1. Introduction
National Credit Control Centre is committed to protecting personal data and respecting the rights of individuals in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Scope
This policy applies to all personal data processed by the company, including data relating to customers, employees, suppliers, and website users.

3. Definitions
Personal data: Any information relating to an identifiable individual.
Processing: Any operation performed on personal data (collection, storage, use, deletion).

4. Data Protection Principles
We adhere to the following principles:

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity and confidentiality (security)
• Accountability

5. Lawful Basis for Processing
We process personal data only when we have a lawful basis, including:

• Consent
• Contractual necessity
• Legal obligation
• Legitimate interests

6. Data Collection
We collect personal data only for specified, explicit purposes and ensure individuals are informed at the point of collection.

7. Use of Data
Personal data is used only for the purposes for which it was collected unless otherwise permitted by law.

8. Data Storage and Security
We implement appropriate technical and organisational measures to protect personal data, including:

• Secure servers and encryption
• Access controls
• Regular security reviews

9. Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected or as required by law.

10. Data Sharing
We may share data with trusted third parties (e.g., service providers) where necessary, ensuring appropriate safeguards are in place.

11. International Transfers
Where personal data is transferred outside the UK, we ensure appropriate safeguards are implemented.

12. Individual Rights
Individuals have the right to:

• Access their personal data
• Request correction
• Request erasure
• Restrict or object to processing
• Data portability

Requests can be made via: Info@Nationalcreditcontrolcentre.co.uk

13. Data Breaches
Any data breach will be reported and managed in line with legal requirements. Where necessary, breaches will be reported to the relevant authority within 72 hours.

14. Responsibilities
All employees are responsible for ensuring compliance with this policy.

15. Complaints
If individuals are not satisfied with how their data is handled, they may contact us directly. They also have the right to lodge a complaint with the Information Commissioner’s Office.

16. Policy Review
This policy is reviewed regularly and updated as required.

17. Types of Personal Data we collect

We may collect and process the following personal data:

• Identity Data: Name
• Contact Data: Address, email address, and telephone number

We collect this data when you:

• Contact us via our website, email, or phone
• Make an enquiry or request our services
• Enter into a contract with us

We only collect the information necessary to provide our services and communicate with you effectively.