Privacy Policy

C Boyd Law Ltd, registered office St Georges Works, 51 Colegate, Norwich, Norfolk NR3 1DD, company number 16018745, is the controller in respect of personal data we process for our own purposes. Where we act on the instructions of a client creditor, the allocation of controller and processor responsibilities is set out in our terms of business.

Data protection contact: [INSERT VERIFIED EMAIL ADDRESS].

From client creditors: business contact details, information about the account placed, and the supporting documentation supplied.

In relation to debtor businesses and their representatives: contact details, information about the account and correspondence relating to it, and information obtained from public sources such as Companies House.

From website visitors: information submitted through enquiry and case submission forms, and limited technical information necessary to operate the site securely.

We apply data minimisation. We do not request sensitive personal information unless it is necessary, and we ask that clients do not supply it unnecessarily.

To assess, progress and report on debt recovery instructions; to correspond with debtors and their representatives; to comply with legal and regulatory obligations; and to administer our own business.

Debt information and uploaded documentation are treated as confidential and are not used for marketing analytics or shared with advertising platforms.

We rely principally on legitimate interests (the recovery of sums lawfully due, and the administration of our business), the performance of a contract, and compliance with legal obligations. Where consent is relied on, it can be withdrawn at any time.

Information may be shared with the client creditor who placed the account, with legal representatives where a matter is escalated, with service providers who support our operations under written terms, and with authorities where required by law.

[INSERT VERIFIED LIST OF PROCESSORS AND HOSTING ARRANGEMENTS]

Case information is held in access-controlled systems and transmitted using secure methods. Access is limited to those who need it to progress a matter.

We retain information for as long as necessary for the purpose for which it was collected and to meet legal and regulatory requirements. [INSERT VERIFIED RETENTION PERIODS]

[INSERT VERIFIED POSITION ON ANY TRANSFERS OUTSIDE THE UK AND SAFEGUARDS APPLIED]

Individuals have rights of access, rectification, erasure in certain circumstances, restriction, objection and data portability, and the right to complain to the Information Commissioner's Office.

To exercise a right, contact [INSERT VERIFIED EMAIL ADDRESS]. We may need to verify identity before responding.