Skip to content

Homepage

About
Services
Partner
How It Works

Contact Us

About
Services
Partner
How It Works

Contact Us

Privacy Policy

Commercial Recovery Bureau Ltd
www.commercialrecoverybureau.co.uk

Last updated: 1 December 2025Commercial Recovery Bureau Ltd (“we”, “us”, “our”, “CRB”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website or our services. We operate in accordance with the UK General Data Protection Regulation (UK-GDPR) and the Data Protection Act 2018.

1.Who We Are: Commercial Recovery Bureau Ltd
Company number: [15479438]
Registered office: [128 City Road, London, United Kingdom, EC1V 2NX]
Email: info@commercialrecoverybureau.co.uk
Website: www.commercialrecoverybureau.co.ukWe are a business-audit consultancy assisting UK SMEs to identify overcharging, mis-selling, and cost-recovery opportunities. We also facilitate solicitor introductions for regulated matters. We are the Data Controller for the personal data you provide to us.

2.What Information We Collect

We may collect and process the following categories of personal data: Information you provide directly

Name, job title, and contact details
Business name and address
Email address and phone number
Documents relating to your commercial contracts
Information submitted through website forms
Information relating to referral partners (e.g., accountants/solicitors)

Client financial and contract information

Copies of merchant service statements
Copies of utility/water invoices
Copies of lease, business rates or commercial contracts
Bank statements (if voluntarily supplied to support an audit)

Automatically collected data

IP address
Browser type
Cookies and tracking data via analytics tools

Special category dataWe do not intentionally collect special category data (health, race, etc.). If you choose to provide such information, you consent to us processing it for the purpose it was provided.

3. How We Use Your Information

We process your data for the following purposes:

Service delivery

To conduct business audits

To analyse invoices, statements and contracts

To contact you regarding audit findings

To issue client reports, fee schedules, and invoices

To liaise with referred solicitors where a legal claim is required

Legal & contractual obligations

To comply with UK-GDPR and regulatory requirements

To maintain accurate financial and service records

To prevent fraud

Business operations

To improve our website and services

To respond to enquiries

To manage accountant and solicitor referral partners

Marketing (optional)We may send marketing communications only with your explicit consent.
You may opt-out at any time.

4. Lawful Bases for Processing Under UK-GDPR, we rely on the following lawful bases:

Contract – processing necessary to provide our audit service

Legitimate Interests – business administration, service improvement, fraud prevention

Consent – marketing, optional data sharing

Legal Obligation – tax, record-keeping, regulatory compliance

5. Who We Share Your Data With

We may share your data with:

1. Referred solicitors or legal partners only when a regulated claim is required and with your consent.

2. Referral partners (accountants)Where relevant to the referral you were introduced through.

3. Service providersWho help us operate our business (e.g., cloud storage, CRM, email hosting).
All are GDPR-compliant and only process data under our instruction.

4. Regulatory or legal authorities where required by law.We never sell your personal data.

5. International Data Transfers some service providers may store data outside the UK (e.g., cloud hosts).
Where this occurs, we ensure appropriate safeguards are in place, such as:

UK standard contractual clauses
Adequacy decisions
Secure, UK-GDPR-aligned processors

6. Data Retention

We retain personal data only as long as necessary:

Audit documentation: up to 6 years (legal and financial record-keeping)
Referral partner information: while actively engaged + up to 2 years
Marketing data: until you withdraw consent
Website cookies: per cookie policy (typically 12–24 months)7. Your Rights

Under UK-GDPR, you have the right to:

Access your personal data
Rectify inaccurate or incomplete information
Request deletion (“right to be forgotten”)
Restrict processing
Object to processing
Withdraw consent
Request data portability

To exercise your rights, email: info@commercialrecoverybureau.co.uk

9.CookiesWe use cookies to improve website functionality and analytics.
You can manage cookie preferences via your browser settings.A full Cookie Policy is available here: [Insert link once created]10.SecurityWe implement appropriate technical and organisational measures to protect your data, including:

Encrypted data storage
Secure email and document systems
Access controls and authentication
Regular security reviews

Despite this, no system is 100% secure.11. Third-Party Links to our website may contain links to third-party sites.
We are not responsible for their privacy practices.12. Complaints If you have concerns about how we handle your data: Information Commissioner’s Office (ICO)
www.ico.org.uk
Telephone: 0303 123 1113We encourage you to contact us first so we can resolve any issue quickly.13. Contact Us for all data protection enquiries: Commercial Recovery Bureau Ltd
Email: info@commercialrecoverybureau.co.uk
Website: www.commercialrecoverybureau.co.uk