Privacy Notice

This notice explains how Zenith Legal Services Group Ltd ("we", "us", "our") collects, uses and protects personal data in connection with our commercial recovery, forensic and pre-insolvency liaison services.

1. Who we are

Zenith Legal Services Group Ltd is the data controller for the personal data described in this notice. We are a private limited company incorporated in England & Wales.

• Company number: 16902595
• Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ
• Working address: 11a Park Circus, Woodlands, Glasgow G3 6AX
• ICO registration number: ZC134927
• Contact: general@zenithlegalgroup.com

2. The personal data we collect

In the course of our recovery and forensic work, we may collect and process the following categories of personal data:

• Identification data: name, role, position within a company, professional contact details.
• Contact data: business email addresses, telephone numbers, registered or business addresses.
• Public-record data: information published by Companies House, His Majesty's Courts and Tribunals Service, the London Gazette, Edinburgh Gazette, Belfast Gazette, Land Registry, Registers of Scotland, and equivalent public registers.
• Financial data: commercial debt particulars, ledger entries, payment history, and invoices, where provided to us by an instructing creditor or debtor.
• Engagement data: records of correspondence, instructions, attendance notes, and consultations between you and our team.
• Investigation data: in forensic and asset-tracing work, lawfully-obtained information from public, semi-public, and licensed commercial intelligence sources.
• Technical data: standard server log information when you visit this website (IP address, browser type, pages visited, timestamps).

3. How we use your data

We process personal data for the following purposes:

• To provide commercial recovery, forensic and pre-insolvency liaison services to our instructing clients.
• To make pre-action contact with debtors, counterparties or persons of interest in connection with a recovery matter, where instructed by a creditor or other party with a lawful interest.
• To respond to enquiries received through this website or our published contact channels.
• To comply with our legal, regulatory and professional obligations.
• To maintain accurate records and to operate our business.

4. Lawful bases for processing

We rely on the following lawful bases under the UK GDPR:

• Performance of a contract: where we have entered into an engagement with you or your company.
• Legitimate interests: for the lawful pursuit of recovery on behalf of instructing creditors, and for the conduct of forensic enquiries proportionate to a legitimate commercial purpose. Our legitimate interests are balanced against the rights and freedoms of data subjects in every matter.
• Legal obligation: where processing is required for compliance with applicable law, regulation or court order.
• Consent: where you have provided express consent.

5. Sharing your data

We do not sell personal data. We may share personal data with:

• Our instructing client, in connection with the matter for which we have been engaged.
• Solicitors, barristers, licensed insolvency practitioners and other regulated professionals where their authority is required for the matter.
• Service providers operating on our behalf (for example, email infrastructure, telephony providers, secure file storage, professional indemnity insurers), under written data processing agreements.
• Courts, regulators, law enforcement or public authorities where we are required to do so by law.

6. International transfers

Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place, including the use of UK International Data Transfer Agreements or other approved transfer mechanisms.

7. Retention

We retain personal data only for as long as is necessary for the purposes described in this notice, or as required by law and our professional record-keeping obligations. Closed matter files are typically retained for six years from the conclusion of the engagement, in line with the limitation period for most civil claims, after which they are securely destroyed.

8. Your rights

Under UK data protection law, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of any inaccurate data.
• Request erasure of your data, subject to applicable legal limitations and our professional record-keeping obligations.
• Object to or restrict processing of your data.
• Request portability of your data where applicable.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us at general@zenithlegalgroup.com. Note that some of these rights may be limited where we are processing data in connection with a live recovery matter, on the basis of legitimate interests or legal obligation.

9. Complaints

If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:

• ICO website: https://ico.org.uk
• Helpline: 0303 123 1113

10. Changes to this notice

We may update this notice from time to time. The most current version will always be available on this page.