Privacy Policy — Asset Recovery Limited

1. Who we are

Asset Recovery Limited (“we”, “us”, “our”) is a private company limited by shares, registered in England and Wales under company number 10135589.

We are the data controller for the personal data described in this policy. That means we decide why and how your personal data is processed.

If you have any question about this policy or about how we handle your information, contact us at privacy@assetrecoverylimited.uk.

2. The personal data we collect

Information you give us

When you complete the enquiry form on this website, we collect:

your first and last name;
your email address;
your telephone number and country of residence, if you choose to provide them;
the category of matter you select; and
the content of the message you write to us.

If you go on to instruct us, we will collect further information necessary to act on your matter. That may include identification documents, proof of address, account and asset details, correspondence with financial institutions, and documents relating to an estate. We will tell you what is needed at the time and why.

Information collected automatically

Our web server records the IP address from which an enquiry is submitted, together with the date and time. This is kept as a security record, to help us identify and stop abuse of the form. We do not use analytics, advertising or third-party tracking software on this website.

Special category data

Matters involving a bereavement or a person’s health can involve more sensitive information. We ask that you do not include such details in your initial enquiry. Where they later become necessary, we will process them only with your explicit consent or where we are otherwise permitted to do so by law.

3. Why we use your data, and our lawful basis

Purpose	Lawful basis (UK GDPR Article 6)
Responding to your enquiry	Consent, which you give by ticking the box on the form, and our legitimate interest in answering people who contact us
Assessing and carrying out work on your matter	Performance of a contract with you, or steps taken at your request before entering into one
Verifying identity and meeting anti-money-laundering and other legal duties	Compliance with a legal obligation
Keeping records of advice given and work done	Our legitimate interest in maintaining an accurate file and defending legal claims
Protecting this website from abuse	Our legitimate interest in the security of our systems

Where we rely on consent, you may withdraw it at any time by contacting us. That will not affect the lawfulness of anything done before you withdrew it.

4. Who we share it with

We do not sell, rent or trade personal data. We do not pass website enquiries to third-party lead generation services, marketing companies or introducers.

We may share your data with:

Financial institutions, registries and authorities where doing so is necessary to progress your matter, and only with your knowledge;
Professional advisers such as solicitors, accountants or locally qualified representatives, where your matter requires them;
Service providers who host our website and email systems, under written terms that require them to protect your data and to act only on our instructions; and
Regulators, law enforcement or courts where we are legally required to do so.

5. International transfers

Asset matters frequently involve institutions outside the United Kingdom. Where we need to transfer personal data abroad to progress your matter, we will do so only where the destination country has UK adequacy status, or under appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or where the transfer is necessary for the performance of a contract with you.

6. How long we keep it

Record	Retention period
Enquiries that do not lead to an engagement	12 months from the last contact, then deleted
Client files	6 years from the close of the matter, reflecting the limitation period for contractual claims
Identification and anti-money-laundering records	5 years from the end of the business relationship, as required by law
Website security logs	Up to 12 months

7. How we protect it

Access to enquiry and client information is limited to those within the firm who need it to do their work. Our website is served over an encrypted connection, the enquiry form is protected against automated abuse and cross-site request forgery, and enquiry data is delivered directly to our own email system rather than to any third-party platform.

No system is completely secure. Please do not send us banking passwords, card PINs, or one-time security codes — we will never ask you for them, and we do not need them.

8. Your rights

Under UK data protection law you have the right to:

Access the personal data we hold about you;
Rectification of data that is inaccurate or incomplete;
Erasure of your data, where we have no continuing lawful reason to keep it;
Restrict our processing in certain circumstances;
Object to processing carried out on the basis of legitimate interests;
Data portability, where processing is by consent or contract and carried out by automated means; and
Withdraw consent at any time where consent is our basis for processing.

To exercise any of these rights, write to privacy@assetrecoverylimited.uk. We will respond within one calendar month. There is no charge, unless a request is manifestly unfounded or excessive. We may need to verify your identity before we act.

9. Complaints

If you are unhappy with how we have handled your personal data, please tell us first — see our complaints procedure. You also have the right to complain to the Information Commissioner’s Office:

Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

10. Cookies

This website uses a small number of strictly necessary cookies only. Full detail is in our Cookie Policy.

11. Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last revised. Where a change materially affects how we use data we already hold, we will tell affected clients directly.