Background

Confident Cashflow understands that your privacy is important and that you care about how your personal data is used and shared. We respect the privacy of everyone who visits our website, contacts us, and works with us as a client.

We are committed to respecting, securing and protecting your privacy and personal data, and to being transparent about what we collect and how we use it.

This policy covers our website and mailing list, and the personal data we collect and use when we provide our credit control, Terms and Conditions drafting, and credit management services. It sets out what personal data we collect, how we use it, how we keep it secure, how long we keep it, and your legal rights.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is NK Credit Consultancy Ltd. Where we process debtor or customer data on behalf of a client as part of our credit control service, we act as a data processor for that client, and our client remains the data controller for that data.

We are registered with the Information Commissioner as a Data Controller and Processor under registration number ZA762032.

Who We Are

We are NK Credit Consultancy Ltd trading as Confident Cashflow. Our registered office is 75 St Austell Way, Swindon, Wiltshire, SN2 2DG.

You can contact us by:

• Telephone – 07900 834802
• Email – enquiries@confidentcashflow.com
• Post – Data Protection Officer, 75 St Austell Way, Swindon, SN2 2DG

Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have several rights about your personal data, which this policy and our use of your data have been designed to uphold:

• to access your information and to get information about its use
• to have your information corrected
• to have your information deleted
• to restrict the use of your information
• to receive your information in a portable format
• to object to the use of your information
• to withdraw your consent to the use of your information
• to object to automated decision making and profiling

If there are any changes to your details that we need to reflect, if you want to check the accuracy of the details we hold about you, or if you have any other questions about this privacy notice, please contact us using the details above.

Should you want to complain about our use of your data, or exercise any of your rights, please contact us using the details above and we will do our best to sort it out.

If we are unable to help, or you aren’t satisfied with our response, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office (ICO). The ICO can be contacted:

• By post – The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
• By telephone – 0303 123 1113
• ico.org.uk

What Data Do We Collect From You?

Depending on how you use our website and services, we may collect some or all of the following personal data from you (please also see the section on cookies below):

• Contact information such as your name, email address, postal address, and telephone number.
• System information, such as IP address, browser type and version, and operating system.
• Information about your activity on our website.
• Other publicly available information, including anything you have shared via a public platform such as LinkedIn or Facebook.
• Where we are engaged to provide credit control, Terms and Conditions drafting, or credit management services: your business and contact details, information about your processes and business relevant to the work, and, where relevant, financial and account information such as invoice and payment details.
• Where we provide credit control services on your behalf: details of your customers or debtors that we need in order to carry out that work.
• Records of calls, meetings, and correspondence relating to the services we provide.

Where we record a call with you, we will always ask for your consent first and explain how the recording will be used before we start.

How We Use Your Data

All personal data is processed and stored securely. We do not keep your personal data for any longer than necessary, taking into account the reason it was first collected. Our retention periods are set out below.

Our use of your data will always have a legal basis (see the next section), and we may use your data for the following purposes:

• Providing and managing your access to our website and services.
• Delivering the credit control, Terms and Conditions drafting, or credit management services you have engaged us for.
• Communicating with you, including replying to your emails and enquiries.
• Market research.
• Marketing to you by email, post, or SMS about services you have expressed an interest in. You will always be able to unsubscribe easily.
• Analysing use of our website and services, and gathering feedback, so we can improve our website and your experience.

You will always be able to unsubscribe or opt out of marketing at any time.

Legal Basis

We will only process your data where we have a legal basis under the UK GDPR to do so.

Our use of your personal data will always have a legal basis, because:

• it is necessary for our performance of a contract with you; or
• you have consented to our use of your personal data; or
• we are complying with a legal obligation; or
• it is necessary in pursuit of our legitimate interests, as detailed below.

Where our processing of your data is based on our legitimate interests, we will have ensured that this is necessary, and we will not do so where our interests are overridden by yours.

Our legitimate interests include:

• selling and supplying our services to customers and potential customers;
• handling customer and potential customer contacts, queries, complaints, or disputes;
• understanding our customers’ or potential customers’ behaviour, activities, and preferences;
• improving our products and services, including using AI-assisted tools to support our work efficiently and to a high standard;
• promoting, marketing, and advertising our services.

How We Use AI Tools

We use different third-party AI-assisted tools to help us with parts of our work, including recording and transcribing client calls, and drafting Terms and Conditions. Where we can, we remove or replace names and contact details before sharing information with these tools, and we ask you not to name other clients or third parties on our calls together.

Where the setting is available to us, we switch off any option that would allow a tool’s provider to use our conversations to train its underlying models.

Using these tools may involve transferring personal data outside the UK. Where this happens, we only use providers who offer appropriate safeguards, such as the UK’s International Data Transfer Addendum to the EU’s standard contractual clauses, or who operate in a country the UK government has approved as offering adequate protection.

We do not use AI tools to make any decision about you without a person reviewing it.

How Long We Keep Your Data

We do not keep personal data for any longer than we need it, taking into account the reason it was collected. Different types of information are kept for different periods, set out below.

• Recordings of client calls are deleted once we have checked the written record of the call.
• Working notes, call transcripts, and any records held in the AI tools we use for a Terms and Conditions project are deleted once you have signed off your Terms and Conditions, or six months after our last contact with you if we have not received a sign-off.
• We keep your final Terms and Conditions and related client records for six years after we complete your project, in case of any queries or legal claims. If you come back to us after that time for an update, we may ask you to confirm your details again.
• Reference copies of documents we keep for our own drafting library have all names and contact details removed.
• When you contact us about a service, we will usually add you to our mailing list based on our legitimate interest in keeping you updated about services related to your enquiry. Every marketing email includes an easy way to unsubscribe, and we remove you straight away if you do. We also review our list regularly and remove anyone who has not opened or clicked an email from us for two years.
• If we do not hold an email address for you, for example following a phone enquiry that does not lead to us working together, we keep your enquiry details for two years from your last contact with us.
• For any other personal data not covered by a specific period above, we keep it for two years from the date we complete our work together.

Where we have a legal obligation to keep information for longer than the periods above, we will delete it as soon as that obligation is discharged.

We may also keep your data for longer if we are involved in a legal claim or dispute relating to it. Where this is the case, we will delete it as soon as the claim or dispute is resolved.

Storing and Sharing Your Data

Data security is very important to us, and we take appropriate security measures to safeguard and secure the data we collect and hold.

We try to keep your personal data within the UK wherever possible. In limited and necessary circumstances, such as where a service provider we use is based overseas, your information may be transferred outside the UK. Where this happens, we will put appropriate protections in place. We will only move data to countries or organisations:

• where the UK government has deemed their data protection measures to be adequate; or
• under a contract which includes the UK’s International Data Transfer Addendum to the EU’s standard contractual clauses, details of which are available from the ICO at www.ico.org.uk.

We will never sell or share your personal data with any third party unless:

• we contract with trusted service providers to provide goods and services on our behalf. These may include our customer relationship management (CRM) system, accounting software, AI-assisted tools used for call recording, transcription and drafting, payment processing, website hosting, search engine facilities, advertising, marketing, and IT systems. This will sometimes involve the transfer of your personal data to those providers;
• where we transfer your data to a trusted service provider, we check that they offer data protection and security measures to a standard we are satisfied with, and we put a data processing agreement in place, whether that is one we agree directly or one the provider makes available as standard, before we share your data with them;
• in certain limited circumstances we may be legally required to share your personal data, for example where we are involved in legal proceedings, or complying with a court order, regulatory requirement, or a government department with appropriate legal authority to compel us to do so.

Cookies

Like many other websites, ours uses cookies. Cookies are small pieces of information sent by an organisation to your computer or device and stored there to allow a website to recognise you when you visit. They help us collect statistical data about your browsing actions and patterns but should not contain personal data, other than the cookie itself, which is defined as personal data under GDPR.

All cookies used on our website are used in accordance with current cookie law.

By giving us your consent, you are allowing us to provide the best possible experience of our website. You may refuse consent to cookies, although certain parts of our website may then not function correctly. You can alter your browser settings to refuse all cookies.

There are four types of cookies:

• Strictly Necessary Cookies – these are essential to make a website work and to provide features you have asked for. Without these cookies, the website may not work as intended.
• Performance Cookies – these collect anonymous information about users for the purposes of tracking the performance of a website. Common uses include well-known analytics tools such as Google Analytics.
• Targeting / Advertising Cookies – these are like performance cookies, but they are used to track users’ behaviour, and that information is used on a per-user basis to advertise products or services based on the behavioural information collected.
• Functionality Cookies – these are used to automatically remember the choices users have made to improve their experience on the website, for example selecting a preferred layout or language.

The cookies we use on our website are:

Embedded Content from Other Websites

Articles on our site may include embedded content, such as videos, images, or articles. Embedded content from other websites behaves in exactly the same way as if you had visited that other website directly.

These other websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Changes to Our Privacy Notice

We may change this privacy notice from time to time, for example if the law changes or if the way we work changes. Any changes will be posted on our site. We recommend you check this privacy notice regularly to stay up to date.

This privacy notice was last updated in September 2026.