Privacy Policy
Last updated: August 2026 | Effective date: February 2025
Introduction
CM Debt Recovery ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services or website at www.cmdebtrecovery.co.uk.
Data Controller
The data controller for your personal data is:
- Name: CM Debt Recovery
- Proprietor: Craig Martindale
- Address: 3 Jubilee House, The Drive, Great Warley, Brentwood, Essex, CM13 3FR
- Email: info@cmdebtrecovery.co.uk
- ICO Registration Number: ZB866648
Personal Data We Collect
We may collect the following types of personal data when you use our services:
- Contact Details: Name, company name, email address, telephone number, postal address
- Enquiry Information: Details of debts, debtors, invoices, and related financial information
- Business Information: Company registration details (where applicable)
- Communications Data: Records of our communications with you
- Technical Data: IP address, browser type, pages visited (via cookies where consented)
How We Use Your Data
We process your personal data for the following lawful purposes under UK GDPR:
- To provide debt recovery and credit control services you have requested
- To communicate with you regarding your case or enquiry
- To comply with legal and regulatory obligations
- To maintain accurate records of our services
- To improve our services and customer experience
- To respond to enquiries and requests
Legal Basis for Processing
We rely on the following legal bases under Article 6 of UK GDPR:
- Contract Performance: Processing necessary to perform our contract with you
- Legitimate Interests: Where processing is necessary for our legitimate business interests
- Consent: Where you have given explicit consent for specific processing activities
- Legal Obligation: Where required by law
Data Sharing
We do not sell your personal data to third parties. We may share your data only in the following circumstances:
- With debtors as necessary to recover outstanding amounts on your behalf
- With professional advisors (e.g., solicitors, accountants) where required
- Where required by law or regulation
- With service providers who assist our operations (under appropriate agreements)
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Generally this means:
- Active client data: Duration of engagement plus 6 years
- Enquiry data that did not proceed: 24 months
- Financial records: 6 years from end of relevant tax year
Your Rights
Under UK GDPR, you have the right to:
- Access your personal data (subject access request)
- Correct inaccurate data
- Erase data in certain circumstances ("right to be forgotten")
- Restrict processing in certain circumstances
- Data portability
- Object to processing based on legitimate interests
- Withdraw consent where processing is based on consent
To exercise these rights, please contact us using the details above.
Cookies
Please see our separate Cookie Policy for information about how we use cookies on our website.
Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
Contact Us
If you have questions about this Privacy Policy or our use of your data, please contact Craig Martindale at info@cmdebtrecovery.co.uk or write to us at the address above.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately.