Privacy and Consent (UK GDPR & PECR)
IVAorg CIC (“we”, “us”) is committed to protecting your personal data. This notice explains what information we collect, how we use it, who we share it with, how long we keep it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).
Who We Are
Data Controller
IVAorg CIC
Suite 201, Unit 9, St Georges Court, Altrincham Business Park, Dairyhouse Lane, Altrincham, WA14 5UA
Email: enquiries@iva.org
Telephone: 0800 856 8569
Website: www.iva.org
Information You Provide
You may provide information to us by filling in forms on our website or by corresponding with us by phone, email or otherwise. We only request and collect information that is necessary to provide you with your requested service and to improve the services we provide.
Web Forms
Information provided via our website may include (but is not limited to) your name, address, email address and telephone number. This information is transmitted securely.
Telephone Consultation
If you request a telephone consultation, you may provide information about your personal and financial circumstances, including accommodation status, employment, creditors, balances owed, household income and expenditure, assets and liabilities.
How We Contact You
We will only contact you once you have requested us to do so. We do not participate in telemarketing or make unsolicited calls.
Where you engage our services, we may contact you by telephone, email, SMS or post where necessary to administer your case and comply with legal and regulatory obligations.
Email Communications
If you contact us by email, we use your email address and message content to respond to your enquiry. Email communications are stored securely in accordance with our retention policy.
Please note that email transmission over the internet is not completely secure.
Call Recording
Telephone calls may be recorded for training, quality assurance, compliance and regulatory purposes. Recordings are retained securely in line with our retention policy.
Document Verification
As part of providing our services, we verify documents you submit to confirm your identity and the accuracy of the information provided.
Documents may include bank statements, wage slips, tax returns, benefit award letters, mortgage details, vehicle registration documents (V5C) and photographic identification.
Optional Automated Processing
With your consent, we may use a secure cloud-based automation platform hosted in Germany (European Economic Area) to assist with verification workflows.
This automation supports verification only and does not make decisions about you. All verification outcomes are reviewed by a human at IVAorg CIC before any decision is made.
Special Category and Criminal Data
Financial records may incidentally contain special category personal data (such as political donations, trade union membership or health-related information) and may also contain information relating to criminal convictions or offences (for example court payments).
Where such data is processed, it is done only where necessary for legal claims, insolvency functions or regulatory obligations in accordance with UK GDPR and the Data Protection Act 2018.
Information We Automatically Collect
Cookies
We only pre-set cookies necessary for the website to function. Analytics and marketing cookies require your prior consent. Please see our Cookie Policy for further information.
Technical Information
We may collect your IP address, browser type and version, operating system, referral source, pages viewed, time spent on pages, and other technical data to improve site performance and security.
How We Use Your Information
We use your information to:
• Provide debt advice and IVA services
• Assess suitability for an IVA
• Verify documents
• Communicate with you regarding your case
• Meet legal and regulatory obligations
• Improve our website and services
Lawful Bases
We rely on:
• Contractual necessity (Article 6(1)(b))
• Legal obligation (Article 6(1)(c))
• Legitimate interests (Article 6(1)(f)) where appropriate
• Consent (Article 6(1)(a)) for optional automation or non-essential cookies
Third Parties
We only share data with external parties where necessary to provide services requested by you, where required by law, or where processors act on our behalf under contractual agreements. We do not sell your personal data.
International Processing
Where processors are hosted within the European Economic Area (EEA), this is recognised as providing an adequate level of protection under UK data protection law. If processing occurs outside the UK or EEA, appropriate safeguards will be applied.
How Long We Keep Your Data
If You Enter an IVA
We retain client records for six years following completion of the IVA, in line with legal and regulatory obligations.
If You Do Not Proceed
If you submit an enquiry but do not proceed with a formal service, your information will be securely deleted within 30 days of inactivity, unless there is a legal or regulatory reason to retain it longer.
We may retain limited suppression information to ensure we do not contact you again without consent.
Verification Automation
Where automated verification is used, verification data processed via the automation platform is deleted within 24 hours of completion.
Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (where applicable)
- Restrict processing
- Withdraw consent (where applicable)
- Lodge a complaint with the Information Commissioner’s Office (ICO)
ICO website: www.ico.org.uk
Contact Us
Questions, comments and requests regarding this privacy notice are welcomed and should be addressed to:
IVAorg CIC
Suite 201, Unit 9, St Georges Court
Altrincham Business Park
Dairyhouse Lane
Altrincham, WA14 5UA
Email: enquiries@iva.org
