Privacy Policy

Who we are

Sam It Right provides debt recovery and case-management services from Hackney, London, United Kingdom. For data-protection questions or requests, email info@samitright.com.

Information we collect

Depending on your relationship with us, we may process:

• names, contact details, business details and account information;
• debtor contact and identity information supplied by clients;
• case details, balances, dates, communications and recovery history;
• contracts, invoices and other documents uploaded to the portal;
• technical, authentication and security records needed to operate the service; and
• website usage information including pages viewed, time, referring website, campaign tags, device category and approximate country, region or city. If you are signed in, usage may be associated with your account.

We do not store raw visitor IP addresses or create browser fingerprints for website analytics.

How and why we use information

We use personal information to assess and manage enquiries and recovery cases, provide and improve the portal, communicate with clients and relevant parties, protect accounts, keep business records, prevent fraud and comply with legal duties.

Our lawful bases may include performing a contract or taking requested pre-contract steps, our legitimate interests in operating and securing a debt-recovery service and managing valid claims, compliance with legal obligations, and consent where we specifically request it. Where we rely on legitimate interests, we consider the impact on the people concerned.

Information about a debtor may come from one of our clients rather than directly from that person.

Who we share information with

Where necessary, information may be shared with our hosting, database, authentication, storage, IT and professional service providers; parties involved in a recovery matter; and courts, regulators, law-enforcement bodies or other authorities where required or permitted by law. We require service providers to protect the information they handle for us.

If information is processed outside the United Kingdom, we use an appropriate lawful safeguard where required.

How long we keep information

We retain information only for as long as reasonably needed to provide the service, manage or defend legal claims, meet legal and accounting duties, resolve disputes and maintain security. Website analytics records are automatically removed after 90 days. Other periods depend on the record and case. Information is then securely deleted or anonymised where appropriate.

Your rights

Depending on the circumstances, you may have rights to access, correct or erase your information; restrict or object to its use; receive portable information; and withdraw consent where processing relies on consent. We do not make decisions with legal or similarly significant effects using solely automated processing.

Contact us to exercise a right. You may also complain to the Information Commissioner’s Office.

Security and changes

We use proportionate technical and organisational safeguards, but no online system can be guaranteed completely secure. We may update this policy when our services or legal obligations change; the date above shows the latest revision.