Privacy Notice
Last updated: September 2026
Dutycrest Ltd respects your privacy and is committed to handling personal information responsibly.
This Privacy Notice explains how we collect and use personal information when you visit our website, contact us or request a Receivables Review.
1. Who we are
DUTYCREST LTD provides managed credit-control services to UK businesses.
DUTYCREST LTD is the controller of the personal information described in this Privacy Notice. This means we are responsible for deciding how and why that personal information is used.
Company number: 17001692
Registered office: 128 City Road, London, EC1V 2NX, United Kingdom
Email: ops@dutycrest.com
Information we collect
The information we collect depends on how you interact with Dutycrest.
We may collect:
- your name;
- business or organisation name;
- work email address;
- telephone number;
- preferred contact method;
- preferred contact time;
- high-level information about your organisation's invoicing and credit-control arrangements; and
- any other information you choose to provide in the enquiry form.
You do not need to provide a debtor ledger, customer names or individual invoice information to request a Receivables Review.
Please do not include unnecessary customer or debtor information in the Review form.
Contacting us by email
If you contact us by email, we may collect your contact details and the information you provide during that communication.
When you contact us by telephone
If you contact us by telephone, we may collect your telephone number, information associated with the call and information you provide during the conversation.
Some calls may be recorded for training and operational accuracy. Recordings are retained for up to 30 days and deleted routinely. Where a call is recorded, callers will be informed at the beginning of the call.
Call recordings are processed on our behalf by our telephone service provider and may be accessed by authorised Dutycrest personnel where reasonably required for these purposes.
Website usage
We may collect limited technical and usage information relating to your visit to help us operate, protect and understand the use of our website.
See our Cookies and similar technologies notice for information about browser storage and the Receivables Review form.
To protect the enquiry form, we keep limited server-side records of submission times, delivery status and hashed security identifiers, including an identifier derived from the connecting IP address. These records help prevent duplicate submissions and misuse; they do not contain the information you enter in the form. Records older than 24 hours are removed when a subsequent valid submission is processed.
How we use your information
We may use your personal information to:
- respond to enquiries;
- arrange and conduct a Receivables Review;
- understand your organisation's credit-control requirements;
- assess the suitability of Dutycrest's services;
- communicate with you about a prospective or existing business relationship;
- maintain appropriate business and enquiry records;
- operate, maintain and protect our website and business systems; and
- comply with applicable legal and regulatory obligations.
We will not use information submitted through a Receivables Review request to begin managing individual customer or debtor accounts.
Lawful bases
UK data-protection law requires us to have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
Steps before entering into a contract — where processing is necessary to respond to a request from you or take steps in connection with potentially providing our services.
Legitimate interests — where processing is necessary for our legitimate business interests, such as responding to business enquiries, managing business relationships, maintaining appropriate records and protecting our website and systems, provided those interests are not overridden by your rights and interests.
Legal obligation — where processing is necessary for us to comply with an applicable legal requirement.
The lawful basis that applies will depend on the purpose for which the information is being used.
Service providers
We may use trusted service providers to support our website, communications and business operations. These may include providers of:
- website hosting and website services;
- business email and communications;
- telephone services;
- IT and security services; and
- professional advisory services.
We only share personal information where reasonably necessary for the relevant purpose or where required by law.
We do not sell personal information or share it with third parties for their own unrelated marketing purposes.
Where service providers process personal information on our behalf, their processing is subject to applicable data-protection requirements and appropriate contractual arrangements.
International transfers
Some service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK and UK data-protection law requires safeguards for that transfer, appropriate safeguards or other permitted transfer mechanisms will be used.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including applicable legal, accounting or regulatory requirements.
For prospective business enquiries and Receivables Review requests that do not result in a client relationship, we will generally retain the information for up to 12 months after our last meaningful interaction with you.
Information that is no longer required, including obvious spam or irrelevant enquiries, may be deleted sooner.
If you become a Dutycrest client, information relevant to that relationship may be retained for different periods in accordance with the purposes for which it is required and applicable legal or contractual requirements.
Protecting information
We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Access to personal information is limited to people and service providers who need it for legitimate business purposes.
No method of transmitting or storing information electronically can be guaranteed to be completely secure.
Your rights
Depending on the circumstances, you may have rights under UK data-protection law, including the right to:
- request access to your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your personal information in certain circumstances;
- ask us to restrict the processing of your information in certain circumstances;
- object to certain processing;
- receive certain information in a portable format where applicable; and
- withdraw consent where processing is based on your consent.
These rights do not apply in every circumstance, and some are subject to legal conditions or exemptions.
To exercise a right or ask us about your personal information, contact:
We may need to verify your identity before responding to a request.
Complaints
If you have concerns about how we use your personal information, please contact us so that we can consider the issue.
You also have the right to complain to the UK's data-protection regulator, the Information Commissioner's Office (ICO).
Further information about your data-protection rights and making a complaint is available from the ICO.
Updates to this notice
We may update this Privacy Notice from time to time to reflect changes to our website, services, business operations or legal obligations.
The latest version will be published on this page with its updated date.