Privacy Policy

Hawthorne Recovery Services is a trading style of Angel Tech Ltd, a company registered in England & Wales under company number 09979646, with its registered office at 55-57 Seabank Road, Wallasey, Merseyside, CH45 7PA.

Angel Tech Ltd is the data controller responsible for the personal data described in this policy. This policy explains how we collect, use, share, and protect personal data in connection with our commercial debt recovery services and this website.

Depending on your relationship with us, we may collect:

• Client data — the name, business name, job title, email address, postal address, and telephone number of the businesses that instruct us, together with details of the debts referred to us.
• Debtor data — the contact details of individuals and businesses from whom a debt is being recovered, the amount and history of the debt, and any correspondence relating to it.
• Website data — information you provide through our contact and enquiry forms, and limited technical data necessary to operate our secure client and debtor portals.

We process personal data on the following lawful bases under UK GDPR:

• Contract — to provide debt recovery services to our clients and to administer their accounts.
• Legitimate interests — to recover debts lawfully owed to our clients, to communicate with debtors, and to operate and improve our business, balanced against the rights of the individuals concerned.
• Legal obligation — to comply with court procedures, regulatory requirements, and our record-keeping duties.

We do not sell personal data. We may share it where necessary with the courts and tribunals service, instructed solicitors, enforcement agents, credit reference agencies, our professional advisers, and IT service providers who process data on our behalf under written agreements. We may also disclose data where required by law.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and reporting requirements. Case records are typically retained for six years following the conclusion of a matter, after which they are securely deleted or anonymised.

We hold ISO 27001 certification for information security. Personal data is stored in access-controlled, encrypted systems, and our staff are trained in data protection. We have procedures in place to deal with any suspected data breach and will notify you and the relevant data protection authority where we are legally required to do so.

Subject to certain conditions, you have the right to access your personal data, to request correction or erasure, to restrict or object to processing, and to data portability. To exercise any of these rights, contact us using the details below. We will respond within one month.

Our website uses a small number of strictly necessary cookies. For full details, please see our Cookie Policy.

We may update this policy from time to time. Any changes will be published on this page with a revised “last updated” date.

For any privacy-related query, or to exercise your rights, contact us at info@hawthornerecovery.com or by post at 55-57 Seabank Road, Wallasey, Merseyside, CH45 7PA.

If you are unhappy with how we have handled your personal data, you have the right to complain to the relevant data protection authority. We would, however, appreciate the opportunity to address your concerns first.