Privacy Policy

This Site is owned by Global Credit Recoveries Ltd, whose registered office is 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.

Last updated: September 2026

Global Credit Recoveries Ltd (“Global Credit Recoveries”, “GCR”, “we”, “us” or “our”) is committed to protecting your privacy and handling your personal information fairly, lawfully and securely.

This Privacy Policy explains how we collect, use, store and share personal information, the lawful bases we rely upon when processing that information, and your rights under UK data protection law, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

1. Who We Are

Global Credit Recoveries Ltd provides credit management and debt recovery services.

For the purposes of applicable data protection legislation, Global Credit Recoveries may act as a data controller or, in some circumstances, process personal information on behalf of our clients.

If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the contact details provided on our website.

2. Personal Information We May Collect

The personal information we collect and process will depend on our relationship with you and the reason we need to process your information.

This may include:

Your name, address and contact details, including telephone number and email address.
Information required to identify or verify you.
Account, reference and debt information.
Payment and transaction information.
Information relating to your communications and correspondence with us.
Information provided to us by our clients, creditors, service providers or other third parties.
Information you provide when contacting us through our website, by telephone, email or other means.
Information required to deal with complaints, disputes or legal proceedings.
Technical information relating to your use of our website, where applicable.

We will only collect and use personal information that is relevant and necessary for the purposes for which it is being processed.

3. Where We Obtain Your Personal Information

We may obtain personal information directly from you, for example when you contact us, make a payment, provide information about your circumstances or submit an enquiry.

We may also receive personal information from other sources, including:

Our clients and the organisations on whose behalf we provide services.
Creditors and their representatives.
Publicly available sources and records.
Professional advisers and service providers.
Other third parties where permitted by law.

Where we receive your personal information from another organisation, we will process that information in accordance with applicable data protection law.

4. How We Use Your Personal Information

Depending on the circumstances, we may use personal information to:

Provide credit management and debt recovery services.
Administer and manage accounts.
Contact individuals in relation to accounts and outstanding amounts.
Verify identity and maintain accurate records.
Process and record payments.
Respond to enquiries, requests, complaints and disputes.
Communicate with our clients and other relevant parties.
Prevent or detect fraud and protect our business and systems.
Establish, exercise or defend legal claims.
Comply with legal, regulatory and professional obligations.
Operate, maintain and improve our website and services.
Maintain appropriate business, financial and audit records.

We will not use your personal information for purposes that are incompatible with the purposes for which it was collected unless permitted or required to do so by law.

5. Our Lawful Basis for Processing Your Personal Information

Under UK data protection law, we must have a lawful basis for processing personal information.

The lawful basis we rely upon will depend on why we are processing your information and the circumstances involved.

Legitimate Interests

We may process personal information where it is necessary for our legitimate interests, or the legitimate interests of our clients or other third parties, provided those interests are not overridden by your rights and interests.

These legitimate interests may include:

Administering and recovering outstanding debts.
Managing accounts.
Communicating with individuals regarding accounts.
Providing credit management and debt recovery services to our clients.
Preventing and detecting fraud.
Protecting our business, systems and legal rights.
Responding to disputes and complaints.
Establishing, exercising or defending legal claims.

Where we rely on legitimate interests, we consider whether the processing is necessary and balance those interests against the rights and interests of the individual concerned.

Contract

We may process personal information where this is necessary to enter into or perform a contract with you.

Legal Obligation

We may process personal information where this is necessary to comply with a legal or regulatory obligation.

Consent

In circumstances where consent is the appropriate lawful basis, we will ask for your consent before processing your information for that particular purpose.

Where we rely upon consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

We do not rely on consent where another lawful basis is more appropriate.

6. Special Category and Other Sensitive Information

In some circumstances, we may receive or process information that is considered particularly sensitive under data protection law.

Where we process special category personal data or criminal offence data, we will only do so where we have an appropriate lawful basis and meet any additional legal requirements that apply to processing that information.

We will apply appropriate safeguards to sensitive personal information.

7. Sharing Your Personal Information

We may share personal information where necessary and lawful with organisations including:

Our clients.
Creditors and their representatives.
Service providers that assist us in providing our services.
Professional advisers, including solicitors and other legal representatives.
Courts, regulators, law enforcement agencies and public authorities where required or permitted by law.
Other organisations where disclosure is necessary to establish, exercise or defend legal claims.

We require organisations processing personal information on our behalf to handle that information appropriately and securely.

We do not sell your personal information.

8. International Transfers

In some circumstances, personal information may be transferred to or accessed from countries outside the United Kingdom.

Where this occurs, we will take appropriate steps to ensure that the transfer complies with applicable data protection law and that appropriate safeguards are in place where required.

9. How Long We Keep Your Personal Information

We will only retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, regulatory, accounting and reporting requirements and to establish, exercise or defend legal claims.

The period for which information is retained will depend on the type of information, the reason it is being processed and any applicable legal or regulatory requirements.

When personal information is no longer required, we will securely delete or anonymise it in accordance with our retention procedures.

10. Keeping Your Information Secure

We take appropriate technical and organisational measures to protect personal information against unauthorised or unlawful access, use, disclosure, alteration, loss or destruction.

Access to personal information is limited to those who have an appropriate business need to access it.

11. Your Data Protection Rights

Under UK data protection law, you have a number of rights in relation to your personal information.

Depending on the circumstances, these may include:

Right of access – You can ask us whether we process your personal information and request a copy of the personal information we hold about you.

Right to rectification – You can ask us to correct personal information that you believe is inaccurate and to complete information you believe is incomplete.

Right to erasure – In certain circumstances, you can ask us to delete your personal information.

Right to restriction of processing – In certain circumstances, you can ask us to restrict the way in which we use your personal information.

Right to object – In certain circumstances, you can object to our processing of your personal information, including processing based on legitimate interests.

Right to data portability – In certain circumstances, you may have the right to receive personal information you have provided to us in a structured, commonly used and machine-readable format or ask us to transfer it to another organisation.

Rights relating to automated decision-making – You may have certain rights where a decision that produces legal or similarly significant effects is made about you solely through automated processing.

These rights are not absolute and will not apply in every circumstance.

For example, we may be required or permitted to continue holding certain information where it is necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.

Making a request for deletion does not necessarily mean that we are legally required to delete all information we hold about you.

12. How to Exercise Your Rights

If you wish to exercise any of your data protection rights, please contact us using the contact details provided on our website.

Please provide enough information for us to identify you and understand your request. We may ask you to provide additional information to verify your identity before disclosing or changing personal information.

We will respond to valid requests within the timescales required by applicable data protection law.

You will not normally be required to pay a fee to exercise your data protection rights. However, applicable data protection law allows fees to be charged, or requests to be refused, in certain limited circumstances.

13. Complaints

If you have concerns about how we have handled your personal information, please contact us in the first instance so that we have an opportunity to investigate and respond.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Further information about your rights and how to make a complaint is available from the Information Commissioner’s Office at www.ico.org.uk.

14. Cookies and Our Website

Our website may use cookies and similar technologies to operate the website and understand how it is used.

Where consent is required for non-essential cookies, we will seek your consent before those cookies are placed on your device.

Please refer to our Cookie Policy or cookie settings for further information about the cookies used on our website and the choices available to you.

15. Third-Party Websites

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy information provided by those organisations before providing personal information to them.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, business practices or legal and regulatory requirements.

Any updated version will be published on our website, and the date at the top of this Privacy Policy will be updated accordingly.

17. Contact Us

If you have any questions about this Privacy Policy, how we process your personal information, or wish to exercise any of your data protection rights, please contact Global Credit Recoveries using the contact details published on our website.

Data protection complaints can be submitted via our designated webpage here: https://globalcreditrecoveries.com/data-protection-complaints/