Rezolva Privacy Notice

Rezolva Limited (“Rezolva”, “we”, “us”) is a company registered in England and Wales (company number 16659319) with its registered office at 5 Strand Court, Bath Road, Cheltenham, GL53 7LW. Rezolva is the controller for the personal information described in this notice. Rezolva Connect is the secure portal through which our service is delivered.

Rezolva provides commercial (business-to-business) debt resolution and recovery services. We do not provide consumer debt collection and we do not act in relation to regulated consumer credit or consumer hire agreements.

This notice covers:

• client businesses, their directors, employees and authorised portal users;
• introducing brokers and brokerage personnel, and credit insurer contacts;
• debtor businesses, their directors, employees, guarantors and authorised representatives;
• individuals named in invoices, contracts, correspondence and other documents supplied to us;
• website visitors, enquirers and prospective clients; and
• suppliers and professional contacts, including solicitors, agents and insolvency practitioners.

You can contact us about this notice at privacy@rezolva.co.uk or by writing to the registered office above marked “Data Protection”.

Most information about a debtor business and the people connected with it is not obtained from that business directly. We normally receive it from our client (the creditor) or from a broker acting for that client when a debt is referred to us.

• our client (the creditor) and its authorised users;
• a brokerage nominated by the client, and credit insurers where relevant;
• the debtor business and its representatives, including through the secure debtor workspace;
• solicitors, courts, enforcement officers and insolvency practitioners;
• Companies House and other public registers;
• documents supplied to us, such as invoices, contracts, statements, delivery records and correspondence; and
• our own systems, including portal usage, authentication and security logs.

• identity and contact details: names, job titles, business and correspondence addresses, email addresses and telephone numbers;
• business and case information: company names and numbers, case references, invoices, contracts, statements, balances, interest, recovery costs, payment history and case status;
• correspondence and evidence: emails, letters, notes of calls, uploaded documents and information you submit through the portal;
• dispute, payment plan, promise-to-pay and settlement information, including reasons given and supporting evidence;
• insolvency information where a debtor becomes subject to a formal insolvency process;
• account and security information: credentials handled by our authentication provider, secure access links, sign-in events, audit logs and IP address or device information recorded with certain actions;
• electronic acceptance and signature evidence for agreements and portal terms; and
• payment reference and remittance information relating to bank transfers.

We do not need or ask for health, medical or other special category information. If you tell us about a health condition or another sensitive circumstance in order to explain a repayment difficulty, please share only what is necessary. Where such information is provided, access inside Rezolva is restricted and it is not shared with brokers by default.

We do not collect card details. Rezolva does not process card payments or Direct Debit instructions. Payments are made by bank transfer to our client account, or through a bank-hosted Open Banking payment journey where the debtor's banking credentials are entered with their own bank and are never seen by Rezolva.

Where we rely on legitimate interests, we have considered the interests, rights and freedoms of the people concerned. Our assessment is recorded internally and can be summarised as follows.

• Debt resolution: our interest, and our client's interest, is in recovering sums lawfully due under a business transaction. Processing is limited to the case, contact is professional and proportionate, the information used is business information, and the individuals concerned are contacted in a business capacity.
• Broker visibility: our interest is in enabling a client's nominated adviser to support the client. Access only arises where the client has nominated the brokerage, is limited to that client's portfolio, is set at a visibility level the client controls, can be revoked, and is logged.
• Security and audit logging: our interest is in protecting case information and demonstrating accountability. Logs are proportionate and access is restricted.

You can ask us for more information about any of these assessments, and you can object to processing based on legitimate interests (see section 9).

• the creditor client and its authorised portal users;
• the debtor business and its authorised representatives;
• a brokerage nominated by the client, at the visibility level the client has set, and a relevant credit insurer;
• solicitors, counsel, courts, enforcement officers and insolvency practitioners where a matter is escalated;
• banks in connection with bank transfers and remittances;
• our technology suppliers, who act as processors under written terms — these currently include our hosting and application platform, our database, authentication and file-storage provider, our email delivery provider and our error-monitoring tooling;
• professional advisers, insurers and auditors; and
• regulators, law enforcement and other bodies where we are required or permitted to disclose.

Supplier fact to be finalised: the named list of processors, their roles and their processing locations is maintained in our internal subprocessor register. We will name the principal providers in this section once each register entry has been confirmed against the relevant supplier contract. We have not guessed at any provider name here.

We do not sell personal information and we do not share it for third-party marketing.

Our service is operated for the UK market. Some of our technology suppliers may process information outside the UK. Where that happens, we require an appropriate safeguard recognised under UK data protection law, such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission standard contractual clauses, together with any additional measures needed.

Supplier fact to be finalised: our international transfer register records, for each supplier, the countries involved and the transfer mechanism relied on. We will state the specific countries and mechanisms in this section once every entry is confirmed. You can ask us for the current position at privacy@rezolva.co.uk.

These periods reflect the limitation period for contractual claims in England and Wales and our statutory record-keeping obligations. Where a legal hold applies, records are retained until the hold is lifted. Retention periods are held in our system and can be reviewed by our administrators; the position published here is the operative one.

Subject to the conditions in UK data protection law, you have the right to be informed, to request access to your personal information, to have inaccurate information corrected, to request erasure, to request restriction of processing, to data portability where it applies, and to object to processing based on legitimate interests, including profiling.

Some rights are qualified. In particular, we may need to keep case, accounting, audit and legal records in order to comply with legal obligations or to establish, exercise or defend legal claims, even where erasure is requested. Where we cannot fully meet a request, we will explain why.

To make a request, contact privacy@rezolva.co.uk. We will normally respond within one month and will tell you if we need to extend that period. We may need to verify your identity first.

If you are unhappy with how we have used your personal information, please use our Data Protection Complaints Procedure. We will acknowledge your complaint within 30 days, investigate it appropriately, keep you informed and tell you the outcome without undue delay.

You can also complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We would appreciate the chance to deal with your concern first.

We do not make decisions producing legal effects, or similarly significant effects, on you by solely automated means. Settlements, Final Demand issue, legal escalation, write-off and material external spend all require a decision by a person.

Rezolva Connect includes an assisted case-summary feature. Where it is used, a large language model provided by our AI supplier generates a draft narrative summary of case information for internal and client reporting. Output is a draft only: it may contain errors, must be checked by a member of the Rezolva team, is not legal advice and is never the sole basis for a decision about a debt. Case information is not used by us to train third-party models.

Information marked as vulnerability or sensitive circumstance information is excluded from assisted summarisation unless a Rezolva administrator has expressly approved its inclusion for a specific purpose.

• Clients: if we do not receive the company, contact and supporting information we request, we cannot open an account or accept a referral.
• Debtors: you are not obliged to use the secure workspace. If you do not provide information, we will continue to deal with the matter on the information we hold, which may not reflect your position, and the matter may be escalated.
• Everyone: if we cannot verify your identity, we may not be able to act on a rights request.

Our Cookie Notice explains the cookies and similar technologies used on the Rezolva website and in Rezolva Connect, including the storage strictly necessary to keep you signed in.

This notice is versioned. The version, effective date and last-updated date appear at the top of this page. Where a change is material, we will bring it to the attention of affected users through the portal or by email.