How Business Debt Recovery handles personal data, what we collect and why, and how to complain about it.
Effective 30 August 2026.
Business Debt Recovery is a trading style of Buzz Legal Ltd, registered in England and Wales, company no. 17078192, registered office 16 Aylmer Parade, Aylmer Road, London N2 0PE. We are the data controller for personal data collected through this website. You can reach us at hello@businessdebtrecovery.co.uk.
When you send an enquiry: your name, business name, email address, telephone number if you give one, and whatever you tell us about the debt — which will normally include information about a third party, namely the debtor.
When you ask for a guide or a calculation: your email address, and the figures you entered if you asked us to email them to you.
Automatically: our hosting provider records standard server logs including IP address for security and to serve the site. We do not run analytics and this site sets no cookies — see below.
This website sets no cookies and runs no analytics. There is no tracking pixel, no advertising tag and no third-party script beyond the web font service that delivers our typeface. That is a deliberate choice rather than an oversight, and it is why you have not been asked to accept anything.
To answer your enquiry and to provide the services you ask for — necessary for the performance of a contract, or to take steps at your request before entering one. To send you a guide or calculation you asked for — consent, which you can withdraw at any time. To meet our legal and regulatory obligations, including anti-money-laundering checks where they apply — legal obligation. To keep records of work done and advice given — our legitimate interests in running and defending our business.
To recover a debt we necessarily process personal data about the person or people who owe it. Where the debtor is an individual or a sole trader, that is their personal data and they have rights over it. We rely on legitimate interests — the recovery of a lawfully owed debt is a recognised legitimate interest — and we process no more than is needed for it.
Where a matter needs reserved legal work, with RHF Solicitors (SRA no. 324115). With courts, enforcement agents and the debtor, to the extent necessary to pursue the debt. With our own professional advisers and insurers where necessary. With our hosting and email providers as processors. We do not sell personal data and we do not share it for anyone else's marketing.
Enquiry correspondence that does not become a matter: up to two years. Files for matters we act on: six years from the end of the matter, in line with the limitation period and our insurers' requirements. Marketing consents: until you withdraw them.
You have the right to ask for a copy of your personal data, to have inaccurate data corrected, to ask for erasure or restriction in some circumstances, to object to processing based on legitimate interests, and to data portability where it applies. Where we rely on consent you can withdraw it at any time. Ask us at hello@businessdebtrecovery.co.uk.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first.
This policy was drafted with AI assistance and reviewed internally. It reflects how we actually operate. It is not a substitute for advice on your own data protection obligations.
Tell us what you are owed and who owes it. You get back what the debt is actually worth once interest and compensation are added, what we would do first, and the fixed fee for doing it.