records for a minimum period of 7 years to support HMRC audits. In general we will endeavour to keep personal data only for as long as we need it. We may delete it when it is no longer required.

Your rights and your personal data:

When exercising any of the following rights listed below, in order to process your request, we may need to verify your identity for your security. In such cases, we will need you to respond with proof of your identity before you can exercise these rights.

You have the following rights with respect to your personal data:

  • The right to access information we hold on you

At any point you can contact us to request the information we hold on you, as well as why we have that information, who has access to that information, and where we obtained the information from. Once we have received your request, we will respond within one month. There are no fees or charges for the first request, but additional requests for the same data may be subject to an administration fee.

  • The right to correct and update the information we hold on you

If the personal data we hold on you is out of date, incomplete or incorrect, you can inform us and your data will be updated.

  • The right to have your information erased

If you feel that we should no longer be using your personal data, or that we are illegally using your data, you can request that we erase the data we hold. When we receive your request, we will confirm whether the data has been deleted, or the reason why it cannot be deleted – For example, because we need it for our legitimate interests or a regulatory purpose(s).

  • The right to object to processing of your data

You have the right to request that we stop processing your data. Upon receiving the request, we will contact you and let you know if we are able to comply, or if we have legitimate grounds to continue to process your data. Even after you exercise your right to object, we may continue to hold your data to comply with your other rights, or to bring or defend legal claims.

  • The right to data portability

You have the right to request that we transfer some of your data to another controller. We will comply with your request, where it is feasible to do so, within one month of receiving your request.

  • The right to withdraw your consent to the processing at any time, for any processing of data for which consent was sought
  • The right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office

Transfer of data abroad:

Your data will not be transferred abroad.

Contact details:

The Data Protection Officer, Commercial Recoveries (UK) Ltd, Westbury Suite, 99 Canterbury Road, Whitstable, Kent, CT5 4HG Email: enquiries@commercialrecoveries.com