GDPR Policy

At Anderson Brookes Insolvency Practitioners Ltd, we are committed to protecting your privacy and handling personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy explains how we collect, use, store and protect personal data, and outlines your rights under data protection law.


1. Personal Data We Collect

We may collect and process personal data as part of our services, which include but are not limited to:

  • Name, address and contact details

  • Date of birth

  • Financial information and business records

  • Employment or directorship details

  • Information about assets and liabilities

  • Other data needed to carry out our work as insolvency practitioners

In some cases, we may receive personal data from third parties, such as creditors, accountants or legal representatives.


2. Legal Basis for Processing

We only process personal data where there is a lawful basis, including:

  • Where processing is necessary for the performance of a contract

  • To comply with legal or regulatory obligations (for example, under insolvency legislation)

  • Where it is in our legitimate interests and these are not overridden by your rights

  • Where you have provided consent

We act as a Data Controller when processing data in the course of our insolvency work.


3. Use of Personal Data

We use personal data to:

  • Carry out our duties under the Insolvency Act 1986 and related regulations

  • Communicate with creditors, employees, directors and other stakeholders

  • Manage insolvency procedures or fixed charge receiverships

  • Maintain statutory records and respond to regulatory enquiries

  • Comply with legal obligations

In rare cases, we may need to process special category data (for example, health-related data). We will only do this if required by law or if necessary for the performance of our duties.


4. Data Retention

We will not retain personal data for longer than necessary. Typically, we retain data for up to 6 years after an insolvency case is closed or as otherwise required by law or regulatory guidance.


5. Data Security

We take appropriate technical and organisational steps to safeguard personal data, including:

  • Secure servers and restricted access to files

  • Regular backups and virus protection

  • Staff training and data handling protocols

  • Use of encrypted email for sensitive data


6. Sharing Personal Data

We may share data with third parties where:

  • Required by law or regulation

  • Necessary to perform our functions as insolvency practitioners

  • With regulatory bodies such as the Insolvency Service, HMRC or the FCA

  • With professional advisers or service providers, such as solicitors, surveyors or agents

We do not sell or pass on personal data for marketing purposes.


7. International Transfers

We do not routinely transfer data outside the UK or EEA. If such a transfer is necessary, we will ensure appropriate safeguards are in place, as required by data protection law.


8. Data Subject Rights

You have the following rights under the UK GDPR:

  • Access – to request a copy of your data

  • Rectification – to correct inaccurate or incomplete data

  • Erasure – to request deletion of your data where lawful

  • Restriction – to limit how we use your data in certain circumstances

  • Objection – to object to certain types of processing

  • Portability – to receive your data in a format that allows you to move it to another provider

If you make a request, we may need to verify your identity. We will respond within one month.


9. Data Breach Notification

If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) and, where appropriate, affected individuals without undue delay.


10. Contact Details

If you have any questions about this policy or how we handle your data, please contact:

Neil Batty
Data Protection Officer
Anderson Brookes Insolvency Practitioners Ltd
First Floor, Fairclough House
Church Street
Adlington
Chorley
PR7 4EX
📞 01204 255 051
✉️ neil@andersonbrookes.co.uk

You also have the right to raise concerns with the Information Commissioner’s Office at www.ico.org.uk.