Privacy Policy
How we collect, use and protect your personal data — and your rights.
Last updated: 18 July 2026
This policy explains how Nova Websites (“Creditor Advice”, “we”, “us”) handles personal data when you use creditoradvice.co.uk or submit an enquiry. We are the data controller for the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018).
Who we are: Nova Websites, a company registered in England & Wales (company number [company number]), registered office [registered address]. ICO registration [ICO reference]. Data protection contact: [email protected].
The data we collect
- Enquiry details you give us via the “Get matched” form: your name, company, email, phone, the amount owed, debtor type and any details of the debt you choose to share.
- Contact you send us by email or phone.
- Technical data automatically collected when you visit, such as IP address, browser type and pages viewed, via our hosting/CDN provider and (if you consent) advertising cookies.
How and why we use it
- To respond to your enquiry and assess your debt-recovery options.
- To introduce you, where appropriate and with your agreement, to a suitable third-party debt collection agency.
- To operate, secure and improve the website.
- To show advertising, where you have consented to advertising cookies.
Lawful bases
We rely on your consent (for enquiries you submit and for advertising cookies) and our legitimate interests (to run and secure the site and respond to contact). You can withdraw consent at any time — see “Your rights” below.
Who we share it with
- Debt collection agencies. If you ask to be matched, we share the enquiry details you provided with a vetted agency so they can help. We only do this with your agreement, and you are under no obligation to proceed. Those agencies are separate data controllers responsible for their own use of your data.
- Service providers (processors). Our content and enquiry platform (NovaPortal) and our hosting/CDN provider (Cloudflare) process data on our behalf under contract.
- Advertising. Google, as our advertising partner, may process data for ad delivery where you consent — see our Cookie Policy.
- Legal. Where required by law or to protect our rights.
We never sell your personal data.
How long we keep it
We keep enquiry data only as long as needed to help with your matter and for a reasonable period afterwards (typically no more than [retention period]), then delete it. Technical logs are kept for a short period for security.
International transfers
Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK adequacy regulations or standard contractual clauses).
Your rights
Under UK GDPR you have the right to access, correct, delete or restrict your data, to object to processing, to data portability, and to withdraw consent. To exercise any of these, email [email protected].
You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113, though we’d appreciate the chance to help first.
Cookies
We use cookies as described in our Cookie Policy. In the UK and EEA, advertising cookies load only after you consent through our cookie consent manager.
Changes
We may update this policy from time to time; the “last updated” date above shows the latest version.