Privacy Policy
Effective: 1 January 2026 · Last reviewed: 1 January 2026
1. Introduction
Sterling & Crowne Recovery Advisory (“Sterling & Crowne”, “we”, “our”) is the controller of personal data submitted through this website. This Privacy Policy explains what information we collect, why we collect it, how it is handled, and the rights you have under applicable data protection laws including the EU/UK General Data Protection Regulation (GDPR).
By submitting information through our intake form or contacting us by email, you confirm that you have read and understood this policy.
2. Information we collect
When you submit a case review request we collect the information you voluntarily provide:
- Full name, email address and phone number (with country code)
- Issue type, estimated financial loss range and documentation status
- Free-form description of your case
- IP address, browser user-agent and submission timestamp (for security and fraud prevention)
We do not request, store or process payment-card data, government-issued identification, or banking credentials through this website.
3. Lawful basis for processing
We process personal data on the following GDPR lawful bases:
- Consent — where you explicitly submit information through our intake form
- Legitimate interests — for fraud prevention, system security, and quality of service
- Legal obligation — where required by applicable financial, tax or anti-money-laundering regulations
4. How we use your information
- To review and assess the procedural viability of your case
- To contact you regarding your submission
- To maintain internal records of case assessments
- To improve our processes and prevent abuse
Your information is reviewed only by specialists assigned to your case and authorised compliance personnel.
5. Information sharing
We do not sell personal data. We do not share it with third parties for marketing purposes. Limited disclosure may occur in the following circumstances:
- Where you explicitly authorise such disclosure in writing
- To process providers (cloud hosting, email delivery, IT security) under strict data-processing agreements
- Where required by court order or competent regulatory authority
6. Data retention
Case intake data is retained for as long as necessary to provide the requested service and for a further period required by applicable record-keeping obligations — typically not exceeding seven years from the date of last activity. Inactive case enquiries are securely deleted thereafter.
7. Security
We implement technical and organisational safeguards aligned with ISO 27001 principles, including encryption in transit (TLS 1.2+), encryption at rest, access controls based on role and necessity, and regular security reviews.
8. Your rights
Under GDPR you have the following rights with respect to your personal data:
- Access — obtain a copy of the personal data we hold
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion subject to legal retention obligations
- Restriction — limit how we process your data
- Portability — receive your data in a structured machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — at any time, without affecting prior lawful processing
To exercise these rights, contact privacy@sterlingcrowne.example. We will respond within 30 days.
9. International data transfers
Where personal data is transferred outside the European Economic Area or United Kingdom, we rely on appropriate safeguards including Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner's Office.
10. Children's privacy
Our services are not directed at minors. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that such information has been provided, we will delete it promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Effective” date at the top reflects the most recent revision. Substantive changes will be communicated through this page.
12. Contact
Data protection enquiries: privacy@sterlingcrowne.example
Postal address: 1 Finsbury Avenue, London EC2M 2PA, United Kingdom
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (e.g., the UK Information Commissioner's Office, or the supervisory authority of your EU member state).