Your Privacy Matters to Us.

We’re committed to protecting your personal and financial information — and being clear about how it’s used.

Before Cura Care Online buys your debt

So that Cura Care Online may acquire your liability from the original lender, we may access some of your personal data.

Cura may use this to conduct due diligence, data verification, credit checks and pricing activities. 

When using your personal data for this purpose, Cura Care Online is a data processor and may only process your personal data on the written instructions of the original lender.

What are our lawful basis?

Debt recovery

Article 6(1)(b) – performance of a contract

Cura Care Online purchased your debt from your original lender. This means that the legal rights to recover the debt under your original credit agreement with the lender have been transferred to Cura Care Online. Cura Care Online processes your personal data to comply with the contractual obligations and counter-obligations under the transferred agreement.

Article 6(1)(c) – to comply with legal obligations related to the Agreement:

  • Consumer Credit Act 1974

  • Financial Services & Markets Act 2000 & 2023

  • FCA Handbook Principles 1 to 11

  • Principles of Reciprocity which are the rules established by the Steering Committee on Reciprocity

Article 6(1)(a) consent and Article 9 (2)(a) – explicit consent for sensitive data, e.g. health.

Where you tell us about something sensitive, for example, your physical or mental health and this has an impact on your ability to repay your debt we will ask you if we can retain the sensitive information and share it with third parties where necessary.

If you send us sensitive information such as physical or mental health information in writing, by post or email, and, the information has an impact on your ability to repay your debt, this will be taken as your explicit consent to allow us to record and use this sensitive information about you. We will only record what is necessary to help us to act in your best interests and offer any additional support you may need.

If you change your mind about us using your sensitive information, please let us know by contacting us using any of our contact methods. Please be aware that doing this may prevent us from acting in your best interests and offering you any additional support you may need.

Debt purchase

Article 6(1)(b) – performance of a contract

Article 6(1)(f) – legitimate interests

Cura Care Online is a data processor and may only process your personal data on the written instructions of the original lender for the purposes of potential debt purchase.

Legal, Audit, Risk and Compliance

Article 6(1)(c) – legal obligation under:

  • Consumer Credit Act 1974

  • Financial Services & Markets Act 2000 & 2023

  • FCA Handbook Principles 1 to 11

  • Principles of Reciprocity

  • UK GDPR

  • Data Protection Act 2018

Data rights

Article 6(1)(c) – legal obligation under Data Protection Act 2018 and UK GDPR

Article 6(1)(a) consent and Article 9 (2)(a) – explicit consent for sensitive data, e.g. health.

Supplier Management

Article 6(1)(b) – performance of a contract

Cura Care Online may use a third party to deliver the best possible services. If a third supplier processes your personal data, we will have a written agreement in place to make sure they agree to protect your personal data in line with Data Protection laws.

Complaints Process

Article 6(1)(b) – performance of a contract

Article 6(1)(c) – legal obligation under:

  • Consumer Credit Act 1974

  • Financial Services & Markets Act 2000 & 2023

  • FCA Handbook Principles 1 to 11

  • Principles of Reciprocity

  • UK GDPR

  • Data Protection Act 2018

Article 6(1)(a) consent and Article 9 (2)(a) – explicit consent for sensitive data, e.g. health.

Visitor safety and security

Article 6(1)(c) – legal obligation under Health and Safety at Work Act 1974

Improve our services to you (including customer surveys)

Article 6(1)(f) – legitimate interests

We use personal data to test, train, monitor, audit our policies, processes and systems to and improve the quality of our services, including staff training. We conduct data analysis to identify and monitor risks and market trends. This activity may involve using your personal data only where the same cannot reasonable be achieved by using test data or anonymised data.

Website and Portal improvement

Article 6(1)(f) – legitimate interests

We use personal data to help us to understand behaviours across our website and customer portal so that we can maintain and improve our online services to you.

How long do we keep your personal data?

We will keep your personal data in accordance with GDPR protocols and only use this for as long as is necessary to fulfil its purpose.

What We Collect

As part of managing your account and supporting your financial recovery, Cura Care Online and our service provider (Evolve Servicing Limited) may collect:

  • Your name, contact information, and address

  • Your account reference and payment details

  • Relevant financial or insolvency data related to your IVA or DMP

  • Any communication history or correspondence

  • Credit file information reported by third-party agencies (Experian, Equifax, TransUnion)

We only collect the information necessary to manage your account and communicate with you effectively.

Why We Collect It

We collect and process your personal data to:

  • Support the delivery of your existing debt solution

  • Work with your insolvency practitioner or plan provider

  • Keep your credit file up to date

  • Ensure secure and consistent communication

  • Comply with legal and regulatory obligations (including FCA guidelines)

We do not use your data for marketing, advertising, or sharing with any third-party agencies not directly involved in your financial plan.

How We Protect Your Data

Cura Care Online is fully committed to data protection. We:

  • Store your data on secure, encrypted systems

  • Limit access to authorised team members only

  • Work only with FCA-authorised partners like Evolve Servicing

  • Follow GDPR standards and UK data laws

  • Regularly review our policies and systems to ensure compliance

If you’d like to know more about our policies, you can download our full Privacy Notice below.

Who We Share Data With

To manage your account responsibly, we may share relevant data with:

  • Evolve Servicing Limited — our servicing provider

  • Your Insolvency Practitioner or Debt Management Plan provider

  • Regulated UK credit reference agencies

  • Legal authorities or regulators, if required by law

We do not sell, rent, or share your data for marketing purposes.

Your Rights Under GDPR

Under UK data protection law (GDPR), you have the right to:

  • Request a copy of the personal data we hold about you

  • Ask us to correct inaccurate information

  • Ask us to delete your data in some circumstances

  • Object to certain processing (such as automated profiling)

  • File a complaint if you believe your data is being misused

To exercise these rights, please contact us at:
support@curacareonline.co.uk

Questions or Concerns?

If you have any questions about how we handle your data, or would like to request access, corrections, or deletion:

support@curacareonline.co.uk
Cura Care Online, Da Vinci Suite, Pera Business Park, Nottingham Road, Melton Mowbray, England, LE13 0PB