1. Who we are
DebtFlowPartners is a marketing and introducer business operating in England and Wales. We connect people with debt-related enquiries to regulated debt advice firms.
DebtFlowPartners is an introducer and does not provide debt advice. Any debt advice or debt solution would be provided by [Principal Firm Name], a regulated debt advice firm.
For the purposes of UK data protection law, DebtFlowPartners is the data controller in respect of personal data collected through this website.
Contact: privacy@debtflowpartners.co.uk
2. What personal data we collect
We collect the following personal data when you submit our enquiry form:
- Your full name
- Your email address
- Your phone number
- Your answers to our qualification questions (debt range, number of creditors, housing situation, employment status, income range, location)
We also collect certain technical data automatically when you visit our website:
- Your IP address and approximate location (country/region level)
- Browser type and device type
- Pages visited and time spent on site
- Referring website or search term
We do not collect any special category data (such as health information) through this website.
3. How we use your data
Passing your enquiry to a regulated firm
The primary use of your name, email, phone number, and qualification answers is to pass your enquiry to one regulated debt advice firm, so that they can contact you about your options. This is the core purpose of our service and the reason you submitted the form.
The regulated firm that receives your details will have their own privacy policy that applies to their use of your information from the point of transfer.
Improving our service
We use anonymised and aggregated technical data to understand how people use our website, which pages are most helpful, and where people drop off. This data cannot identify you individually.
Legal compliance
We may process your data where required to comply with a legal obligation, for example if we receive a lawful request from a regulatory authority.
4. Our legal basis for processing
Under UK GDPR, we must have a lawful basis for processing your personal data. Our bases are:
- Consent — when you tick the consent checkbox on our form, you give us permission to pass your details to one regulated firm. You can withdraw this consent at any time.
- Legitimate interests — we use anonymised analytics data to improve our website. This does not override your rights or interests.
- Legal obligation — where we are required to process data by law.
5. Who we share your data with
We share your personal data with one regulated debt advice firm that is suited to your situation. You are told this clearly before you submit the form, and you give explicit consent to this sharing via the consent checkbox.
We do not sell your data. We do not pass your data to a marketplace of companies. We do not share your data with any third party for their own marketing purposes.
We may also share data with:
- Our technology providers (for example, our CRM platform and website host) — these providers act as data processors and are bound by data processing agreements
- Regulatory or law enforcement bodies — where required by law
6. How long we keep your data
We retain your personal data for no longer than is necessary for the purposes for which it was collected. In practice:
- Enquiry data (name, email, phone, qualification answers) is retained for up to 24 months from the date of submission, after which it is securely deleted
- Technical/analytics data is retained for up to 12 months
- Records of consent are retained for 3 years to demonstrate regulatory compliance
You can ask us to delete your data earlier at any time — see Your Rights below.
7. How we protect your data
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include:
- HTTPS encryption for all data submitted through our website
- Access controls limiting who within our organisation can view personal data
- Data processing agreements with all third-party service providers
No internet transmission is 100% secure. If you have concerns about the security of your data, please contact us.
8. Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access — you can ask for a copy of the personal data we hold about you
- Right to rectification — you can ask us to correct inaccurate data
- Right to erasure — you can ask us to delete your personal data (subject to certain legal exceptions)
- Right to restrict processing — you can ask us to limit how we use your data
- Right to data portability — you can ask for your data in a commonly used, machine-readable format
- Right to object — you can object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, contact us at privacy@debtflowpartners.co.uk. We will respond within one calendar month.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
9. Cookies
Our website uses cookies — small files stored on your device — to help the site function and to understand how it is used. We use:
- Strictly necessary cookies — required for the site to function. These cannot be disabled.
- Analytics cookies — used to understand how visitors interact with our website. These are only set with your consent.
You can manage your cookie preferences at any time via the Cookie settings link in our footer.
10. International transfers
We aim to keep your personal data within the UK. Where any of our service providers process data outside the UK, we ensure appropriate safeguards are in place in line with UK GDPR requirements, such as UK adequacy decisions or standard contractual clauses.
11. Changes to this policy
We may update this privacy policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.
For significant changes that affect how we use your data, we will take steps to notify you directly where we hold your contact details.
12. Contact us
If you have any questions about this privacy policy or how we handle your personal data, please contact us:
- Email: privacy@debtflowpartners.co.uk
- Website: debtflowpartners.co.uk