Privacy
Policy

Datatrac prioritises the privacy and security of your personal data. We are committed to lawful and ethical data processing, adhering to strict measures to protect your information, and providing full transparency about how your data is used. Learn more about your rights and our policies in our comprehensive Privacy Policy.

Your trust is our top priority at Datatrac.

We invite you to read our comprehensive Privacy Policy to understand how we handle your data with utmost care and responsibility. We believe in transparency and want you to feel confident about your data security.

Datatrac Data Sources
People Ensuring Data Safety at Datatrac
People Contributing to Datatrac Data Sources
Data Sharing Policy at Datatrac
Data Usage by Datatrac

Who we are

Datatrac Limited is a leading data company specialising in providing data to a wide range of industries, including banking, finance, insurance, telecommunications, utilities and more.  

Our address is:

Datatrac Limited
4 Liverpool Road
Buckley
CH7 3LU

We are a registered company in England and Wales under company number 14541543. Our ICO registration number is ZB540286

  • Datatrac Limited specialises in the careful management and centralisation of consumer database access in order to support our legitimate interests covering the sharing of data to support enforcement, verification, credit and risk management, revenue collection/recoveries, asset re-unification, fraud investigation, vulnerability & affordability assessments, data enrichment, database tracing activities and the efficient planning and fulfilment of direct marketing campaigns.

    All data partners are declared to clients to enable source audits and undergo due diligence checks prior to using their data.

  • Enforcement, ID verification, credit and risk management, revenue collection, database tracing activities such as linking small pieces of information from multiple data sources to enable these activities.

    Verification and enhancement of customer and marketing databases.

    Enhance targeting relevance through market research, analysis, segmentation and profiling.

  • Datatrac Limited only works with partners we think you can trust with your data. In each case, we ensure that our partners have collected your data fairly and compliantly and that you have been informed that your data will be shared with Datatrac’s Third Party Suppliers (normally in their own privacy notice). In addition, we ensure that they have been clear and transparent about the purposes for which Datatrac will use your data.

    You have the right to withdraw your consent or object to our processing of your data at any time by contacting us using the details at the top of this policy.

    A full list of data partners will be provided upon request.

  • We hold the personal data that you have provided to our data partners. This may vary from partner to partner, but this includes names, postal addresses, emails, telephone numbers, dates of birth, employment information, credit application data, personal information and lifestyle information.

    We do not hold or process any of the following data about you:

    • Financial data

    • Health information

    • Political preferences

    • Religious preferences

    • Sexual Preference

    • Children’s data

  • Use of postal data

    We make your postal address available for organisations to use for fraud investigation and prevention, collection and recoveries, asset re-unification, identity and verification.

    Unless registered with the MPS (Mail Preference Service) we will also share your address for direct marketing by post based on the demographic information provided by you at sign up to the data partner.

    Use of telephone data

    We make your telephone number(s) available for organisations to use for fraud investigation and prevention, collection and recoveries, asset re-unification, identity and verification.

    Unless registered with the TPS (Telephone Preference Service) we will also share your telephone number for direct marketing by live marketing calls based on the demographic information you provided at sign up to the data partner, but not for SMS or automated call marketing.

    Use of email

    We make your email address available for organisations to use for fraud investigation and prevention, collection and recoveries, asset re-unification, identity and verification.

    If you give permission to be contacted by advertisers via e-mail, Datatrac help to identify relevant advertisers and supports the e-mail communication to you based on the demographic information provided by you at sign up to the data partner.

    Datatrac does not sell this information outright to any advertiser. E-mails you might receive will be sent on behalf of the source to whom you have give your consent to be contacted and will be identified as having originated from the source you provided consent to.

    This approach is described as “host-emailing” where the “sender” represents the holder of your consent for such communications. E-mails received will be clearly identified as having originated from the original data controller and their contact details will also be provided as well as the opportunity to unsubscribe from e-mails from that organisation.

  • We share the data you provide with a number of credit/financial companies. They may combine, analyse and profile your information and share this information with other organisations for the purposes of:

    • debt collection

    • debt recovery

    • fraud prevention

    • tracing/locating you

    • verifying your identity

    • verifying the information they hold about you is correct

    • assessing affordability

    We rely on the legitimate interests of these organisations to share your data in this way. If you do not want your data to be used in this way, you can object.

  • The UK’s data protection law allows the use of your personal data where necessary for legitimate purposes provided this is not outweighed by the impact it has on you. The law calls this the “legitimate interests” condition for processing personal data.

    The legitimate interests the data is typically processed for are:

    Debt Collection and Tracing

    We support debt collection and tracing where there is a legitimate interest in conducting such activities to find individuals to recover debts.

    Asset Reunification

    The process through which people are located, contacted and reunited with unclaimed or 'lost' entitlements as a result of forgotten investments, savings or matured policies.

    Identity Verification

    We support agencies that provide services for identity, verification and protect against anti fraud.

    Customer Vulnerability/ Affordability

    Supporting the identity of vulnerable customers to ensure they can afford further debt.

    Datatrac process your e-mail data for. marketin purposes under the consent you have provided to our data partners when they collected your data. If you wish to withdraw your consent, please contact us and we will suppress your details.

    We use the lawful basis of legitimate interests as abusiness or thoe of a third party for the sharing of (non-MPS) postal information and (non-TPS) telephone numbers for marketing purposes and e-mail data for the purposes of fraud prevention, tracing and ID verification.

  • The period for which we use personal data varies depending on the individual contract terms with our data partners. When our data partner sends us a refreshed file, any data beyond that partner’s retention period will no longer be in the file, meaning that Datatrac will no longer hold it. Additionally, when Datatrac stop working with a partner, we remove that data from our active systems, and then retain it for a period of 6 months for the purposes of Rights fulfilment (see below), before it is deleted fully.

    We also need to retain information if there is a statutory retention period required for legal and regulatory reasons.

  • Datatrac has appropriate technical and organisational measures in place to restrict access to data and these are monitored regularly.

    We are Cyber Essentials PCertified, and systems are pen tested on an annual basis. Access to your personal information is strictly controlled on a ‘need to know’ basis. Staff members are only allowed access to your personal data if they have been sufficiently trained in data management.

  • We store your personal information in an Amazon Web Service cloud environment located in the UK. We do not transfer your data to any country outside this area.

Your rights

Under data protection law you have many Rights:

In most cases, we have one month to respond to you.

You also have the right to complain to the Information Commissioner’s Office whose address is Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Their website can be found at https://ico.org.uk

Data Safety at Datatrac

Data Protection Officer

Our Data protection officer can be contacted by emailing: 

compliance@datatrac.co.uk

​Or writing to us at: 

​Data Protection Officer

Datatrac Limited
The Stables
Peper Harow Park
Godalming
Surrey
GU8 6BQ

​We keep this Privacy Policy under regular review. This policy was last reviewed in May 2024.

Your trust is our top priority at Datatrac.

For more information or to speak to our data office, please get in touch.