Privacy Policy - Luum Resolutions

Your Data, Protected

Luum Resolutions Ltd is committed to protecting your personal information. We're registered with the Information Commissioner's Office (ICO) as a Data Controller and comply fully with UK GDPR and the Data Protection Act 2018.

1. Who We Are

Luum Resolutions Ltd ("we", "us", "our") is a specialist debt recovery and dispute resolution consultancy registered in England & Wales. Our registered address is London, England. Data Controller contact: lisa@luumresolutions.co.uk

2. Data We Collect

We collect personal data in the following categories:

Identity Data: Name, company name, job title, role

Contact Data: Email address, telephone number, postal address

Case Data: Debt amount, invoice dates, debtor details, contract documentation, dispute history

Financial Data: Payment details for our fees, bank account information for recovery distributions

Technical Data: IP address, browser type, device information, cookies, referral source

Marketing Data: Communication preferences, newsletter subscriptions

3. How We Use Your Data

Providing our debt recovery, mediation, and consultancy services
Communicating with you about your case, progress, and outcomes
Processing payments and managing accounts
Complying with legal and regulatory obligations (FCA, ICO, HMRC)
Improving our website and service quality through analytics
Sending marketing communications where you have consented
Protecting against fraud and ensuring security of our systems

4. Legal Basis for Processing

Contractual Necessity:

To perform our debt recovery and consultancy services for you

Legitimate Interest:

To improve our services, communicate relevant updates, and protect against fraud

Consent:

For marketing communications and optional analytics cookies

Legal Obligation:

To comply with FCA, ICO, HMRC, and other regulatory requirements

5. Data Sharing

We do not sell your personal data. We may share data with:

Partner solicitors and legal professionals where cases are instructed
Court systems (HMCTS) where legal proceedings are initiated
Tracing agents (with explicit instruction only)
Our secure, UK-based IT service providers (bound by data processing agreements)
Regulators and law enforcement where legally required

We never call, process, nor disclose internationally without your explicit consent and appropriate safeguards.

6. Data Retention

Data Type	Retention Period
Active case files	Duration of engagement + 4 years
Closed case data	6 years from closure (statutory limitation)
Financial records	7 years (HMRC requirement)
Marketing data	Until consent withdrawn
Technical/analytics	13 months maximum

7. Your Rights Under UK GDPR

Right of Access

Request a copy of your personal data

Right to Rectification

Correct inaccurate or incomplete data

Right to Erasure

Request deletion in certain circumstances

Right to Restrict

Limit how we process your data

Right to Portability

Receive your data in a portable format

Right to Object

Object to processing based on legitimate interest

To exercise any right, contact lisa@luumresolutions.co.uk. We respond within 30 days.

8. Cookie Policy

9. Security

We implement appropriate technical and organisational measures to protect your personal data including: encrypted file storage, password-protected systems, restricted access controls, regular security reviews, and secure data destruction procedures. In the unlikely event of a data breach affecting your rights, we will notify you and the ICO within 72 hours as required by UK GDPR.

10. Contact & Complaints

Data queries:

lisa@luumresolutions.co.uk

If unsatisfied, contact the Information Commissioner's Office (ICO)