← Back to DebtPool

Privacy Policy

Last updated 25 June 2026

Debt Pool Ltd ("DebtPool", "we", "us") provides a platform that pools unpaid invoice cases from small UK businesses ("Subscribers") so they can be referred to a professional debt recovery partner. This policy explains what personal data we collect, why, and how long we keep it.

Information we collect

From Subscribers, we collect account details (company name, contact email and phone) needed to operate your subscription.

From Subscribers, about the person or business who owes money on a case ("Customers"), we collect only what's needed to identify and recover the case: name, address, contact details, and the balance owed. Date of birth and email are optional and only collected where the Subscriber has them.

How we use it

We use Case and Customer data to operate the Pool and Dispatch process: matching cases for recovery, sharing them with our recovery partner, and keeping Subscribers updated on progress. We process this data on the basis of our legitimate interests, and those of our Subscribers, in recovering genuinely owed debts.

Who we share it with

Cases are shared with our professional recovery partner, a UK debt recovery agency, via a secure file exchange, so they can carry out doorstep visits, tracing and — where needed — legal escalation on a Subscriber's behalf. We never sell Customer or Subscriber data to third parties.

Payments (Subscriber subscriptions, case fees, and Customer repayments) are processed by Stripe, our payment processor. Stripe only receives the data needed to process a payment.

How long we keep it

We retain Case and Customer data for 6 years from the date a Case is closed, in line with UK limitation periods and standard accounting record retention. Subscriber account data is retained for as long as the account is active, plus the same 6-year period afterwards.

Your rights

Under UK GDPR, you have the right to access, correct, or request erasure of your personal data, and to object to or restrict how we process it. To exercise any of these rights, contact us at support@debtpool.app.

Security

Data is encrypted in transit and access to Case and Customer data is restricted so that a Subscriber can only ever see their own cases.

Changes to this policy

We may update this policy from time to time. We'll post any changes here with an updated date at the top.

Contact

Questions about this policy or your data can be sent to support@debtpool.app.