Privacy Policy

Privacy Notice
Last updated: 27 April 20251. Who we areStatutory Interest Recovery Limited (“SIRL”, “we”, “us”) is a UK company that supports businesses in improving cash-flow from commercial receivables. For the purposes of data-protection law we are the data controller for the information described below.Contact: [email protected].You may also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, though we would appreciate the chance to resolve any issue first.2. What data we collectWe handle limited business-context personal data, typically:• Business-contact details (name, role, e-mail, phone);• References, dates and values linked to commercial invoices or similar receivables;• Information needed to verify corporate authority or compliance status.3. How we use this data• Contract – Assessing, entering into or servicing receivable-related agreements;• Legal obligation – record-keeping, tax and anti-money-laundering checks;• Legitimate interests – analysing receivable data with secure cloud processing tools to support valuation and portfolio-management; enforcing or otherwise managing receivables; operating and improving our services.We do not make fully automated decisions that have legal or similarly significant effects.4. Who we share data with• IT-hosting and administration providers, including secure cloud analytics providers;• Professional advisers and, where necessary, dispute-resolution bodies or counterparties;• Public authorities when required by law.We do not sell personal data or allow third-party marketing.5. RetentionCore records are kept for six years after the matter concludes, plus one further year for audit or disputes. Data sent to our cloud analytics provider is erased within 30 days.6. International transfersCertain technical services are delivered from the United States. Transfers are protected by the UK Addendum to the EU Standard Contractual Clauses and the provider’s certification under the EU–US Data Privacy Framework. The provider acts solely as our data processor and is contractually barred from using the data for its own purposes.7. Your rightsYou may request access, correction, erasure or restriction of personal data, or object to its processing. Some rights may be limited where disclosure would prejudice the establishment, exercise or defence of legal claims (Data Protection Act 2018, Schedule 2 § 5). To exercise any right, e-mail us at the address above.8. CookiesOur website uses a small number of functional and performance cookies. Details and controls are shown in the cookie banner on first visit.