Commercial Collection Services Limited t/a CCSCollect (CCS) take the use of personal data and privacy very seriously and are committed to ensuring that your data is used fairly and lawfully. For the purposes of the General Data Protection Regulation (GDPR), CCS is the data processor of your data. We are acting on behalf of the original creditor or owner of the account.

BASIS FOR USING YOUR PERSONAL DATA

We are processing your data based on our legitimate business interests.

This privacy policy explains how CCS will use, store and share your personal data.

HOW WE OBTAIN PERSONAL DATA

CCS receives personal data about you from its clients when they instruct CCS to act on their behalf.

We may also obtain information from credit reference agencies. In addition we may also collect information from you or from your appointed representative through the use of our website and from communications between us such as within telephone calls, letters or emails.

CATEGORIES OF PERSONAL DATA

The personal data that we collect and receive from our client, third parties, from yourself and your personal representatives may include any or all of the following: your name, address, date of birth, relevant account reference numbers, e-mail address, phone numbers, debt information, payment history, payment details, credit reference information, your employment status, vehicle registration, NI number and any other details relating to your account.

Each time you visit our website we may automatically collect information and personal data about your computer for system administration, including where available your IP address, operating system and browser type. We may use a third party service to help us analyse how users use the site (including behaviour patterns and the tracking of visits across multiple devices), to establish more about our website users and to assist us in developing our website and the services we offer.

HOW WE USE YOUR PERSONAL DATA

Our use of your personal data is for the legitimate interests of our business and all data CCS receives is processed in accordance with this privacy policy. We will not share your information with other companies for sales or marketing purposes.

We may process any personal data obtained in accordance with this policy in the following ways:

• For debt collection purposes and to help us deal with your account in a manner that is most appropriate to your individual circumstances.
• To allow you to make a payment using our website
• To locate you and to check/update your contact details
• To update our client with personal data we have obtained about you
• For administration purposes including that which supports our website
• To improve our website and its content
• To allow you to use any interactive features of our service
• To prevent money laundering and fraud.

DISCLOSURE OF YOUR PERSONAL DATA TO THIRD PARTIES

We may share your personal data with our suppliers who provide goods and services to us to enable them to provide these to us.  These suppliers are our data processors and may only use your personal data in the way we specify.

Your personal information will not be shared with non-connected third parties i.e. marketing or advertising companies

We may share your personal data with third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use or to protect the rights, property, or safety of CCS, our clients, our employees, agents and subcontractors or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection.

Our website contains links to the websites of third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies or your use of those websites.

SENSITIVE PERSONAL DATA

The GDPR defines certain personal data as ‘sensitive’ such as personal data regarding your ethnic origin, physical and mental health. We will not ask you to disclose any sensitive data but you may voluntarily give such personal data to us. Any use of or sharing of your sensitive personal data will be on the basis of your consent or if we are required or permitted to do so under the GDPR.

HOW WE STORE AND SECURE DATA

We will retain your information for no longer than 2 years from the date of account closure, in accordance with the recommendations set out in the GDPR. All information that you provide to us is stored on secure servers.

In addition we seek to protect the privacy of your information at all times when you visit our website; however, if you choose to send personal information to us via our website the internet is not always completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website.

WHERE WE PROCESS YOUR PERSONAL DATA

The data that we collect from you will not be transferred to or stored anywhere outside of the European Economic Area (EEA).

COOKIES

This website uses cookies which are small text files that are placed on your device to help the website provide a better user experience. Cookies are used to retain user preferences, store information for things like shopping carts, and provide anonymous tracking data to third party applications like Google Analytics. Cookies will usually make your browsing experience better; however, you may prefer to disable them. The most effective way to do this is to disable cookies in your browser. The Help section of your browser should offer assistance or visit the About Cookies website which offers further guidance.

RECORDED TELEPHONE CALLS

For your assurance, all calls between CCS and its customers are recorded for training and quality purposes.

CHANGES TO THIS POLICY

We may revise these terms of use at any time by amending this page. Please check this page on our website from time to time to take notice of any changes we made, as they are binding on you.

ACCESS TO PERSONAL DATA

You have the right to access personal data held about you by making what is called a Subject Access Request (SARS) If you would like more information about this process or would like to contact us about any aspect of this privacy policy then please contact our Data Protection Officer:

The Data Protection Officer, Commercial Collection Services Limited, Norfolk House, Wellesley Road, Croydon, Surrey, CR0 1GR