Purpose of This Notice
This notice describes how we, IDR Legal Limited (‘IDR’), collect and use personal data in accordance with the Data Protection Act 1998, the EU General Data Protection Regulation (GDPR), and applicable UK data protection laws (‘Data Protection Legislation’).
Please read this notice carefully to understand how we handle your personal data and the limited ways in which it is used.
About Us
IDR Legal Limited (‘we’, ‘us’, ‘our’) provides legal services in cross-border debt recovery, primarily for banks in the United Arab Emirates, Qatar, and Bahrain. We are authorised and regulated in the UK by the Solicitors Regulation Authority (SRA), reference number 1327993.
In providing our services, we act as:
- Data Controller for personal data relating to:
- Bank employees giving us instructions (‘Clients’)
- Other third-party correspondents such as solicitors and barristers within the EU (‘Third Party Correspondents’)
- Data Processor for personal data relating to:
- Customers from whom we are instructed to recover debts (‘Customers’)
We also use data provided by TransUnion International UK Limited (‘TU’). Their privacy notice can be found here: https://www.transunion.co.uk/legal-information/bureau-privacy-notice.
Our Data Protection Compliance Officer (DPCO) is Peter Coyle.
How We Collect Personal Data
We collect data from:
- Clients and Third Party Correspondents when:
- A request is made for our services
- Our services are engaged
- Contact details of correspondents are shared for service delivery
- Customers when:
- Data is provided to us by Clients as the Data Controller
The Kind of Personal Data We Hold
For Clients and Third Party Correspondents:
- Name, address, phone numbers, and emails
- Service-related correspondence and transaction history
- Details of services received and funding
- Introducer contact details
- Complaint information
For Customers:
Data may include sensitive personal data such as passports, immigration documents, financial records, credit card/loan agreements, account statements, and identification data from public records and credit reference agencies.
How We Use Personal Data
We only use personal data to deliver our services, manage operations, and communicate with relevant parties.
We may share data with Third Party Correspondents based on:
- Client instructions
- Legal necessity
- SRA licensing requirements
We do not use Customer data for marketing and do not transfer data outside the EEA.
Data Retention
We retain personal data only as long as necessary. Retention periods depend on:
- Business and legal needs
- Regulatory and professional requirements
- The purpose and legal basis for collection
Change of Purpose
If we need to use data for a new purpose, we’ll ensure it is compatible with the original purpose or obtain consent before doing so.
Data Security
We implement appropriate security measures to protect your personal data from unauthorized access, loss, or misuse. If a data breach is suspected, we will notify affected individuals and the regulator where legally required.
Your Rights
Keeping Your Information Up to Date
Please inform us of any changes to your personal data so we can keep our records accurate.
Your Legal Rights Include the Right to:
- Access your data
- Correct inaccuracies
- Request data deletion
- Object to or restrict processing
- Request data transfer
Some requests may be declined based on legal obligations. We do not charge a fee for data requests unless the request is excessive or unfounded. Identity verification may be required.
Right to Withdraw Consent
Where consent has been given for specific data processing, you can withdraw it at any time by contacting Peter Coyle. If withdrawn, we will cease processing unless another legal basis applies.
Changes to This Notice
Any updates to this notice will be published on our website. This version was last updated on 1st November 2021.
Contact Us
If you have questions about this notice or how we process your personal data, please contact:
Peter Coyle
IDR Legal Limited
The Island, Moor Road
Chesham, HP5 1NZ
ICO Contact Details
You can also contact the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113 or 01625 545 745
Website: https://ico.org.uk/concerns