Data Protection Policy

1. Introduction

Debt Help Support is committed to protecting personal information and ensuring that all personal data is handled securely, fairly and in accordance with applicable data protection legislation.

This policy outlines how we collect, process, store and protect personal information.

2. Our Commitment

We are committed to:

• Processing personal data lawfully, fairly and transparently.
• Collecting only information necessary for legitimate business purposes.
• Protecting personal information against unauthorised access, disclosure, loss or misuse.
• Maintaining appropriate technical and organisational security measures.
• Respecting the rights of individuals under UK data protection legislation.

3. Scope Of This Policy

This policy applies to:

• Website visitors
• Customers and prospective customers
• Business partners
• Service providers
• Employees and contractors where applicable

4. Types Of Information We Process

We may process the following types of information:

Personal Information

• Name
• Telephone number
• Email address
• Postcode

Financial Information

• Debt level
• Employment status
• Homeownership status
• General financial circumstances

Technical Information

• IP address
• Browser information
• Device information
• Website usage data

5. Lawful Basis For Processing

We process personal information under one or more of the following legal bases:

Consent

Where users voluntarily provide information through our website forms.

Legitimate Interests

To operate our services, improve our website and facilitate introductions to relevant service providers.

Legal Obligations

Where processing is required by law or regulatory requirements.

6. Data Security Measures

We implement appropriate technical and organisational measures to protect personal information, including:

Technical Controls

• SSL encryption
• Secure hosting infrastructure
• Firewalls and security monitoring
• Password protection
• Anti-malware protections
• Access controls

Organisational Controls

• Restricted staff access
• Role-based permissions
• Secure password management
• Data handling procedures
• Ongoing compliance reviews

7. Data Sharing

Personal information may be shared with carefully selected third-party providers where necessary to facilitate debt solution enquiries.

We only share information where:

• The individual has provided consent.
• Sharing is necessary to fulfil the requested service.
• Legal obligations require disclosure.

We do not sell personal information to unrelated third parties.

8. Data Retention

We retain personal information only for as long as necessary to:

• Process enquiries
• Facilitate introductions
• Meet legal obligations
• Resolve disputes
• Maintain business records

Retention periods are reviewed regularly and data is securely deleted when no longer required.

9. Individual Rights

Individuals may have the right to:

• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion of personal information.
• Restrict processing.
• Object to processing.
• Withdraw consent.
• Request data portability where applicable.

Requests should be sent to: admin@debthelpsupport.co.uk

10. Data Breach Management

Any actual or suspected data breach will be investigated promptly.

Where required by law:

• The Information Commissioner's Office will be notified.
• Affected individuals may be informed.
• Corrective action will be implemented.

We maintain procedures to identify, assess and manage security incidents effectively.

11. Third-Party Service Providers

We may use third-party service providers to support:

• Website hosting
• Email services
• Analytics services
• Security services
• Customer enquiry management

All service providers are expected to maintain appropriate data protection standards.

12. International Data Transfers

Where personal information is transferred outside the United Kingdom, appropriate safeguards will be implemented to ensure data remains protected.

13. Staff Responsibilities

Any individual with access to personal information must:

• Follow company data protection procedures.
• Keep information confidential.
• Use information only for authorised purposes.
• Report any suspected data breach immediately.

14. Policy Review

This policy will be reviewed periodically to ensure ongoing compliance with applicable legislation and business requirements.