Gisby Group International Limited trading as Gisby Legal (“GGIL”, “Gisby Legal”, “we”, “us” or “our”) respects your privacy and handles personal information carefully, lawfully and proportionately.
This Privacy Notice explains how we collect, use and share personal information when providing debt recovery, tracing, litigation support, enforcement support, assignment-based recovery and related services.
- Who we are
Gisby Group International Limited trading as Gisby Legal is the organisation responsible for the personal information described in this notice.
Registered office: PO Box 153, Ilminster, TA20 9EF, England
Email: mh@gisbylegal.com
Telephone: 07767 888000 / 0845 6436 888
Gisby Legal is not a firm of solicitors and does not provide reserved legal activities.
- The information we may collect
We may collect and use personal information about clients, assignors, debtors, guarantors, directors, witnesses, agents, third parties and other individuals connected with a matter.
This may include:
names, addresses, email addresses, telephone numbers and other contact details;
business, employment, trading and company information;
financial information, invoices, statements, payment records, bank details and account histories;
information relating to debts, contracts, judgments, enforcement, disputes, complaints, settlements and legal proceedings;
identity, verification, tracing and location information;
correspondence, call notes, messages, documents, photographs, evidence and publicly available information;
information from courts, Companies House, insolvency records, credit reference sources, tracing providers, enforcement agents, solicitors, counsel, process servers and other third parties.
We only collect and use information that is relevant to the matter we are handling.
- How we collect information
We may receive personal information from:
you directly;
our clients or assignors;
debtors or their representatives;
courts, enforcement agents, process servers, tracing agents, solicitors, counsel and other professional advisers;
public registers and official sources;
credit reference, investigation, verification, tracing or business information providers;
documents, correspondence, payment records and other evidence supplied in connection with a matter.
- Why we use personal information
We may use personal information to:
assess, manage and progress debt recovery matters;
verify debts, parties, addresses and other relevant facts;
communicate with clients, assignors, debtors, representatives and third parties;
trace individuals or businesses where lawful and appropriate;
prepare, issue, support or manage pre-action correspondence, claims, settlements, judgments or enforcement;
deal with assigned debts in GGIL’s own name;
instruct or liaise with courts, process servers, enforcement agents, tracing agents, solicitors, counsel, insolvency practitioners and other relevant third parties;
keep records of instructions, decisions, payments, recoveries, complaints and outcomes;
comply with legal, regulatory, tax, accounting and record-keeping obligations;
protect our legal, commercial and legitimate interests;
prevent fraud, misuse, unlawful activity or abuse of process.
- Our lawful basis for using personal information
Depending on the circumstances, we may rely on one or more of the following lawful bases:
Contract: where processing is necessary to provide services, manage instructions or perform an agreement with a client or assignor.
Legal obligation: where we need to comply with legal, tax, accounting, court, regulatory or statutory obligations.
Legitimate interests: where processing is necessary for our legitimate business interests, or those of our clients or assignors, including debt recovery, tracing, dispute resolution, enforcement, litigation support, fraud prevention, record keeping and the protection of legal and commercial rights.
Consent: where consent is required by law. Where we rely on consent, it may be withdrawn at any time.
We may process personal information relating to debtors and third parties without their consent where we have a lawful basis to do so.
- Assigned debts
Where a debt, claim, judgment debt, contractual right or other enforceable legal right has been assigned to GGIL, we may process personal information as an independent data controller in connection with the assigned matter.
In those circumstances, GGIL may use personal information to assess, pursue, settle, litigate, enforce, administer or otherwise deal with the assigned debt in its own name and for its own account.
- Sharing information
We may share personal information where necessary and lawful with:
clients, assignors and authorised representatives;
debtors, guarantors and their representatives;
courts, tribunals and enforcement bodies;
process servers, enforcement agents, High Court Enforcement Officers and certificated enforcement agents;
tracing agents, investigation providers, credit reference agencies and verification providers;
solicitors, counsel, insolvency practitioners, accountants and other professional advisers;
payment providers, banks and financial institutions;
IT, hosting, email, storage, administrative and business support providers;
regulators, public authorities, law enforcement bodies or other parties where required or permitted by law.
We do not sell personal information.
- International transfers
Most of our processing is carried out in the United Kingdom. Where personal information is transferred outside the UK, we will take steps to ensure that appropriate safeguards are in place where required by data protection law.
- How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including the management of recovery matters, record keeping, limitation periods, legal claims, complaints, accounting and compliance.
The retention period will depend on the nature of the matter and the information involved. In many cases, matter records may be retained for up to six years after conclusion, or longer where required for legal, enforcement, dispute, accounting or regulatory reasons.
- Your rights
Depending on the circumstances, you may have rights to:
ask for access to your personal information;
ask for inaccurate information to be corrected;
ask for information to be erased;
ask us to restrict how we use your information;
object to certain processing;
ask for a copy of information in a portable format;
withdraw consent, where processing is based on consent;
complain about how we handle your personal information.
These rights are subject to legal limits and exemptions. For example, we may not be required to erase information where it is needed for legal claims, debt recovery, enforcement, compliance or record-keeping purposes.
To exercise your rights, please contact us using the details above. We may ask for information to confirm your identity before responding.
- Data protection complaints
If you are concerned about how we have handled your personal information, please contact us first so that we can review and respond to your concern.
Data protection complaints should be sent to:
Email: mh@gisbylegal.com
Post: Gisby Legal, PO Box 153, Ilminster, TA20 9EF, England
Please include your name, contact details, the matter reference if known, and a clear summary of your concern.
We will acknowledge receipt of a data protection complaint within 30 days. We will then investigate and respond without undue delay, including making appropriate enquiries and telling you the outcome.
You also have the right to complain to the Information Commissioner’s Office.
- Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
- Changes to this Privacy Notice
We may update this Privacy Notice from time to time. The latest version will be published on our website.
Last updated: June 2026