We may obtain or collect your personal information through various means, including from:

• Local authorities (data controller)
• You, through our interactions with you (data subject)
• Appointed representatives acting on your behalf (data processor)
• Enforcement Agents (data controller and/or processor)
• Products and services (sub-processors) used to assist with the collection of outstanding debts

Additional data may be collected via email, electronic correspondence, telephone, direct contact, or where you voluntarily submit information. We only collect data that is relevant and necessary for the services we provide and to correctly identify you.

Types of personal data we collect may include:

• Contact details: full name, home address, address history, email address, home and mobile telephone numbers
• Date of birth
• Financial information, including income and expenditure details
• Information from Credit Reference Agencies, the electoral roll, court records, judgments, bankruptcies and publicly available sources
• Family, lifestyle or social circumstances (typically collected during income and expenditure assessments)
• Employment details and status
• Personal data of appointed representatives acting on your behalf
• Visual and audio data collected via Body Worn Video (BWV) and audio recording equipment
• Personal data arising from debt collection and enforcement processes, including special category data relating to physical or mental health where relevant
• IP address
• Social media identifiers (e.g. LinkedIn or Facebook, where relevant)
• Information relating to complaints, judicial service enquiries or investigations
• Hire Purchase Insurance (HPI) checks
• Vehicle registration and keeper details
• Recruitment data, including job applications, CVs and references

CSA Collect Ltd may obtain additional special category personal data during enforcement processes, including information relating to physical or mental health conditions or criminal proceedings, where required for regulatory compliance or vulnerability assessments.

We recognise the importance of identifying vulnerability and may collect sensitive personal data for this purpose. Such data will only be used to ensure fair treatment and appropriate case management and may be shared with the instructing authority where necessary.