Privacy Policy

---

Data Protection

Revised March 2025

The following should be followed to ensure compliance with the Data Protection Act 1998

• Records      must be used fairly & lawfully
• All      records must be held and maintained on the company “system”
  • Specifically,       customer files and working files on XL spreadsheets
  • Hard       copy letters in the appropriate client files
• Hard      copy files / correspondence containing private and individual’s details      should only be destroyed using a regulated / accredited third party      organisation or internal shredding.
• No      records are to be held in un-regulated areas and under no circumstances      should they be taken out of the office and left at home or in cars. The      only exception to this is when doorstep visits are arranged or when      visiting clients to discuss individual files.
• Personal      details must not be passed to any third party without the debtors express      permission (either in writing or verbally)
• If      a credit or debit card payment is taken over the phone, this must be      entered onto the card payment form. Once the details have been processed      by the client then the form must be shredded immediately.
• Credit      or debit card details will not be recorded on any other file or retained      for future re-use.
• When      undertaking credit references on individuals, their permission must be      gained prior to obtaining the report. They must be advised that we will      undertake a credit report on them which will subsequently be recorded on      their credit report.
• No      advice should be given to an individual who says that they have financial      problems. They should be told that whilst we cannot give direct advice,      they should contact either their local Citizens Advice Bureau or the      National Debtline (0808 808 4000 – www.nationaldebtline.co.uk)
• Under      no circumstances must an individual’s details or circumstances be      discussed with any person or organisation without their written      permission. E.g. debt management companies acting on behalf of a debtor or      a Citizens Advice Bureau
• Complaints      received regarding Data Protection will be dealt with under the company      Complaint Handling Procedures
•  We use a major UK Credit reference agency called Transunion when undertaking searches. Their privacy policy is available using the following link: Credit Reference Agency Information Notice (CRAIN) | An Information & Insights Company 

Gary Fosbrook, Director

March 2025