1 Our Commitment to Privacy and Data Protection
ICP Credit Ltd (“ICP”) is committed to protecting your personal data and maintaining high standards of operational resilience and data governance. As a specialist in risk management, we implement robust, transparent, and compliant data protection practices in accordance with the UK GDPR, EU GDPR (where applicable), and the Digital Operational Resilience Act (DORA).
2 About Us
2.1 Legal Entity
ICP Credit Ltd, registered in England and Wales under company number 011406272.
2.2 Registered Office
Kemp House, 160 City Road, London EC1V 2NX, United Kingdom.
2.3 Correspondence Address
ICP Credit Ltd, BK 316, Brickfields, 37 Cremer Street, London, E2 8HD, United Kingdom.
2.4 Contact Email
customerservices@icpcredit.com
2.5 Data Protection Officer (DPO)
You may contact our DPO via the above details for any data protection queries or rights requests.
3 Contractual Information and Related Correspondence
We collect and process personal data when you enter a contract with us or interact with us in relation to a contract. This includes:
- Name, contact details, delivery and billing information
- Payment details and identity verification (including AML checks)
- Communications via email, phone, SMS, post, or website
- Call metadata and recordings (for quality and training purposes)
We may also collect calling and call numbers, and the date, time and duration of calls, and record calls for quality assurance and training. This is processed under our legitimate interests in service improvement and dispute resolution, and to meet legal obligations where applicable.
We process this data to fulfil contractual obligations, comply with legal requirements, and pursue legitimate business interests such as customer service, dispute resolution, and service improvement.
4 Call Information and Recording
Call Information and Recording
We may collect call details (numbers, date, time, duration) and record calls for quality assurance and training. This is processed under our legitimate interests and for compliance purposes.
5 Information We Receive from Third Parties
We may receive personal information about you from:
- Service providers (e.g., payment processors, delivery services, analytics, credit reference agencies)
- Businesses we acquire or their assets
- Other websites or services we operate
- Publicly available sources such as company websites and regulator registries
6 Change of Purpose
We will only use your personal information for the purposes for which it was collected, as set out in this notice.
If we need to use your information for another purpose, we will ensure that the new purpose is compatible with the original purpose.
If the purpose is unrelated, we will notify you and explain the legal basis for the new processing.
7 Information We Receive from Third Parties
We may receive personal information about you from service providers (e.g., payment processors, delivery services, analytics providers, search information providers and credit reference agencies), businesses we acquire or their assets, our other websites or services where we have notified you of such sharing, and publicly available sources such as company websites and regulatory registries.
8 Communications
If you opt out of marketing, we will add your details to a suppression list to ensure you do not receive further marketing communications. We may still contact you for administrative or operational purposes (e.g., service notifications), but these will not include direct marketing.
We may contact you using the details provided below:
- Legitimate interests: To provide updates, service information, or relevant business communications
- Consent: For marketing or optional communications (where required)
You may opt out of non-essential communications at any time.
9 Website and Technical Data
We collect technical data about your use of our website via:
- Cookies
- Webpage counters
- Analytics tools
This supports secure, efficient website operation and user experience improvement. Data is retained until the relevant cookie expires or is disabled.
Our website may include links or plug-ins to third-party websites. We do not control these sites and encourage you to read their privacy notices.
10 Information Collected at Our Premises
Third-Party Websites and Plug-ins
Our website may include links or plug-ins to third-party websites and applications. Clicking those links or enabling those plug-ins may allow third parties to collect or share data about you. We do not control these sites and are not responsible for their privacy notices. We encourage you to read the privacy notice of every website you visit.
Company Reports Content
We compile and publish business information about organisations and their senior personnel (e.g., name, job title and business contact details) using publicly available sources and our research.
We process this personal data as necessary for our legitimate interest in providing content to our customers.
We may display this information on our platforms accessible to customers and share selected report data with approved data partners.
We retain this content for as long as the relevant organisation remains in our database and it remains accurate and relevant.
Visitor Information: We collect visitor data including name, employer, contact details, vehicle registration, date/time of visit, and host contact. Accident records may also be collected.
CCTV Surveillance: CCTV may operate in designated areas, with signage displayed. Footage is retained for up to 35 days, or longer if required due to an incident.
Retention: Visitor data is retained for up to 3 months; accident records for up to 3 years.
11 Company Reports Content
We compile and publish business information about organisations and their senior personnel (e.g., name, job title, and business contact details) using publicly available sources and our research. We process this personal data as necessary for our legitimate interest in providing content to our customers. This information may be displayed on our platforms and shared with selected data partners. It is retained for as long as the relevant organisation remains in our database.
12 Job Applicants
We collect and process applicant data including:
- Application details (CV, cover letter, qualifications)
- Referee information
- Data from recruitment platforms or agencies
Used to assess suitability, fulfil employment obligations, and manage recruitment records.
Unsuccessful applicant data is retained for up to 6 months post-process. Successful applicants are subject to our internal privacy notice.
We also process:
- Referee data: Name, contact details, professional relationship
- Emergency contact data: Name, contact details, relationship to employee
These are used for employment law compliance, vital interest protection, and legitimate business administration.
13 Legal Claims
Where there is a risk of legal action, we may retain relevant personal data to defend or pursue claims. This may involve sharing data with legal advisers or insurers. Retention depends on the nature and duration of the legal risk.
14 Sharing Your Information
We may share your personal data with third parties, including:
- Legal obligations: To comply with law, enforce agreements, or protect rights and safety
- Service providers: For registrar services, IT support, legal advice, market research, website development and hosting
- Group entities: For internal administration and business continuity
- Fraud prevention: With organisations for fraud protection and credit risk reduction
- Corporate transactions: In the event of a sale, merger, or restructuring
- Regulators: Where required by law or regulatory obligation
All third parties are required to treat your data securely and lawfully. Where they act as data processors, they must follow our instructions and maintain confidentiality.
15 International Data Transfers
Our headquarters are in London, and our primary data centre is in the South of the UK.
However, data may be transferred outside the UK and EU for contractual or business purposes, including to regions where our group operates (Africa, Middle East, Europe, Asia, Latin America).
- Adequacy decisions: Transfers to countries with EU-approved adequacy decisions are permitted.
- Safeguards: For other countries, we implement appropriate safeguards (e.g. standard contractual clauses).
- Further information: Contact us for details on international safeguards.
16 Data Security
We implement appropriate technical and organisational measures to protect personal data from:
- Accidental loss
- Unauthorised access or disclosure
- Alteration or destruction
Access is restricted to personnel with a business need, and all processing is subject to confidentiality obligations.
16.1 Internal Safeguards
We limit access to your personal information to employees, agents, contractors, and third parties who require it for legitimate business purposes. These individuals will only process your personal information on our instructions and are subject to a duty of confidentiality.
16.2 Breach Response Protocol
We maintain procedures to detect, investigate, and respond to suspected data breaches.
17 Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected.
18 Your Rights
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure
- Right to object
- Right to restrict processing
- Right to data portability
- Right to withdraw consent
- Right to lodge a complaint
19 Cookie Policy
19.1 Use of Cookies
Our website uses cookies and similar technologies to enhance user experience.
19.2 Types of Cookies We Use
- Strictly Necessary Cookies
- Performance Cookies
- Functionality Cookies
- Targeting/Advertising Cookies
19.3 Consent and Control
Upon first visit, users are presented with a cookie banner allowing them to accept or manage cookie preferences.
19.4 Third-Party Cookies
Some cookies may be placed by third-party services.
19.5 Managing Cookies
You can control cookies through your browser settings.
20 Changes to This Privacy Notice
We may update this notice from time to time. Any changes will be posted on this page and, where appropriate, notified to you directly. Please check back regularly for updates