The following information is provided to comply with the requirements of the General Data Protection Regulation.
This privacy statement describes why and how we collect and use personal data and provides information about individuals’ rights. It applies to personal data provided to us, both by individuals themselves or by others. We may use personal data provided to us for any of the purposes described in this privacy statement or as otherwise stated at the point of collection.
Data Protection Officer Details
To make a complaint or contact the data controller please email firstname.lastname@example.org
How we use your personal information
The purpose for which personal information is processed may include any or all of the following:
- deliver services and meet legal responsibilities
- verify identity where this is required
- communication by post, email or telephone
- understand needs and how they may be met
- maintain records
- prevent and detect crime, fraud or corruption
- may also need to use data to defend or take legal actions related to the above
Lawful basis for the processing
Most processing is carried out to comply with our legal obligations under statute and other regulatory obligations related to the insolvency process. We also believe our processing is for the legitimate interests of all stakeholders in the insolvency process, as they are entitled to be kept informed and may wish to engagement in the insolvency process. Where www.outofdebtfree.co.uk has engaged with a client to perform a service, we will be required to process data to provide the service in accordance with the contractual terms.
What personal information we hold
The categories are: contact details, financial information and location.
In rare cases, we may hold some special category data, e.g. trade union membership or information about individuals’ health, which will be necessary to administer the insolvency process in line with our legal obligations.
Who we share our data with
Personal data held by us may be transferred to:
- Third party organisations that provide applications/functionality, data processing or IT services to us
We use third parties to support us in providing our services and to help provide, run and manage our internal IT systems. For example, providers of information technology, cloud based software as a service provider, identity management, website hosting and management, data analysis, data back-up, security and storage services. The servers powering and facilitating that cloud infrastructure are located in secure data centres around the world, and personal data may be stored in any one of them.
- Third party partners that otherwise assist us in providing goods, services or information include, but not limited to Creditfix, Aperture Debt Solutions, Debt Support Service, Anchorage Chambers, Debt Movement, Monarch Debt Solutions LTD, TDot UK LTD, Monevo LTD and Moriarty Financial Services LTD
- Auditors and other professional advisers
- Law enforcement or other government and regulatory agencies or to other third parties as required by, and in accordance with, applicable law or regulation
- Occasionally, we may receive requests from third parties with authority to obtain disclosure of personal data, such as to check that we are complying with applicable law and regulation, to investigate an alleged crime, to establish, exercise or defend legal rights. We will only fulfil requests for personal data where we are permitted to do so in accordance with applicable law or regulation.
We use a number of different cookies on our website. If you do not know what cookies are, or how to control or delete them, then we recommend you visit http://www.aboutcookies.org for detailed guidance.
The list below describes the cookies we use on our site and what we use them for. Currently we operate an ‘implied consent’ policy which means that we assume you are happy with this usage. If you are not happy, then you should either not use this site, or you should delete the cookies having visited the site, or you should browse the site using your browser’s anonymous usage setting (called “Incognito” in Chrome, “InPrivate” for Internet Explorer, “Private Browsing” in Firefox and Safari etc.).
FIRST PARTY COOKIES
These are cookies that are set by our website directly:
You can find out more about Google’s position on privacy as regards its analytics service at http://www.google.com/intl/en_uk/analytics/privacyoverview.html
- WordPress: Our website runs the popular WordPress CMS and cookies are used to store basic data on your interactions with WordPress, and whether you have logged into WordPress. We use a session cookie to remember your log-in for you if you are a registered user and we deem these as being strictly necessary to the working of the website. If these are disabled then various functionality on the site will be broken.
More information on session cookies and what they are used for at http://www.allaboutcookies.org/cookies/session-cookies-used-for.html
How long we retain your personal information
We retain personal data for as long as is necessary to achieve the purpose listed above and for any other permissible related purpose. For example, we retain most records until the time limit for claims arising from the activities has expired or otherwise to comply with statutory or regulatory requirements regarding the retention of such records.
The GDPR provides the following rights for individuals:
- Right to inform
This privacy notice meets our requirement to inform you of our processing of your data.
- Access to personal data
You have a right of access to personal data held by us as a data controller. This right may be exercised by contacting us at email@example.com We will aim to respond to any requests for information promptly, and in any event within one month.
- Amendment of personal data
To update personal data submitted to us, you may email us firstname.lastname@example.org or, where appropriate, contact us via the relevant website registration page or by amending the personal details held on relevant applications with which you registered.
- Rights that do not apply in these particular circumstances
Not all of the rights under the GDPR are available as one of the reasons we are holding your data is on the basis of it being a legal obligation and therefore the right to erasure, data portability and to object do not apply.
Right to withdraw consent
You can withdraw your consent to be contacted by emailing email@example.com
Changes to our privacy statement
We keep this privacy statement under regular review and will place any updates on our website. Paper copies of the privacy statement may also be obtained by emailing firstname.lastname@example.org
This privacy statement was last updated on 24 May 2018.
Should you want to complain about our use of personal data, please contact us by emailing email@example.com
You also have the right to lodge a complaint with the Information Commissioner’s Office (“ICO”) (the UK data protection regulator). For further information on your rights and how to complain to the ICO, please refer to the ICO website.
Who provided the personal data
The personal data we have used to contact you was provided by the company/individual (or persons acting on their behalf) on whose instructions we are acting or in relation to which our insolvency practitioner has been appointed. We also access information from the Registrar of Companies and other similar public-access data providers.