How Business Debt Recovery handles personal data, what we collect and why, and how to complain about it.
Effective 30 August 2026.
Business Debt Recovery is a trading style of Buzz Legal Ltd, registered in England and Wales, company no. 17078192, registered office 33 Waters Edge Business Park, Modwen Road, Salford M5 3EZ. We are the data controller for personal data collected through this website. You can reach us at hello@businessdebtrecovery.co.uk.
When you send an enquiry: your name, business name, email address, telephone number if you give one, and whatever you tell us about the debt — which will normally include information about a third party, namely the debtor.
When you ask for a guide or a calculation: your email address, and the figures you entered if you asked us to email them to you.
Automatically: our hosting provider records standard server logs including IP address for security and to serve the site. If you accept analytics on the banner, Google Analytics also records the pages you visit — see below.
We use Google Analytics to see which pages are useful, and it is switched off until you accept it. Nothing is loaded and no analytics cookie is set unless you say yes on the banner; declining is remembered so you are not asked again. IP addresses are anonymised and we do not run advertising or personalisation tags.
The only other third-party request this site makes is to the web font service that delivers our typeface.
To answer your enquiry and to provide the services you ask for — necessary for the performance of a contract, or to take steps at your request before entering one. To send you a guide or calculation you asked for — consent, which you can withdraw at any time. To meet our legal and regulatory obligations, including anti-money-laundering checks where they apply — legal obligation. To keep records of work done and advice given — our legitimate interests in running and defending our business.
To recover a debt we necessarily process personal data about the person or people who owe it. Where the debtor is an individual or a sole trader, that is their personal data and they have rights over it. We rely on legitimate interests — the recovery of a lawfully owed debt is a recognised legitimate interest — and we process no more than is needed for it.
Where a matter needs reserved legal work, with AD Solicitors (SRA no. 8011228). With courts, enforcement agents and the debtor, to the extent necessary to pursue the debt. With our own professional advisers and insurers where necessary. With our hosting and email providers as processors. We do not sell personal data and we do not share it for anyone else's marketing.
Enquiry correspondence that does not become a matter: up to two years. Files for matters we act on: six years from the end of the matter, in line with the limitation period and our insurers' requirements. Marketing consents: until you withdraw them.
You have the right to ask for a copy of your personal data, to have inaccurate data corrected, to ask for erasure or restriction in some circumstances, to object to processing based on legitimate interests, and to data portability where it applies. Where we rely on consent you can withdraw it at any time. Ask us at hello@businessdebtrecovery.co.uk.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first.
This policy was drafted with AI assistance and reviewed internally. It reflects how we actually operate. It is not a substitute for advice on your own data protection obligations.
Tell us what you are owed and who owes it. We come back with what the debt is worth once interest and compensation are added, what we would do first, and the fixed fee for doing it.
